diff --git a/.gitignore b/.gitignore index 92ecd01728a1bd38fbae038e51cc610dbef0a1c0..49a9566b7be2a13e4a35e09df10c23e255f4f35c 100755 --- a/.gitignore +++ b/.gitignore @@ -18,6 +18,7 @@ code/eval/runtime code/eval/experiments/create_pdf.ipynb code/eval/charts/charts.ipynb +code/infrastructure/streaming/broker/log/* code/tests/bulk spielwiese diff --git a/README.md b/README.md index 220926e6d75b9d2ec0699563692421595bb26049..2863d8bf91fcd705913c140df0801758cfcb7ed4 100755 --- a/README.md +++ b/README.md @@ -2,91 +2,26 @@ Dieses Repo beinhaltet den Code und die Datasets zur Masterarbeit "..." von Sven-Ove Hänsel. -## Getting started -To make it easy for you to get started with GitLab, here's a list of recommended next steps. +# Troubleshooting -Already a pro? Just edit this README.md and make it your own. Want to make it easy? [Use the template at the bottom](#editing-this-readme)! +## Gleiche Datenmenge in DB bekommen +Publisher Script angepasst. Es gibt im Publisher die Möglichkeit die Anzahl an Zeilen pro Datei zu bestimmen. +Für alle auf z.B. 5000. Führt dazu, dass an jeden Subscriber die gleiche Anzahl an Zeilen gesendet wird. -## Add your files +Bei einfachem Stoppen nach einer Minute sind unterschiedliche viele Daten in den DBs. +-> Grund ist, dass wenn der Publisher fertig mit Übertragung ist, dass der SUbscriber die Connection zum Broker löscht +-> Fix durch keepalive im Connect zum Broker von XYZ (4) Stunden. +-> führte bei 100000 eingefügten Zeilen in Postgres dazu, dass keine Daten fehlen. -- [ ] [Create](https://docs.gitlab.com/ee/user/project/repository/web_editor.html#create-a-file) or [upload](https://docs.gitlab.com/ee/user/project/repository/web_editor.html#upload-a-file) files -- [ ] [Add files using the command line](https://docs.gitlab.com/ee/gitlab-basics/add-file.html#add-a-file-using-the-command-line) or push an existing Git repository with the following command: +### Das Problem das ich unterschiedlich viele Daten in den DBs hatte lag: +1. an der Größe der Message Queue. Die war zu gering und dadurch wurden Nachrichten gedroppt. Ist mir erst aufgefallen, als ich die Ergebnisse mal in Excel gegenüber gestellt habe und das Diff ermittelt habe. Es gab tatäschlich Lücken zwischen dem Cadets Datensatz und dem was eingefügt wurde. Das Log vom Broker war der erste Anhaltspunkt wo man mal früher hatte reingucken müssen. +-> Jetzt ist die Queue so lange wie der Datensatz selbst... sollte für meine kleinen Versuche reichen. Bei 100.000 Nachrichten wird jedenfalls nichts mehr gedroppt und der RAM vom Broker war etwa 250 MB von 9 GB. Der gesamte Datensatz sind knapp 40.000.000 Zeilen/Nachrichten. Da ich eh nur ein Experiment erstmal für zwei Stunden laufen lasse müsste das reichen. -``` -cd existing_repo -git remote add origin https://lab.it.hs-hannover.de/cwy-p8d-u1/ma_code.git -git branch -M main -git push -uf origin main -``` +2. die Subscriber haben sich vom Broker disconnected, weil ich keine "keep-alive" Zeit eingerichtet habe, wenn der Publisher nicht mehr sendet. Da der Publisher so viel früher fertig war, kam es dazu, das sich die Subscriber ebenfalls disconnecten (weil keine neuen Nachrichten durch Publisher bekommen), obwohl noch Nachrichten zu inserten sind. +-> keepalive Zeit ist nun 4 Stunden... also Open End um die Experimente durchlaufen zu lassen -## Integrate with your tools +3. fehlten in Postgres noch Kanten. Hab die nicht eingefügt, wodurch die Pfad Query nicht funktionieren konnte. Jetzt bekomme ich auch für die Pfad-Query ein Ergebnis in Postgres bzw das gleiche Ergebnis wie in den GraphDB. -- [ ] [Set up project integrations](https://lab.it.hs-hannover.de/cwy-p8d-u1/ma_code/-/settings/integrations) +Wie groß ist der Diff zwischen der Zeit, wenn alle Daten in DB? -## Collaborate with your team - -- [ ] [Invite team members and collaborators](https://docs.gitlab.com/ee/user/project/members/) -- [ ] [Create a new merge request](https://docs.gitlab.com/ee/user/project/merge_requests/creating_merge_requests.html) -- [ ] [Automatically close issues from merge requests](https://docs.gitlab.com/ee/user/project/issues/managing_issues.html#closing-issues-automatically) -- [ ] [Enable merge request approvals](https://docs.gitlab.com/ee/user/project/merge_requests/approvals/) -- [ ] [Set auto-merge](https://docs.gitlab.com/ee/user/project/merge_requests/merge_when_pipeline_succeeds.html) - -## Test and Deploy - -Use the built-in continuous integration in GitLab. - -- [ ] [Get started with GitLab CI/CD](https://docs.gitlab.com/ee/ci/quick_start/index.html) -- [ ] [Analyze your code for known vulnerabilities with Static Application Security Testing(SAST)](https://docs.gitlab.com/ee/user/application_security/sast/) -- [ ] [Deploy to Kubernetes, Amazon EC2, or Amazon ECS using Auto Deploy](https://docs.gitlab.com/ee/topics/autodevops/requirements.html) -- [ ] [Use pull-based deployments for improved Kubernetes management](https://docs.gitlab.com/ee/user/clusters/agent/) -- [ ] [Set up protected environments](https://docs.gitlab.com/ee/ci/environments/protected_environments.html) - -*** - -# Editing this README - -When you're ready to make this README your own, just edit this file and use the handy template below (or feel free to structure it however you want - this is just a starting point!). Thank you to [makeareadme.com](https://www.makeareadme.com/) for this template. - -## Suggestions for a good README -Every project is different, so consider which of these sections apply to yours. The sections used in the template are suggestions for most open source projects. Also keep in mind that while a README can be too long and detailed, too long is better than too short. If you think your README is too long, consider utilizing another form of documentation rather than cutting out information. - -## Name -Choose a self-explaining name for your project. - -## Description -Let people know what your project can do specifically. Provide context and add a link to any reference visitors might be unfamiliar with. A list of Features or a Background subsection can also be added here. If there are alternatives to your project, this is a good place to list differentiating factors. - -## Badges -On some READMEs, you may see small images that convey metadata, such as whether or not all the tests are passing for the project. You can use Shields to add some to your README. Many services also have instructions for adding a badge. - -## Visuals -Depending on what you are making, it can be a good idea to include screenshots or even a video (you'll frequently see GIFs rather than actual videos). Tools like ttygif can help, but check out Asciinema for a more sophisticated method. - -## Installation -Within a particular ecosystem, there may be a common way of installing things, such as using Yarn, NuGet, or Homebrew. However, consider the possibility that whoever is reading your README is a novice and would like more guidance. Listing specific steps helps remove ambiguity and gets people to using your project as quickly as possible. If it only runs in a specific context like a particular programming language version or operating system or has dependencies that have to be installed manually, also add a Requirements subsection. - -## Usage -Use examples liberally, and show the expected output if you can. It's helpful to have inline the smallest example of usage that you can demonstrate, while providing links to more sophisticated examples if they are too long to reasonably include in the README. - -## Support -Tell people where they can go to for help. It can be any combination of an issue tracker, a chat room, an email address, etc. - -## Roadmap -If you have ideas for releases in the future, it is a good idea to list them in the README. - -## Contributing -State if you are open to contributions and what your requirements are for accepting them. - -For people who want to make changes to your project, it's helpful to have some documentation on how to get started. Perhaps there is a script that they should run or some environment variables that they need to set. Make these steps explicit. These instructions could also be useful to your future self. - -You can also document commands to lint the code or run tests. These steps help to ensure high code quality and reduce the likelihood that the changes inadvertently break something. Having instructions for running tests is especially helpful if it requires external setup, such as starting a Selenium server for testing in a browser. - -## Authors and acknowledgment -Show your appreciation to those who have contributed to the project. - -## License -For open source projects, say how it is licensed. - -## Project status -If you have run out of energy or time for your project, put a note at the top of the README saying that development has slowed down or stopped completely. Someone may choose to fork your project or volunteer to step in as a maintainer or owner, allowing your project to keep going. You can also make an explicit request for maintainers. diff --git a/code/delete_container_data_folder.sh b/code/delete_container_data_folder.sh index 92c5e33569a77a5f40a49d122f27a3cf70036144..bee158cc5718bdd8cf62c7eede59a4085b2d1e47 100755 --- a/code/delete_container_data_folder.sh +++ b/code/delete_container_data_folder.sh @@ -11,7 +11,7 @@ folders=( for folder in "${folders[@]}"; do if [ -d "$folder" ]; then echo "Deleting folder: $folder" - sudo rm -rf "$folder" + rm -rf "$folder" else echo "Folder not found: $folder" fi diff --git a/code/eval/experiments/2024-03-03_15-32-29_window_size_500_memgraph/query_logs/memgraph/log/2024-03-03_14-33-03_query_log.log b/code/eval/experiments/2024-03-03_15-32-29_window_size_500_memgraph/query_logs/memgraph/log/2024-03-03_14-33-03_query_log.log deleted file mode 100644 index d363f63aded806fb3a641b691bb2cc5f0197d78c..0000000000000000000000000000000000000000 --- a/code/eval/experiments/2024-03-03_15-32-29_window_size_500_memgraph/query_logs/memgraph/log/2024-03-03_14-33-03_query_log.log +++ /dev/null @@ -1,429 +0,0 @@ -2024-03-03 14:33:03,182 - INFO - Connected to db... bolt://memgraph:7687 -2024-03-03 14:33:03,206 - INFO - Results for Query count: -2024-03-03 14:33:03,207 - INFO - Python executed in: 0.02143406867980957s -2024-03-03 14:33:03,207 - INFO - Number of rows 1 -2024-03-03 14:33:03,208 - WARNING - No internal DBMS metric available -2024-03-03 14:33:03,216 - INFO - Results for Query anc: -2024-03-03 14:33:03,216 - INFO - Python executed in: 0.008026123046875s -2024-03-03 14:33:03,217 - INFO - Number of rows not available -2024-03-03 14:33:03,217 - WARNING - No internal DBMS metric available -2024-03-03 14:33:03,220 - INFO - Results for Query desc: -2024-03-03 14:33:03,221 - INFO - Python executed in: 0.0031349658966064453s -2024-03-03 14:33:03,221 - INFO - Number of rows not available -2024-03-03 14:33:03,221 - WARNING - No internal DBMS metric available -2024-03-03 14:33:03,227 - INFO - Results for Query path: -2024-03-03 14:33:03,227 - INFO - Python executed in: 0.005055904388427734s -2024-03-03 14:33:03,228 - INFO - Number of rows not available -2024-03-03 14:33:03,228 - WARNING - No internal DBMS metric available -2024-03-03 14:33:03,232 - INFO - Results for Query 2-hop: -2024-03-03 14:33:03,233 - INFO - Python executed in: 0.003633260726928711s -2024-03-03 14:33:03,233 - INFO - Number of rows not available -2024-03-03 14:33:03,233 - WARNING - No internal DBMS metric available -2024-03-03 14:38:03,786 - INFO - Results for Query count: -2024-03-03 14:38:03,786 - INFO - Python executed in: 0.005158185958862305s -2024-03-03 14:38:03,787 - INFO - Number of rows 1 -2024-03-03 14:38:03,787 - WARNING - No internal DBMS metric available -2024-03-03 14:38:03,831 - INFO - Results for Query anc: -2024-03-03 14:38:03,831 - INFO - Python executed in: 0.043836355209350586s -2024-03-03 14:38:03,832 - INFO - Number of rows not available -2024-03-03 14:38:03,832 - WARNING - No internal DBMS metric available -2024-03-03 14:38:18,618 - INFO - Results for Query desc: -2024-03-03 14:38:18,620 - INFO - Python executed in: 14.786220073699951s -2024-03-03 14:38:18,621 - INFO - Number of rows 64450 -2024-03-03 14:38:18,622 - WARNING - No internal DBMS metric available -2024-03-03 14:38:18,695 - INFO - Results for Query path: -2024-03-03 14:38:18,695 - INFO - Python executed in: 0.07282137870788574s -2024-03-03 14:38:18,696 - INFO - Number of rows 1 -2024-03-03 14:38:18,696 - WARNING - No internal DBMS metric available -2024-03-03 14:38:23,177 - INFO - Results for Query 2-hop: -2024-03-03 14:38:23,178 - INFO - Python executed in: 4.4806718826293945s -2024-03-03 14:38:23,179 - INFO - Number of rows 29852 -2024-03-03 14:38:23,179 - WARNING - No internal DBMS metric available -2024-03-03 14:43:04,702 - INFO - Results for Query count: -2024-03-03 14:43:04,703 - INFO - Python executed in: 0.008225440979003906s -2024-03-03 14:43:04,703 - INFO - Number of rows 1 -2024-03-03 14:43:04,703 - WARNING - No internal DBMS metric available -2024-03-03 14:43:04,758 - INFO - Results for Query anc: -2024-03-03 14:43:04,758 - INFO - Python executed in: 0.05413627624511719s -2024-03-03 14:43:04,759 - INFO - Number of rows not available -2024-03-03 14:43:04,759 - WARNING - No internal DBMS metric available -2024-03-03 14:43:39,168 - INFO - Results for Query desc: -2024-03-03 14:43:39,169 - INFO - Python executed in: 20.384204864501953s -2024-03-03 14:43:39,170 - INFO - Number of rows 91288 -2024-03-03 14:43:39,172 - WARNING - No internal DBMS metric available -2024-03-03 14:43:39,266 - INFO - Results for Query path: -2024-03-03 14:43:39,266 - INFO - Python executed in: 0.09329700469970703s -2024-03-03 14:43:39,267 - INFO - Number of rows 1 -2024-03-03 14:43:39,267 - WARNING - No internal DBMS metric available -2024-03-03 14:43:46,698 - INFO - Results for Query 2-hop: -2024-03-03 14:43:46,698 - INFO - Python executed in: 6.428908348083496s -2024-03-03 14:43:46,698 - INFO - Number of rows 43357 -2024-03-03 14:43:46,699 - WARNING - No internal DBMS metric available -2024-03-03 14:48:05,182 - INFO - Results for Query count: -2024-03-03 14:48:05,182 - INFO - Python executed in: 0.008463144302368164s -2024-03-03 14:48:05,183 - INFO - Number of rows 1 -2024-03-03 14:48:05,183 - WARNING - No internal DBMS metric available -2024-03-03 14:48:05,247 - INFO - Results for Query anc: -2024-03-03 14:48:05,247 - INFO - Python executed in: 0.06356620788574219s -2024-03-03 14:48:05,248 - INFO - Number of rows not available -2024-03-03 14:48:05,248 - WARNING - No internal DBMS metric available -2024-03-03 14:49:05,147 - INFO - Results for Query desc: -2024-03-03 14:49:05,148 - INFO - Python executed in: 25.83729887008667s -2024-03-03 14:49:05,149 - INFO - Number of rows 113385 -2024-03-03 14:49:05,150 - WARNING - No internal DBMS metric available -2024-03-03 14:49:05,272 - INFO - Results for Query path: -2024-03-03 14:49:05,272 - INFO - Python executed in: 0.11968445777893066s -2024-03-03 14:49:05,272 - INFO - Number of rows 1 -2024-03-03 14:49:05,272 - WARNING - No internal DBMS metric available -2024-03-03 14:49:14,122 - INFO - Results for Query 2-hop: -2024-03-03 14:49:14,122 - INFO - Python executed in: 7.84886908531189s -2024-03-03 14:49:14,122 - INFO - Number of rows 53348 -2024-03-03 14:49:14,123 - WARNING - No internal DBMS metric available -2024-03-03 14:53:05,566 - INFO - Results for Query count: -2024-03-03 14:53:05,566 - INFO - Python executed in: 0.009711027145385742s -2024-03-03 14:53:05,567 - INFO - Number of rows 1 -2024-03-03 14:53:05,567 - WARNING - No internal DBMS metric available -2024-03-03 14:53:05,640 - INFO - Results for Query anc: -2024-03-03 14:53:05,640 - INFO - Python executed in: 0.07293391227722168s -2024-03-03 14:53:05,641 - INFO - Number of rows not available -2024-03-03 14:53:05,641 - WARNING - No internal DBMS metric available -2024-03-03 14:54:35,625 - INFO - Results for Query desc: -2024-03-03 14:54:35,626 - INFO - Python executed in: 29.869662523269653s -2024-03-03 14:54:35,627 - INFO - Number of rows 129798 -2024-03-03 14:54:35,628 - WARNING - No internal DBMS metric available -2024-03-03 14:54:35,761 - INFO - Results for Query path: -2024-03-03 14:54:35,761 - INFO - Python executed in: 0.13116979598999023s -2024-03-03 14:54:35,762 - INFO - Number of rows 1 -2024-03-03 14:54:35,762 - WARNING - No internal DBMS metric available -2024-03-03 14:54:46,369 - INFO - Results for Query 2-hop: -2024-03-03 14:54:46,369 - INFO - Python executed in: 9.605360746383667s -2024-03-03 14:54:46,369 - INFO - Number of rows 63605 -2024-03-03 14:54:46,370 - WARNING - No internal DBMS metric available -2024-03-03 14:58:05,731 - INFO - Results for Query count: -2024-03-03 14:58:05,732 - INFO - Python executed in: 0.011409282684326172s -2024-03-03 14:58:05,732 - INFO - Number of rows 1 -2024-03-03 14:58:05,732 - WARNING - No internal DBMS metric available -2024-03-03 14:58:05,809 - INFO - Results for Query anc: -2024-03-03 14:58:05,810 - INFO - Python executed in: 0.07680630683898926s -2024-03-03 14:58:05,810 - INFO - Number of rows not available -2024-03-03 14:58:05,810 - WARNING - No internal DBMS metric available -2024-03-03 15:00:08,320 - INFO - Results for Query desc: -2024-03-03 15:00:08,321 - INFO - Python executed in: 32.34604501724243s -2024-03-03 15:00:08,322 - INFO - Number of rows 141665 -2024-03-03 15:00:08,323 - WARNING - No internal DBMS metric available -2024-03-03 15:00:08,475 - INFO - Results for Query path: -2024-03-03 15:00:08,476 - INFO - Python executed in: 0.1500258445739746s -2024-03-03 15:00:08,476 - INFO - Number of rows 1 -2024-03-03 15:00:08,476 - WARNING - No internal DBMS metric available -2024-03-03 15:00:20,934 - INFO - Results for Query 2-hop: -2024-03-03 15:00:20,935 - INFO - Python executed in: 11.455687046051025s -2024-03-03 15:00:20,935 - INFO - Number of rows 75242 -2024-03-03 15:00:20,935 - WARNING - No internal DBMS metric available -2024-03-03 15:03:06,245 - INFO - Results for Query count: -2024-03-03 15:03:06,245 - INFO - Python executed in: 0.012130260467529297s -2024-03-03 15:03:06,245 - INFO - Number of rows 1 -2024-03-03 15:03:06,246 - WARNING - No internal DBMS metric available -2024-03-03 15:03:06,329 - INFO - Results for Query anc: -2024-03-03 15:03:06,329 - INFO - Python executed in: 0.0828096866607666s -2024-03-03 15:03:06,329 - INFO - Number of rows not available -2024-03-03 15:03:06,330 - WARNING - No internal DBMS metric available -2024-03-03 15:05:43,516 - INFO - Results for Query desc: -2024-03-03 15:05:43,517 - INFO - Python executed in: 34.96466779708862s -2024-03-03 15:05:43,518 - INFO - Number of rows 153499 -2024-03-03 15:05:43,519 - WARNING - No internal DBMS metric available -2024-03-03 15:05:43,674 - INFO - Results for Query path: -2024-03-03 15:05:43,675 - INFO - Python executed in: 0.15255093574523926s -2024-03-03 15:05:43,676 - INFO - Number of rows 1 -2024-03-03 15:05:43,676 - WARNING - No internal DBMS metric available -2024-03-03 15:05:57,266 - INFO - Results for Query 2-hop: -2024-03-03 15:05:57,266 - INFO - Python executed in: 12.58816385269165s -2024-03-03 15:05:57,266 - INFO - Number of rows 83519 -2024-03-03 15:05:57,267 - WARNING - No internal DBMS metric available -2024-03-03 15:08:06,512 - INFO - Results for Query count: -2024-03-03 15:08:06,513 - INFO - Python executed in: 0.01466226577758789s -2024-03-03 15:08:06,513 - INFO - Number of rows 1 -2024-03-03 15:08:06,513 - WARNING - No internal DBMS metric available -2024-03-03 15:08:06,617 - INFO - Results for Query anc: -2024-03-03 15:08:06,617 - INFO - Python executed in: 0.10301327705383301s -2024-03-03 15:08:06,617 - INFO - Number of rows not available -2024-03-03 15:08:06,618 - WARNING - No internal DBMS metric available -2024-03-03 15:11:21,544 - INFO - Results for Query desc: -2024-03-03 15:11:21,545 - INFO - Python executed in: 37.64526915550232s -2024-03-03 15:11:21,546 - INFO - Number of rows 163988 -2024-03-03 15:11:21,547 - WARNING - No internal DBMS metric available -2024-03-03 15:11:21,701 - INFO - Results for Query path: -2024-03-03 15:11:21,702 - INFO - Python executed in: 0.15214157104492188s -2024-03-03 15:11:21,703 - INFO - Number of rows 1 -2024-03-03 15:11:21,703 - WARNING - No internal DBMS metric available -2024-03-03 15:11:36,561 - INFO - Results for Query 2-hop: -2024-03-03 15:11:36,562 - INFO - Python executed in: 13.855537414550781s -2024-03-03 15:11:36,562 - INFO - Number of rows 92643 -2024-03-03 15:11:36,562 - WARNING - No internal DBMS metric available -2024-03-03 15:13:06,750 - INFO - Results for Query count: -2024-03-03 15:13:06,750 - INFO - Python executed in: 0.016458988189697266s -2024-03-03 15:13:06,750 - INFO - Number of rows 1 -2024-03-03 15:13:06,750 - WARNING - No internal DBMS metric available -2024-03-03 15:13:06,847 - INFO - Results for Query anc: -2024-03-03 15:13:06,847 - INFO - Python executed in: 0.0960226058959961s -2024-03-03 15:13:06,847 - INFO - Number of rows not available -2024-03-03 15:13:06,848 - WARNING - No internal DBMS metric available -2024-03-03 15:17:01,960 - INFO - Results for Query desc: -2024-03-03 15:17:01,961 - INFO - Python executed in: 39.76748609542847s -2024-03-03 15:17:01,962 - INFO - Number of rows 175758 -2024-03-03 15:17:01,963 - WARNING - No internal DBMS metric available -2024-03-03 15:17:02,138 - INFO - Results for Query path: -2024-03-03 15:17:02,139 - INFO - Python executed in: 0.17297124862670898s -2024-03-03 15:17:02,140 - INFO - Number of rows 1 -2024-03-03 15:17:02,141 - WARNING - No internal DBMS metric available -2024-03-03 15:17:17,998 - INFO - Results for Query 2-hop: -2024-03-03 15:17:17,998 - INFO - Python executed in: 14.854708671569824s -2024-03-03 15:17:17,998 - INFO - Number of rows 98495 -2024-03-03 15:17:17,998 - WARNING - No internal DBMS metric available -2024-03-03 15:18:07,105 - INFO - Results for Query count: -2024-03-03 15:18:07,105 - INFO - Python executed in: 0.017659425735473633s -2024-03-03 15:18:07,105 - INFO - Number of rows 1 -2024-03-03 15:18:07,106 - WARNING - No internal DBMS metric available -2024-03-03 15:18:07,201 - INFO - Results for Query anc: -2024-03-03 15:18:07,201 - INFO - Python executed in: 0.09407496452331543s -2024-03-03 15:18:07,201 - INFO - Number of rows not available -2024-03-03 15:18:07,201 - WARNING - No internal DBMS metric available -2024-03-03 15:22:44,761 - INFO - Results for Query desc: -2024-03-03 15:22:44,762 - INFO - Python executed in: 42.137614011764526s -2024-03-03 15:22:44,763 - INFO - Number of rows 187707 -2024-03-03 15:22:44,764 - WARNING - No internal DBMS metric available -2024-03-03 15:22:44,966 - INFO - Results for Query path: -2024-03-03 15:22:44,967 - INFO - Python executed in: 0.19968318939208984s -2024-03-03 15:22:44,968 - INFO - Number of rows 1 -2024-03-03 15:22:44,969 - WARNING - No internal DBMS metric available -2024-03-03 15:23:01,369 - INFO - Results for Query 2-hop: -2024-03-03 15:23:01,369 - INFO - Python executed in: 15.398098230361938s -2024-03-03 15:23:01,369 - INFO - Number of rows 103281 -2024-03-03 15:23:01,369 - WARNING - No internal DBMS metric available -2024-03-03 15:23:07,404 - INFO - Results for Query count: -2024-03-03 15:23:07,405 - INFO - Python executed in: 0.021477937698364258s -2024-03-03 15:23:07,405 - INFO - Number of rows 1 -2024-03-03 15:23:07,405 - WARNING - No internal DBMS metric available -2024-03-03 15:23:07,536 - INFO - Results for Query anc: -2024-03-03 15:23:07,536 - INFO - Python executed in: 0.12980103492736816s -2024-03-03 15:23:07,536 - INFO - Number of rows not available -2024-03-03 15:23:07,536 - WARNING - No internal DBMS metric available -2024-03-03 15:28:29,838 - INFO - Results for Query desc: -2024-03-03 15:28:29,839 - INFO - Python executed in: 44.78495192527771s -2024-03-03 15:28:29,840 - INFO - Number of rows 199500 -2024-03-03 15:28:29,841 - WARNING - No internal DBMS metric available -2024-03-03 15:28:30,034 - INFO - Results for Query path: -2024-03-03 15:28:30,035 - INFO - Python executed in: 0.19144701957702637s -2024-03-03 15:28:30,037 - INFO - Number of rows 1 -2024-03-03 15:28:30,037 - WARNING - No internal DBMS metric available -2024-03-03 15:28:47,158 - INFO - Results for Query 2-hop: -2024-03-03 15:28:47,158 - INFO - Python executed in: 16.11797785758972s -2024-03-03 15:28:47,158 - INFO - Number of rows 108115 -2024-03-03 15:28:47,158 - WARNING - No internal DBMS metric available -2024-03-03 15:28:47,178 - INFO - Results for Query count: -2024-03-03 15:28:47,178 - INFO - Python executed in: 0.017197608947753906s -2024-03-03 15:28:47,178 - INFO - Number of rows 1 -2024-03-03 15:28:47,178 - WARNING - No internal DBMS metric available -2024-03-03 15:28:47,294 - INFO - Results for Query anc: -2024-03-03 15:28:47,294 - INFO - Python executed in: 0.11501646041870117s -2024-03-03 15:28:47,296 - INFO - Number of rows not available -2024-03-03 15:28:47,296 - WARNING - No internal DBMS metric available -2024-03-03 15:34:18,356 - INFO - Results for Query desc: -2024-03-03 15:34:18,357 - INFO - Python executed in: 47.54209804534912s -2024-03-03 15:34:18,358 - INFO - Number of rows 211121 -2024-03-03 15:34:18,359 - WARNING - No internal DBMS metric available -2024-03-03 15:34:18,560 - INFO - Results for Query path: -2024-03-03 15:34:18,561 - INFO - Python executed in: 0.19944310188293457s -2024-03-03 15:34:18,563 - INFO - Number of rows 1 -2024-03-03 15:34:18,564 - WARNING - No internal DBMS metric available -2024-03-03 15:34:36,461 - INFO - Results for Query 2-hop: -2024-03-03 15:34:36,461 - INFO - Python executed in: 16.89452886581421s -2024-03-03 15:34:36,462 - INFO - Number of rows 112590 -2024-03-03 15:34:36,462 - WARNING - No internal DBMS metric available -2024-03-03 15:34:36,481 - INFO - Results for Query count: -2024-03-03 15:34:36,482 - INFO - Python executed in: 0.01698780059814453s -2024-03-03 15:34:36,482 - INFO - Number of rows 1 -2024-03-03 15:34:36,482 - WARNING - No internal DBMS metric available -2024-03-03 15:34:36,603 - INFO - Results for Query anc: -2024-03-03 15:34:36,603 - INFO - Python executed in: 0.11980843544006348s -2024-03-03 15:34:36,606 - INFO - Number of rows not available -2024-03-03 15:34:36,606 - WARNING - No internal DBMS metric available -2024-03-03 15:40:09,004 - INFO - Results for Query desc: -2024-03-03 15:40:09,005 - INFO - Python executed in: 49.895931243896484s -2024-03-03 15:40:09,006 - INFO - Number of rows 222207 -2024-03-03 15:40:09,007 - WARNING - No internal DBMS metric available -2024-03-03 15:40:09,210 - INFO - Results for Query path: -2024-03-03 15:40:09,211 - INFO - Python executed in: 0.2010657787322998s -2024-03-03 15:40:09,212 - INFO - Number of rows 1 -2024-03-03 15:40:09,213 - WARNING - No internal DBMS metric available -2024-03-03 15:40:27,693 - INFO - Results for Query 2-hop: -2024-03-03 15:40:27,693 - INFO - Python executed in: 17.476482629776s -2024-03-03 15:40:27,694 - INFO - Number of rows 117112 -2024-03-03 15:40:27,694 - WARNING - No internal DBMS metric available -2024-03-03 15:40:27,714 - INFO - Results for Query count: -2024-03-03 15:40:27,714 - INFO - Python executed in: 0.017894268035888672s -2024-03-03 15:40:27,714 - INFO - Number of rows 1 -2024-03-03 15:40:27,714 - WARNING - No internal DBMS metric available -2024-03-03 15:40:27,850 - INFO - Results for Query anc: -2024-03-03 15:40:27,851 - INFO - Python executed in: 0.13482880592346191s -2024-03-03 15:40:27,851 - INFO - Number of rows not available -2024-03-03 15:40:27,851 - WARNING - No internal DBMS metric available -2024-03-03 15:46:02,398 - INFO - Results for Query desc: -2024-03-03 15:46:02,399 - INFO - Python executed in: 53.02743053436279s -2024-03-03 15:46:02,400 - INFO - Number of rows 232656 -2024-03-03 15:46:02,401 - WARNING - No internal DBMS metric available -2024-03-03 15:46:02,631 - INFO - Results for Query path: -2024-03-03 15:46:02,632 - INFO - Python executed in: 0.2275846004486084s -2024-03-03 15:46:02,633 - INFO - Number of rows 1 -2024-03-03 15:46:02,634 - WARNING - No internal DBMS metric available -2024-03-03 15:46:21,862 - INFO - Results for Query 2-hop: -2024-03-03 15:46:21,862 - INFO - Python executed in: 18.223772525787354s -2024-03-03 15:46:21,868 - INFO - Number of rows 121537 -2024-03-03 15:46:21,868 - WARNING - No internal DBMS metric available -2024-03-03 15:46:21,890 - INFO - Results for Query count: -2024-03-03 15:46:21,890 - INFO - Python executed in: 0.019231557846069336s -2024-03-03 15:46:21,891 - INFO - Number of rows 1 -2024-03-03 15:46:21,891 - WARNING - No internal DBMS metric available -2024-03-03 15:46:22,013 - INFO - Results for Query anc: -2024-03-03 15:46:22,014 - INFO - Python executed in: 0.12172746658325195s -2024-03-03 15:46:22,014 - INFO - Number of rows not available -2024-03-03 15:46:22,014 - WARNING - No internal DBMS metric available -2024-03-03 15:51:56,468 - INFO - Results for Query desc: -2024-03-03 15:51:56,469 - INFO - Python executed in: 53.95262956619263s -2024-03-03 15:51:56,470 - INFO - Number of rows 242999 -2024-03-03 15:51:56,471 - WARNING - No internal DBMS metric available -2024-03-03 15:51:57,689 - INFO - Results for Query path: -2024-03-03 15:51:57,690 - INFO - Python executed in: 0.21362948417663574s -2024-03-03 15:51:57,691 - INFO - Number of rows 1 -2024-03-03 15:51:57,692 - WARNING - No internal DBMS metric available -2024-03-03 15:52:16,565 - INFO - Results for Query 2-hop: -2024-03-03 15:52:16,566 - INFO - Python executed in: 18.871136903762817s -2024-03-03 15:52:16,566 - INFO - Number of rows 125724 -2024-03-03 15:52:16,567 - WARNING - No internal DBMS metric available -2024-03-03 15:52:16,589 - INFO - Results for Query count: -2024-03-03 15:52:16,589 - INFO - Python executed in: 0.019235610961914062s -2024-03-03 15:52:16,589 - INFO - Number of rows 1 -2024-03-03 15:52:16,589 - WARNING - No internal DBMS metric available -2024-03-03 15:52:16,717 - INFO - Results for Query anc: -2024-03-03 15:52:16,717 - INFO - Python executed in: 0.1268448829650879s -2024-03-03 15:52:16,717 - INFO - Number of rows not available -2024-03-03 15:52:16,717 - WARNING - No internal DBMS metric available -2024-03-03 15:57:53,545 - INFO - Results for Query desc: -2024-03-03 15:57:53,546 - INFO - Python executed in: 56.32348704338074s -2024-03-03 15:57:53,546 - INFO - Number of rows 252769 -2024-03-03 15:57:53,547 - WARNING - No internal DBMS metric available -2024-03-03 15:57:54,787 - INFO - Results for Query path: -2024-03-03 15:57:54,788 - INFO - Python executed in: 0.23579692840576172s -2024-03-03 15:57:54,789 - INFO - Number of rows 1 -2024-03-03 15:57:54,790 - WARNING - No internal DBMS metric available -2024-03-03 15:58:14,253 - INFO - Results for Query 2-hop: -2024-03-03 15:58:14,253 - INFO - Python executed in: 19.461504220962524s -2024-03-03 15:58:14,254 - INFO - Number of rows 130149 -2024-03-03 15:58:14,254 - WARNING - No internal DBMS metric available -2024-03-03 15:58:14,275 - INFO - Results for Query count: -2024-03-03 15:58:14,275 - INFO - Python executed in: 0.018462657928466797s -2024-03-03 15:58:14,275 - INFO - Number of rows 1 -2024-03-03 15:58:14,275 - WARNING - No internal DBMS metric available -2024-03-03 15:58:14,409 - INFO - Results for Query anc: -2024-03-03 15:58:14,410 - INFO - Python executed in: 0.1335926055908203s -2024-03-03 15:58:14,410 - INFO - Number of rows not available -2024-03-03 15:58:14,410 - WARNING - No internal DBMS metric available -2024-03-03 16:03:52,992 - INFO - Results for Query desc: -2024-03-03 16:03:52,993 - INFO - Python executed in: 59.075496435165405s -2024-03-03 16:03:52,994 - INFO - Number of rows 261451 -2024-03-03 16:03:52,995 - WARNING - No internal DBMS metric available -2024-03-03 16:03:54,246 - INFO - Results for Query path: -2024-03-03 16:03:54,247 - INFO - Python executed in: 0.24692296981811523s -2024-03-03 16:03:54,248 - INFO - Number of rows 1 -2024-03-03 16:03:54,249 - WARNING - No internal DBMS metric available -2024-03-03 16:04:14,661 - INFO - Results for Query 2-hop: -2024-03-03 16:04:14,662 - INFO - Python executed in: 20.410388946533203s -2024-03-03 16:04:14,662 - INFO - Number of rows 134784 -2024-03-03 16:04:14,662 - WARNING - No internal DBMS metric available -2024-03-03 16:04:14,687 - INFO - Results for Query count: -2024-03-03 16:04:14,687 - INFO - Python executed in: 0.021901369094848633s -2024-03-03 16:04:14,687 - INFO - Number of rows 1 -2024-03-03 16:04:14,687 - WARNING - No internal DBMS metric available -2024-03-03 16:04:14,847 - INFO - Results for Query anc: -2024-03-03 16:04:14,847 - INFO - Python executed in: 0.1588146686553955s -2024-03-03 16:04:14,847 - INFO - Number of rows not available -2024-03-03 16:04:14,847 - WARNING - No internal DBMS metric available -2024-03-03 16:09:54,061 - INFO - Results for Query desc: -2024-03-03 16:09:54,062 - INFO - Python executed in: 60.717649698257446s -2024-03-03 16:09:54,063 - INFO - Number of rows 270253 -2024-03-03 16:09:54,064 - WARNING - No internal DBMS metric available -2024-03-03 16:09:55,344 - INFO - Results for Query path: -2024-03-03 16:09:55,345 - INFO - Python executed in: 0.27633047103881836s -2024-03-03 16:09:55,346 - INFO - Number of rows 1 -2024-03-03 16:09:55,347 - WARNING - No internal DBMS metric available -2024-03-03 16:10:16,630 - INFO - Results for Query 2-hop: -2024-03-03 16:10:16,631 - INFO - Python executed in: 21.281649827957153s -2024-03-03 16:10:16,631 - INFO - Number of rows 138561 -2024-03-03 16:10:16,631 - WARNING - No internal DBMS metric available -2024-03-03 16:10:16,663 - INFO - Results for Query count: -2024-03-03 16:10:16,663 - INFO - Python executed in: 0.028467655181884766s -2024-03-03 16:10:16,663 - INFO - Number of rows 1 -2024-03-03 16:10:16,663 - WARNING - No internal DBMS metric available -2024-03-03 16:10:16,810 - INFO - Results for Query anc: -2024-03-03 16:10:16,811 - INFO - Python executed in: 0.14659333229064941s -2024-03-03 16:10:16,811 - INFO - Number of rows not available -2024-03-03 16:10:16,811 - WARNING - No internal DBMS metric available -2024-03-03 16:15:56,807 - INFO - Results for Query desc: -2024-03-03 16:15:56,808 - INFO - Python executed in: 62.498717308044434s -2024-03-03 16:15:56,809 - INFO - Number of rows 279506 -2024-03-03 16:15:56,810 - WARNING - No internal DBMS metric available -2024-03-03 16:15:58,071 - INFO - Results for Query path: -2024-03-03 16:15:58,072 - INFO - Python executed in: 0.2568080425262451s -2024-03-03 16:15:58,073 - INFO - Number of rows 1 -2024-03-03 16:15:58,074 - WARNING - No internal DBMS metric available -2024-03-03 16:16:19,655 - INFO - Results for Query 2-hop: -2024-03-03 16:16:19,655 - INFO - Python executed in: 21.57893443107605s -2024-03-03 16:16:19,655 - INFO - Number of rows 142319 -2024-03-03 16:16:19,655 - WARNING - No internal DBMS metric available -2024-03-03 16:16:19,681 - INFO - Results for Query count: -2024-03-03 16:16:19,682 - INFO - Python executed in: 0.023074626922607422s -2024-03-03 16:16:19,682 - INFO - Number of rows 1 -2024-03-03 16:16:19,682 - WARNING - No internal DBMS metric available -2024-03-03 16:16:19,836 - INFO - Results for Query anc: -2024-03-03 16:16:19,836 - INFO - Python executed in: 0.15299153327941895s -2024-03-03 16:16:19,836 - INFO - Number of rows not available -2024-03-03 16:16:19,837 - WARNING - No internal DBMS metric available -2024-03-03 16:22:01,648 - INFO - Results for Query desc: -2024-03-03 16:22:01,649 - INFO - Python executed in: 64.3117241859436s -2024-03-03 16:22:01,650 - INFO - Number of rows 288647 -2024-03-03 16:22:01,651 - WARNING - No internal DBMS metric available -2024-03-03 16:22:02,924 - INFO - Results for Query path: -2024-03-03 16:22:02,926 - INFO - Python executed in: 0.27036452293395996s -2024-03-03 16:22:02,926 - INFO - Number of rows 1 -2024-03-03 16:22:02,927 - WARNING - No internal DBMS metric available -2024-03-03 16:22:24,913 - INFO - Results for Query 2-hop: -2024-03-03 16:22:24,913 - INFO - Python executed in: 21.983561992645264s -2024-03-03 16:22:24,913 - INFO - Number of rows 145708 -2024-03-03 16:22:24,913 - WARNING - No internal DBMS metric available -2024-03-03 16:22:24,936 - INFO - Results for Query count: -2024-03-03 16:22:24,937 - INFO - Python executed in: 0.020682334899902344s -2024-03-03 16:22:24,937 - INFO - Number of rows 1 -2024-03-03 16:22:24,937 - WARNING - No internal DBMS metric available -2024-03-03 16:22:25,101 - INFO - Results for Query anc: -2024-03-03 16:22:25,101 - INFO - Python executed in: 0.16294074058532715s -2024-03-03 16:22:25,101 - INFO - Number of rows not available -2024-03-03 16:22:25,101 - WARNING - No internal DBMS metric available -2024-03-03 16:28:08,807 - INFO - Results for Query desc: -2024-03-03 16:28:08,807 - INFO - Python executed in: 66.20154404640198s -2024-03-03 16:28:08,808 - INFO - Number of rows 297412 -2024-03-03 16:28:08,809 - WARNING - No internal DBMS metric available -2024-03-03 16:28:10,078 - INFO - Results for Query path: -2024-03-03 16:28:10,079 - INFO - Python executed in: 0.26560473442077637s -2024-03-03 16:28:10,080 - INFO - Number of rows 1 -2024-03-03 16:28:10,081 - WARNING - No internal DBMS metric available -2024-03-03 16:28:33,059 - INFO - Results for Query 2-hop: -2024-03-03 16:28:33,059 - INFO - Python executed in: 22.9764461517334s -2024-03-03 16:28:33,059 - INFO - Number of rows 149376 -2024-03-03 16:28:33,059 - WARNING - No internal DBMS metric available -2024-03-03 16:28:33,087 - INFO - Results for Query count: -2024-03-03 16:28:33,087 - INFO - Python executed in: 0.023671865463256836s -2024-03-03 16:28:33,087 - INFO - Number of rows 1 -2024-03-03 16:28:33,087 - WARNING - No internal DBMS metric available -2024-03-03 16:28:33,246 - INFO - Results for Query anc: -2024-03-03 16:28:33,246 - INFO - Python executed in: 0.15802955627441406s -2024-03-03 16:28:33,246 - INFO - Number of rows not available -2024-03-03 16:28:33,246 - WARNING - No internal DBMS metric available diff --git a/code/eval/experiments/2024-03-03_15-32-29_window_size_500_memgraph/query_logs/memgraph/log/2024-03-03_14-33-03_query_logs.csv b/code/eval/experiments/2024-03-03_15-32-29_window_size_500_memgraph/query_logs/memgraph/log/2024-03-03_14-33-03_query_logs.csv deleted file mode 100644 index 4467b0cd7f370ececc910b8353bbe7e2b7d1b9fb..0000000000000000000000000000000000000000 --- a/code/eval/experiments/2024-03-03_15-32-29_window_size_500_memgraph/query_logs/memgraph/log/2024-03-03_14-33-03_query_logs.csv +++ /dev/null @@ -1,107 +0,0 @@ -Query Key,Start Time,End Time,Fetched nodes,Execution Time (ms),Total Time (s) -count,1709476383.1853034,1709476383.2067375,1,0,0.02143406867980957 -anc,1709476383.2084994,1709476383.2165256,0,0,0.008026123046875 -desc,1709476383.2177894,1709476383.2209244,0,0,0.0031349658966064453 -path,1709476383.2224317,1709476383.2274876,0,0,0.005055904388427734 -2-hop,1709476383.229012,1709476383.2326453,0,0,0.003633260726928711 -count,1709476683.7815168,1709476683.786675,1,0,0.005158185958862305 -anc,1709476683.7878344,1709476683.8316708,0,0,0.043836355209350586 -desc,1709476683.8327272,1709476698.6189473,64450,0,14.786220073699951 -path,1709476698.6227171,1709476698.6955385,1,0,0.07282137870788574 -2-hop,1709476698.6966548,1709476703.1773267,29852,0,4.4806718826293945 -count,1709476984.6944046,1709476984.70263,1,0,0.008225440979003906 -anc,1709476984.7043562,1709476984.7584925,0,0,0.05413627624511719 -desc,1709476998.7844248,1709477019.1686296,91288,0,20.384204864501953 -path,1709477019.1732872,1709477019.2665842,1,0,0.09329700469970703 -2-hop,1709477020.2695398,1709477026.6984482,43357,0,6.428908348083496 -count,1709477285.1740775,1709477285.1825407,1,0,0.008463144302368164 -anc,1709477285.1840205,1709477285.2475867,0,0,0.06356620788574219 -desc,1709477319.310176,1709477345.1474748,113385,0,25.83729887008667 -path,1709477345.1524565,1709477345.272141,1,0,0.11968445777893066 -2-hop,1709477346.273399,1709477354.1222682,53348,0,7.84886908531189 -count,1709477585.5567508,1709477585.5664618,1,0,0.009711027145385742 -anc,1709477585.5676713,1709477585.6406052,0,0,0.07293391227722168 -desc,1709477645.7560198,1709477675.6256824,129798,0,29.869662523269653 -path,1709477675.63017,1709477675.76134,1,0,0.13116979598999023 -2-hop,1709477676.7641776,1709477686.3695383,63605,0,9.605360746383667 -count,1709477885.7204163,1709477885.7318256,1,0,0.011409282684326172 -anc,1709477885.7330384,1709477885.8098447,0,0,0.07680630683898926 -desc,1709477975.974842,1709478008.320887,141665,0,32.34604501724243 -path,1709478008.3253772,1709478008.475403,1,0,0.1500258445739746 -2-hop,1709478009.4791334,1709478020.9348204,75242,0,11.455687046051025 -count,1709478186.2333035,1709478186.2454338,1,0,0.012130260467529297 -anc,1709478186.246489,1709478186.3292987,0,0,0.0828096866607666 -desc,1709478308.552079,1709478343.5167468,153499,0,34.96466779708862 -path,1709478343.5218432,1709478343.6743941,1,0,0.15255093574523926 -2-hop,1709478344.678238,1709478357.2664018,83519,0,12.58816385269165 -count,1709478486.4981537,1709478486.512816,1,0,0.01466226577758789 -anc,1709478486.5142953,1709478486.6173086,0,0,0.10301327705383301 -desc,1709478643.8989325,1709478681.5442016,163988,0,37.64526915550232 -path,1709478681.5491989,1709478681.7013404,1,0,0.15214157104492188 -2-hop,1709478682.7062824,1709478696.5618198,92643,0,13.855537414550781 -count,1709478786.7338672,1709478786.7503262,1,0,0.016458988189697266 -anc,1709478786.751269,1709478786.8472917,0,0,0.0960226058959961 -desc,1709478982.1930935,1709479021.9605796,175758,0,39.76748609542847 -path,1709479021.9655266,1709479022.1384978,1,0,0.17297124862670898 -2-hop,1709479023.1432757,1709479037.9979844,98495,0,14.854708671569824 -count,1709479087.0875916,1709479087.105251,1,0,0.017659425735473633 -anc,1709479087.107038,1709479087.201113,0,0,0.09407496452331543 -desc,1709479322.6238968,1709479364.7615108,187707,0,42.137614011764526 -path,1709479364.7668748,1709479364.966558,1,0,0.19968318939208984 -2-hop,1709479365.9711382,1709479381.3692365,103281,0,15.398098230361938 -count,1709479387.383266,1709479387.404744,1,0,0.021477937698364258 -anc,1709479387.406369,1709479387.53617,0,0,0.12980103492736816 -desc,1709479665.0538228,1709479709.8387747,199500,0,44.78495192527771 -path,1709479709.8432956,1709479710.0347426,1,0,0.19144701957702637 -2-hop,1709479711.0401223,1709479727.1581001,108115,0,16.11797785758972 -count,1709479727.160803,1709479727.1780007,1,0,0.017197608947753906 -anc,1709479727.1793966,1709479727.294413,0,0,0.11501646041870117 -desc,1709480010.8147476,1709480058.3568456,211121,0,47.54209804534912 -path,1709480058.3613908,1709480058.560834,1,0,0.19944310188293457 -2-hop,1709480059.5671325,1709480076.4616613,112590,0,16.89452886581421 -count,1709480076.464803,1709480076.4817908,1,0,0.01698780059814453 -anc,1709480076.483162,1709480076.6029704,0,0,0.11980843544006348 -desc,1709480359.1088467,1709480409.004778,222207,0,49.895931243896484 -path,1709480409.0093567,1709480409.2104225,1,0,0.2010657787322998 -2-hop,1709480410.2172122,1709480427.6936948,117112,0,17.476482629776 -count,1709480427.696291,1709480427.7141852,1,0,0.017894268035888672 -anc,1709480427.7153206,1709480427.8501494,0,0,0.13482880592346191 -desc,1709480709.3709693,1709480762.3983998,232656,0,53.02743053436279 -path,1709480762.403401,1709480762.6309855,1,0,0.2275846004486084 -2-hop,1709480763.638378,1709480781.8621504,121537,0,18.223772525787354 -count,1709480781.8711226,1709480781.8903542,1,0,0.019231557846069336 -anc,1709480781.8921583,1709480782.0138857,0,0,0.12172746658325195 -desc,1709481062.5160975,1709481116.468727,242999,0,53.95262956619263 -path,1709481117.475384,1709481117.6890135,1,0,0.21362948417663574 -2-hop,1709481117.6940074,1709481136.5651443,125724,0,18.871136903762817 -count,1709481136.569809,1709481136.5890446,1,0,0.019235610961914062 -anc,1709481136.5902267,1709481136.7170715,0,0,0.1268448829650879 -desc,1709481417.2217026,1709481473.5451896,252769,0,56.32348704338074 -path,1709481474.551413,1709481474.78721,1,0,0.23579692840576172 -2-hop,1709481474.7921693,1709481494.2536736,130149,0,19.461504220962524 -count,1709481494.2565634,1709481494.275026,1,0,0.018462657928466797 -anc,1709481494.2763588,1709481494.4099514,0,0,0.1335926055908203 -desc,1709481773.9171824,1709481832.9926789,261451,0,59.075496435165405 -path,1709481833.9994824,1709481834.2464054,1,0,0.24692296981811523 -2-hop,1709481834.251408,1709481854.661797,134784,0,20.410388946533203 -count,1709481854.6652663,1709481854.6871676,1,0,0.021901369094848633 -anc,1709481854.6883783,1709481854.847193,0,0,0.1588146686553955 -desc,1709482133.343866,1709482194.0615158,270253,0,60.717649698257446 -path,1709482195.0680149,1709482195.3443453,1,0,0.27633047103881836 -2-hop,1709482195.3490806,1709482216.6307304,138561,0,21.281649827957153 -count,1709482216.6347947,1709482216.6632624,1,0,0.028467655181884766 -anc,1709482216.664365,1709482216.8109584,0,0,0.14659333229064941 -desc,1709482494.3090672,1709482556.8077846,279506,0,62.498717308044434 -path,1709482557.8150146,1709482558.0718226,1,0,0.2568080425262451 -2-hop,1709482558.0763152,1709482579.6552496,142319,0,21.57893443107605 -count,1709482579.6585877,1709482579.6816623,1,0,0.023074626922607422 -anc,1709482579.6832955,1709482579.836287,0,0,0.15299153327941895 -desc,1709482857.3367536,1709482921.6484778,288647,0,64.3117241859436 -path,1709482922.6540308,1709482922.9243953,1,0,0.27036452293395996 -2-hop,1709482922.9295201,1709482944.9130821,145708,0,21.983561992645264 -count,1709482944.916253,1709482944.9369354,1,0,0.020682334899902344 -anc,1709482944.9380424,1709482945.1009831,0,0,0.16294074058532715 -desc,1709483222.6055474,1709483288.8070915,297412,0,66.20154404640198 -path,1709483289.8128505,1709483290.0784552,1,0,0.26560473442077637 -2-hop,1709483290.08293,1709483313.0593762,149376,0,22.9764461517334 -count,1709483313.0633094,1709483313.0869813,1,0,0.023671865463256836 diff --git a/code/infrastructure/docker-compose.yml b/code/infrastructure/docker-compose.yml index beedeb0adfdbe66358010b0ee6bf3a996eaf3f2f..e78ddb6c045d7843d39b2eff71c2f29eae0fd903 100644 --- a/code/infrastructure/docker-compose.yml +++ b/code/infrastructure/docker-compose.yml @@ -190,8 +190,9 @@ services: - 9001:9001 - 8883:8883 volumes: - - ./streaming/mosquitto.conf:/mosquitto/config/mosquitto.conf - - ./streaming/log/mosquitto.log:/mosquitto/log/mosquitto.log + - ./streaming/broker/mosquitto.conf:/mosquitto/config/mosquitto.conf + - ./streaming/broker/log/:/mosquitto/log/ + - ./streaming/broker/data/:/mosquitto/data/ sub_pg: container_name: sub_pg @@ -241,7 +242,7 @@ services: container_name: pub_cdm image: lab.it.hs-hannover.de:4567/cwy-p8d-u1/ma_code/pub_cdm environment: - - lines_per_window=1000 + - lines_per_window=100 - path_to_firstK=/var/lib/import/first1k.json - path_data=/var/lib/import/ - sleep_time=1 @@ -267,7 +268,7 @@ services: - PGUSER=postgres - PGPASSWORD=postgres - PGPORT=5432 - - interval=5 + - interval=1 - query_file_path=/app/queries/queries.txt volumes: - ./eval/query/pg/log:/app/log @@ -279,7 +280,7 @@ services: container_name: query_neo4j image: lab.it.hs-hannover.de:4567/cwy-p8d-u1/ma_code/cypher_queries environment: - - interval=5 + - interval=1 - db_host=neo4j - db_port=7687 - query_file_path=/app/queries/queries.txt @@ -293,7 +294,7 @@ services: container_name: query_ongdb image: lab.it.hs-hannover.de:4567/cwy-p8d-u1/ma_code/ongdb_queries environment: - - interval=5 + - interval=1 - db_host=ongdb - db_port=7687 - query_file_path=/app/queries/queries.txt @@ -307,7 +308,7 @@ services: container_name: query_memgraph image: lab.it.hs-hannover.de:4567/cwy-p8d-u1/ma_code/cypher_queries environment: - - interval=5 + - interval=1 - db_host=memgraph - db_port=7687 - query_file_path=/app/queries/queries.txt diff --git a/code/infrastructure/docker-compose_memgraph.yml b/code/infrastructure/docker-compose_memgraph.yml index 1bc8c07ada96d1458717a36085f054f156c81e75..b66a899b48e46ef08c5df230cd0688474df40077 100644 --- a/code/infrastructure/docker-compose_memgraph.yml +++ b/code/infrastructure/docker-compose_memgraph.yml @@ -78,8 +78,9 @@ services: - 9001:9001 - 8883:8883 volumes: - - ./streaming/mosquitto.conf:/mosquitto/config/mosquitto.conf - - ./streaming/log/mosquitto.log:/mosquitto/log/mosquitto.log + - ./streaming/broker/mosquitto.conf:/mosquitto/config/mosquitto.conf + - ./streaming/broker/log/:/mosquitto/log/ + - ./streaming/broker/data/:/mosquitto/data/ sub_mem: container_name: sub_mem diff --git a/code/infrastructure/docker-compose_neo4j.yml b/code/infrastructure/docker-compose_neo4j.yml index 6bf106514099d44d4f8f3e9117bedf91f05813e8..12d69e31ea87035582ef334c68bd7273e4158dd0 100644 --- a/code/infrastructure/docker-compose_neo4j.yml +++ b/code/infrastructure/docker-compose_neo4j.yml @@ -76,8 +76,9 @@ services: - 9001:9001 - 8883:8883 volumes: - - ./streaming/mosquitto.conf:/mosquitto/config/mosquitto.conf - - ./streaming/log/mosquitto.log:/mosquitto/log/mosquitto.log + - ./streaming/broker/mosquitto.conf:/mosquitto/config/mosquitto.conf + - ./streaming/broker/log/:/mosquitto/log/ + - ./streaming/broker/data/:/mosquitto/data/ sub_neo4j: container_name: sub_neo4j @@ -105,6 +106,7 @@ services: image: lab.it.hs-hannover.de:4567/cwy-p8d-u1/ma_code/pub_cdm environment: - lines_per_window=${WINDOW_SIZE} + # - lines_per_window=500 - path_to_firstK=/var/lib/import/first1k.json - path_data=/var/lib/import/ - sleep_time=1 diff --git a/code/infrastructure/docker-compose_ongdb.yml b/code/infrastructure/docker-compose_ongdb.yml index 28f431bf16192ab430fd3e4a70ae91c22a9f2043..1513d9650c473bc0af91578d2e19175b06c851e9 100644 --- a/code/infrastructure/docker-compose_ongdb.yml +++ b/code/infrastructure/docker-compose_ongdb.yml @@ -86,8 +86,9 @@ services: - 9001:9001 - 8883:8883 volumes: - - ./streaming/mosquitto.conf:/mosquitto/config/mosquitto.conf - - ./streaming/log/mosquitto.log:/mosquitto/log/mosquitto.log + - ./streaming/broker/mosquitto.conf:/mosquitto/config/mosquitto.conf + - ./streaming/broker/log/:/mosquitto/log/ + - ./streaming/broker/data/:/mosquitto/data/ pub: container_name: pub_cdm diff --git a/code/infrastructure/docker-compose_pg.yml b/code/infrastructure/docker-compose_pg.yml index 32deb58cd36595cfdc665cf369bd6f030c0216e2..9fc14921c55947d8a4c43548210df73d81234038 100644 --- a/code/infrastructure/docker-compose_pg.yml +++ b/code/infrastructure/docker-compose_pg.yml @@ -98,8 +98,9 @@ services: - 9001:9001 - 8883:8883 volumes: - - ./streaming/mosquitto.conf:/mosquitto/config/mosquitto.conf - - ./streaming/log/mosquitto.log:/mosquitto/log/mosquitto.log + - ./streaming/broker/mosquitto.conf:/mosquitto/config/mosquitto.conf + - ./streaming/broker/log/:/mosquitto/log/ + - ./streaming/broker/data/:/mosquitto/data/ sub_pg: container_name: sub_pg @@ -120,6 +121,7 @@ services: image: lab.it.hs-hannover.de:4567/cwy-p8d-u1/ma_code/pub_cdm environment: - lines_per_window=${WINDOW_SIZE} + # - lines_per_window=500 - path_to_firstK=/var/lib/import/first1k.json - path_data=/var/lib/import/ - sleep_time=1 diff --git a/code/infrastructure/eval/query/memgraph/queries/queries.txt b/code/infrastructure/eval/query/memgraph/queries/queries.txt index a976939088ebe90edd7bf3720ad1b0f7c3efb81e..4d0b8950e14721a99b7598ca0cbdf2a22bb6cd6e 100644 --- a/code/infrastructure/eval/query/memgraph/queries/queries.txt +++ b/code/infrastructure/eval/query/memgraph/queries/queries.txt @@ -1,5 +1,5 @@ count|MATCH (n) return count(n); anc|MATCH path=(node:Host)-[*]->(ancestor) RETURN ancestor, size(path) AS distance_upstream ORDER BY distance_upstream; desc|MATCH path=(node:Host)<-[*]-(descendant) RETURN descendant, size(path) AS distance_downstream ORDER BY distance_downstream; -path|MATCH path = (a {_uuid:'0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'})-[ *bfs]-(b {_uuid:'586C56DA-CB56-745E-96CB-52069E742598'}) RETURN path; -2-hop|MATCH (a) where a._uuid='0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69' CALL neighbors.by_hop(a, [""], 2) YIELD nodes RETURN nodes; \ No newline at end of file +path|MATCH path = ((a {_uuid: 'A6A7C956-0132-5506-96D1-2A7DE97CB400'})-[*ALLSHORTEST(r,n|1)]->(b {_uuid:'8DA367BF-36C2-11E8-BF66-D9AA8AFF4A69'})) RETURN path; +2-hop|MATCH (a) where a._uuid='9FF334BB-9072-D756-B290-556656D73728' CALL neighbors.by_hop(a, [""], 2) YIELD nodes RETURN nodes; \ No newline at end of file diff --git a/code/infrastructure/eval/query/neo4j/queries/queries.txt b/code/infrastructure/eval/query/neo4j/queries/queries.txt index 4b1e8b7899af15fa295faf6205716990c1ab5a6a..d93ecc1212bf8d3b59a085d0fe78ac4d0cfd90f8 100644 --- a/code/infrastructure/eval/query/neo4j/queries/queries.txt +++ b/code/infrastructure/eval/query/neo4j/queries/queries.txt @@ -2,4 +2,4 @@ count|MATCH (n) return count(n); anc|MATCH path=(node:Host)-[*]->(ancestor) RETURN ancestor, length(path) AS distance_upstream ORDER BY distance_upstream; desc|MATCH path=(node:Host)<-[*]-(descendant) RETURN descendant, length(path) AS distance_downstream ORDER BY distance_downstream; path|MATCH path = shortestPath((a:Subject WHERE a._uuid='0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69') -[*]- (b:FileObject WHERE b._uuid = '586C56DA-CB56-745E-96CB-52069E742598')) RETURN path; -2-hop|MATCH (startNode WHERE startNode._uuid = '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69')-[*1..2]-(neighborhood) RETURN neighborhood; +2-hop|MATCH (startNode WHERE startNode._uuid = '9FF334BB-9072-D756-B290-556656D73728')-[*1..2]-(neighborhood) RETURN neighborhood; diff --git a/code/infrastructure/eval/query/ongdb/queries/queries.txt b/code/infrastructure/eval/query/ongdb/queries/queries.txt index 828ca32f606bc01d6de5bd5f6f3375e5a03dc5fb..629bfb380e12763106374fb07306f1c54fd4e4ed 100644 --- a/code/infrastructure/eval/query/ongdb/queries/queries.txt +++ b/code/infrastructure/eval/query/ongdb/queries/queries.txt @@ -2,4 +2,4 @@ count|MATCH (n) return count(n); anc|MATCH path=(node:Host)-[*]->(ancestor) RETURN ancestor, length(path) AS distance_upstream ORDER BY distance_upstream; desc|MATCH path=(node:Host)<-[*]-(descendant) RETURN descendant, length(path) AS distance_downstream ORDER BY distance_downstream; path|MATCH (a:Subject) WHERE a._uuid = '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69' MATCH (b:FileObject) where b._uuid='586C56DA-CB56-745E-96CB-52069E742598' WITH a, b MATCH path = shortestPath((a)-[*]-(b)) RETURN path -2-hop|MATCH (startNode) -[*1..2]-(neighborhood) WHERE startNode._uuid = '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69' RETURN neighborhood \ No newline at end of file +2-hop|MATCH (startNode) -[*1..2]-(neighborhood) WHERE startNode._uuid = '9FF334BB-9072-D756-B290-556656D73728' RETURN neighborhood \ No newline at end of file diff --git a/code/infrastructure/eval/query/pg/queries/queries.txt b/code/infrastructure/eval/query/pg/queries/queries.txt index 59a5ca9471d52c43e5ee66caacf87104be66156d..10b02a9c29e57ce1d709d3c3deb7d331f701d42e 100644 --- a/code/infrastructure/eval/query/pg/queries/queries.txt +++ b/code/infrastructure/eval/query/pg/queries/queries.txt @@ -30,81 +30,69 @@ descendant|WITH RECURSIVE DescendantCTE AS ( ) SELECT DISTINCT node_no, source, Level FROM DescendantCTE; --- -path|WITH RECURSIVE path_cte AS ( - -- Anchor member initialization +path|WITH RECURSIVE search_path(edge_no, path, dest, visited, depth) AS ( SELECT - el.source AS start_node, - el.dest AS end_node, - ARRAY[el.source::varchar] AS path, -- Cast to varchar to ensure type consistency - 1 AS depth -- Keep track of the depth to prevent infinite loops + e.edge_no, + ARRAY[e.source, e.dest]::VARCHAR[] AS path, -- Cast to VARCHAR[] + e.dest, + ARRAY[e.source]::VARCHAR[] AS visited, -- Cast to VARCHAR[] + 1 AS depth FROM - edge_list el + edge_list e WHERE - el.source = '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69' -- Replace with the UUID of the starting node + e.source = 'A6A7C956-0132-5506-96D1-2A7DE97CB400' -- Starting Node 43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1 UNION ALL - -- Recursive member definition SELECT - p.start_node, - el.dest, - p.path || el.dest::varchar, -- Ensure el.dest is cast to varchar - p.depth + 1 + e.edge_no, + sp.path || e.dest, + e.dest, + visited || e.dest::VARCHAR, -- Ensure consistent type + sp.depth + 1 FROM - edge_list el - JOIN - path_cte p ON el.source = p.end_node + edge_list e, search_path sp WHERE - NOT (el.dest = ANY(p.path)) -- Prevent cycles by ensuring we don't revisit nodes - AND p.depth < 100 -- Example limit to prevent infinite recursion + e.source = sp.dest + AND NOT (e.dest = ANY(sp.visited)) -- Adjusted to ensure clarity and type consistency ) - --- Final query to select the path -SELECT distinct - start_node, end_node, path, depth +, shortest_paths AS ( + SELECT + path, + depth + FROM + search_path + WHERE + dest = '8DA367BF-36C2-11E8-BF66-D9AA8AFF4A69' -- Destination Node 458F029B-36C2-11E8-BF66-D9AA8AFF4A69 + ORDER BY + depth ASC + LIMIT 1 -- Adjust based on desired number of shortest paths +) +SELECT + path FROM - path_cte -WHERE - end_node = '586C56DA-CB56-745E-96CB-52069E742598' -- Replace with the UUID of the ending node -ORDER BY - depth ASC -- Optional: orders by the shortest path ---LIMIT 1 -- Optionally limit to one path if multiple paths exist -; + shortest_paths; --- -k-hop|WITH RECURSIVE HopPath AS ( - -- Anchor member: select the first hop from the starting node - SELECT - e.source AS start_node, - e.dest AS intermediate_node, - e.dest AS end_node, - 1 AS hop_count -- Indicates the first hop - FROM - edge_list e - WHERE - e.source = '5CC868CD-FF30-5E2B-BB74-6C5B474A62B2' - - UNION ALL - - -- Recursive member: find neighbors of the initial node's neighbors - SELECT - hp.start_node, - e.source AS intermediate_node, - e.dest AS end_node, - hp.hop_count + 1 AS hop_count - FROM - HopPath hp - JOIN - edge_list e ON hp.end_node = e.source - WHERE - hp.hop_count < 2 -- Ensures we do not go beyond 2 hops +k-hop|WITH hop1 AS ( + SELECT DISTINCT e.source, e.dest + FROM edge_list e + WHERE e.source = '9FF334BB-9072-D756-B290-556656D73728' + OR e.dest = '9FF334BB-9072-D756-B290-556656D73728' +), +combined AS ( + SELECT source AS node FROM hop1 + UNION + SELECT dest FROM hop1 +), +hop2 AS ( + SELECT e.source, e.dest + FROM edge_list e + JOIN combined c ON e.source = c.node OR e.dest = c.node ) - --- Select the final result set from the CTE -SELECT DISTINCT - start_node, - intermediate_node, - end_node -FROM - HopPath -WHERE - hop_count <= 2; -- Retrieves both 1-hop and 2-hop neighborhoods \ No newline at end of file +SELECT DISTINCT node +FROM ( + SELECT source AS node FROM hop2 + UNION ALL + SELECT dest FROM hop2 +) AS all_nodes +--WHERE node <> '9FF334BB-9072-D756-B290-556656D73728' diff --git a/code/infrastructure/streaming/broker/data/mosquitto.db b/code/infrastructure/streaming/broker/data/mosquitto.db new file mode 100644 index 0000000000000000000000000000000000000000..2f2ce2ae1da52b57cd1df40a75d1f465e51c10ba Binary files /dev/null and b/code/infrastructure/streaming/broker/data/mosquitto.db differ diff --git a/code/infrastructure/streaming/broker/log/mosquitto.log b/code/infrastructure/streaming/broker/log/mosquitto.log new file mode 100644 index 0000000000000000000000000000000000000000..334cfb3ce33da23cc23b4d48195c53b4804ea869 --- /dev/null +++ b/code/infrastructure/streaming/broker/log/mosquitto.log @@ -0,0 +1,460 @@ +1710410408: mosquitto version 2.0.18 starting +1710410408: Config loaded from /mosquitto/config/mosquitto.conf. +1710410408: Opening ipv4 listen socket on port 1883. +1710410408: mosquitto version 2.0.18 running +1710410442: New connection from 192.168.32.13:53847 on port 1883. +1710410442: New client connected from 192.168.32.13:53847 as Client4 (p2, c1, k60). +1710410442: New connection from 192.168.32.12:59057 on port 1883. +1710410442: New client connected from 192.168.32.12:59057 as Client3 (p2, c1, k60). +1710410471: New connection from 192.168.32.14:33645 on port 1883. +1710410471: New client connected from 192.168.32.14:33645 as Client5 (p2, c1, k60). +1710410475: New connection from 192.168.32.15:54537 on port 1883. +1710410475: New client connected from 192.168.32.15:54537 as Client2 (p2, c1, k60). +1710410500: New connection from 192.168.32.16:34115 on port 1883. +1710410500: New client connected from 192.168.32.16:34115 as Client1 (p2, c1, k60). +1710410506: Outgoing messages are being dropped for client Client5. +1710410506: Outgoing messages are being dropped for client Client2. +1710410506: Outgoing messages are being dropped for client Client3. +1710410507: Outgoing messages are being dropped for client Client4. +1710410507: Client Client1 disconnected. +1710410971: mosquitto version 2.0.18 terminating +1710410971: Saving in-memory database to /mosquitto/data//mosquitto.db. +1710411225: mosquitto version 2.0.18 starting +1710411225: Config loaded from /mosquitto/config/mosquitto.conf. +1710411225: Opening ipv4 listen socket on port 1883. +1710411225: mosquitto version 2.0.18 running +1710411258: New connection from 192.168.48.13:49525 on port 1883. +1710411258: New client connected from 192.168.48.13:49525 as Client4 (p2, c1, k60). +1710411262: New connection from 192.168.48.12:57689 on port 1883. +1710411262: New client connected from 192.168.48.12:57689 as Client3 (p2, c1, k60). +1710411291: New connection from 192.168.48.14:53407 on port 1883. +1710411291: New client connected from 192.168.48.14:53407 as Client5 (p2, c1, k60). +1710411296: New connection from 192.168.48.16:45821 on port 1883. +1710411296: New client connected from 192.168.48.16:45821 as Client1 (p2, c1, k60). +1710411297: New connection from 192.168.48.15:54813 on port 1883. +1710411297: New client connected from 192.168.48.15:54813 as Client2 (p2, c1, k60). +1710411300: Outgoing messages are being dropped for client Client2. +1710411301: Outgoing messages are being dropped for client Client5. +1710411301: Outgoing messages are being dropped for client Client3. +1710411303: Outgoing messages are being dropped for client Client4. +1710411303: Client Client1 disconnected. +1710411319: New connection from 192.168.48.16:52971 on port 1883. +1710411319: New client connected from 192.168.48.16:52971 as Client1 (p2, c1, k60). +1710411327: Client Client1 disconnected. +1710411780: mosquitto version 2.0.18 terminating +1710411780: Saving in-memory database to /mosquitto/data//mosquitto.db. +1710411954: mosquitto version 2.0.18 starting +1710411954: Config loaded from /mosquitto/config/mosquitto.conf. +1710411954: Opening ipv4 listen socket on port 1883. +1710411954: mosquitto version 2.0.18 running +1710411993: New connection from 192.168.80.12:34057 on port 1883. +1710411993: New client connected from 192.168.80.12:34057 as Client3 (p2, c0, k60). +1710412017: New connection from 192.168.80.13:49261 on port 1883. +1710412017: New client connected from 192.168.80.13:49261 as Client4 (p2, c1, k60). +1710412086: New connection from 192.168.80.14:39195 on port 1883. +1710412086: New client connected from 192.168.80.14:39195 as Client5 (p2, c1, k60). +1710412099: New connection from 192.168.80.15:54451 on port 1883. +1710412099: New client connected from 192.168.80.15:54451 as Client2 (p2, c1, k60). +1710412107: New connection from 192.168.80.16:35255 on port 1883. +1710412107: New client connected from 192.168.80.16:35255 as Client1 (p2, c0, k60). +1710412112: Outgoing messages are being dropped for client Client5. +1710412112: Outgoing messages are being dropped for client Client2. +1710412112: Outgoing messages are being dropped for client Client3. +1710412114: Outgoing messages are being dropped for client Client4. +1710412114: Client Client1 disconnected. +1710412174: Client Client3 closed its connection. +1710412175: New connection from 192.168.80.12:38275 on port 1883. +1710412175: New client connected from 192.168.80.12:38275 as Client3 (p2, c0, k60). +1710412251: mosquitto version 2.0.18 terminating +1710412251: Saving in-memory database to /mosquitto/data//mosquitto.db. +1710412289: mosquitto version 2.0.18 starting +1710412289: Config loaded from /mosquitto/config/mosquitto.conf. +1710412289: Opening ipv4 listen socket on port 1883. +1710412289: mosquitto version 2.0.18 running +1710412323: New connection from 192.168.96.12:34665 on port 1883. +1710412323: New client connected from 192.168.96.12:34665 as Client4 (p2, c1, k60). +1710412324: New connection from 192.168.96.13:37875 on port 1883. +1710412324: New client connected from 192.168.96.13:37875 as Client3 (p2, c0, k60). +1710412360: New connection from 192.168.96.14:55841 on port 1883. +1710412360: New client connected from 192.168.96.14:55841 as Client5 (p2, c1, k60). +1710412368: New connection from 192.168.96.15:57121 on port 1883. +1710412368: New client connected from 192.168.96.15:57121 as Client2 (p2, c1, k60). +1710412374: New connection from 192.168.96.16:34951 on port 1883. +1710412374: New client connected from 192.168.96.16:34951 as Client1 (p2, c0, k60). +1710412380: Outgoing messages are being dropped for client Client5. +1710412380: Outgoing messages are being dropped for client Client2. +1710412380: Outgoing messages are being dropped for client Client3. +1710412381: Outgoing messages are being dropped for client Client4. +1710412381: Client Client1 disconnected. +1710412388: New connection from 192.168.96.16:47601 on port 1883. +1710412388: New client connected from 192.168.96.16:47601 as Client1 (p2, c0, k60). +1710412396: Client Client1 disconnected. +1710412444: Client Client4 closed its connection. +1710412445: Client Client3 closed its connection. +1710412445: New connection from 192.168.96.12:35361 on port 1883. +1710412445: New client connected from 192.168.96.12:35361 as Client4 (p2, c1, k60). +1710412446: New connection from 192.168.96.13:54005 on port 1883. +1710412446: New client connected from 192.168.96.13:54005 as Client3 (p2, c0, k60). +1710412675: mosquitto version 2.0.18 terminating +1710412675: Saving in-memory database to /mosquitto/data/mosquitto.db. +1710412725: mosquitto version 2.0.18 starting +1710412725: Config loaded from /mosquitto/config/mosquitto.conf. +1710412725: Opening ipv4 listen socket on port 1883. +1710412725: mosquitto version 2.0.18 running +1710412760: New connection from 192.168.112.12:42335 on port 1883. +1710412760: New client connected from 192.168.112.12:42335 as Client4 (p2, c1, k60). +1710412767: New connection from 192.168.112.13:50321 on port 1883. +1710412767: New client connected from 192.168.112.13:50321 as Client3 (p2, c1, k60). +1710412829: New connection from 192.168.112.14:43945 on port 1883. +1710412829: New client connected from 192.168.112.14:43945 as Client5 (p2, c1, k60). +1710412837: New connection from 192.168.112.15:59363 on port 1883. +1710412837: New client connected from 192.168.112.15:59363 as Client2 (p2, c1, k60). +1710412851: New connection from 192.168.112.16:45783 on port 1883. +1710412851: New client connected from 192.168.112.16:45783 as Client1 (p2, c1, k60). +1710412856: Outgoing messages are being dropped for client Client5. +1710412856: Outgoing messages are being dropped for client Client2. +1710412856: Outgoing messages are being dropped for client Client3. +1710412857: Outgoing messages are being dropped for client Client4. +1710412857: Client Client1 disconnected. +1710413663: mosquitto version 2.0.18 terminating +1710413663: Saving in-memory database to /mosquitto/data/mosquitto.db. +1710413702: mosquitto version 2.0.18 starting +1710413702: Config loaded from /mosquitto/config/mosquitto.conf. +1710413702: Opening ipv4 listen socket on port 1883. +1710413702: mosquitto version 2.0.18 running +1710413737: New connection from 192.168.128.12:48293 on port 1883. +1710413737: New client connected from 192.168.128.12:48293 as Client4 (p2, c1, k60). +1710413742: New connection from 192.168.128.13:49273 on port 1883. +1710413742: New client connected from 192.168.128.13:49273 as Client3 (p2, c1, k60). +1710413808: New connection from 192.168.128.14:47519 on port 1883. +1710413808: New client connected from 192.168.128.14:47519 as Client5 (p2, c1, k60). +1710413811: New connection from 192.168.128.15:43075 on port 1883. +1710413811: New client connected from 192.168.128.15:43075 as Client2 (p2, c1, k60). +1710413827: New connection from 192.168.128.16:54225 on port 1883. +1710413827: New client connected from 192.168.128.16:54225 as Client1 (p2, c1, k60). +1710413834: Outgoing messages are being dropped for client Client5. +1710413834: Outgoing messages are being dropped for client Client2. +1710413834: Outgoing messages are being dropped for client Client3. +1710413835: Outgoing messages are being dropped for client Client4. +1710413835: Client Client1 disconnected. +1710414180: mosquitto version 2.0.18 terminating +1710414180: Saving in-memory database to /mosquitto/data/mosquitto.db. +1710414217: mosquitto version 2.0.18 starting +1710414217: Config loaded from /mosquitto/config/mosquitto.conf. +1710414217: Opening ipv4 listen socket on port 1883. +1710414217: mosquitto version 2.0.18 running +1710414250: New connection from 192.168.144.12:42315 on port 1883. +1710414250: New client connected from 192.168.144.12:42315 as Client4 (p2, c1, k60). +1710414281: New connection from 192.168.144.13:41857 on port 1883. +1710414281: New client connected from 192.168.144.13:41857 as Client5 (p2, c1, k60). +1710414308: New connection from 192.168.144.14:50339 on port 1883. +1710414308: New client connected from 192.168.144.14:50339 as Client3 (p2, c1, k60). +1710414365: New connection from 192.168.144.15:60111 on port 1883. +1710414365: New client connected from 192.168.144.15:60111 as Client2 (p2, c1, k60). +1710414372: New connection from 192.168.144.16:47987 on port 1883. +1710414372: New client connected from 192.168.144.16:47987 as Client1 (p2, c1, k60). +1710414377: Outgoing messages are being dropped for client Client5. +1710414377: Outgoing messages are being dropped for client Client2. +1710414377: Outgoing messages are being dropped for client Client3. +1710414378: Client Client1 disconnected. +1710414469: mosquitto version 2.0.18 terminating +1710414497: mosquitto version 2.0.18 starting +1710414497: Config loaded from /mosquitto/config/mosquitto.conf. +1710414497: Opening ipv4 listen socket on port 1883. +1710414497: mosquitto version 2.0.18 running +1710414529: New connection from 192.168.160.12:42281 on port 1883. +1710414529: New client connected from 192.168.160.12:42281 as Client4 (p2, c1, k60). +1710414532: New connection from 192.168.160.13:32959 on port 1883. +1710414532: New client connected from 192.168.160.13:32959 as Client3 (p2, c1, k60). +1710414566: New connection from 192.168.160.14:50937 on port 1883. +1710414566: New client connected from 192.168.160.14:50937 as Client5 (p2, c1, k60). +1710414572: New connection from 192.168.160.15:57513 on port 1883. +1710414572: New client connected from 192.168.160.15:57513 as Client2 (p2, c1, k60). +1710414592: New connection from 192.168.160.16:46479 on port 1883. +1710414592: New client connected from 192.168.160.16:46479 as Client1 (p2, c1, k60). +1710414597: Outgoing messages are being dropped for client Client2. +1710414597: Outgoing messages are being dropped for client Client5. +1710414598: Outgoing messages are being dropped for client Client3. +1710414599: Outgoing messages are being dropped for client Client4. +1710414599: Client Client1 disconnected. +1710414988: mosquitto version 2.0.18 terminating +1710415026: mosquitto version 2.0.18 starting +1710415026: Config loaded from /mosquitto/config/mosquitto.conf. +1710415026: Opening ipv4 listen socket on port 1883. +1710415026: mosquitto version 2.0.18 running +1710415059: New connection from 192.168.176.13:59263 on port 1883. +1710415059: New client connected from 192.168.176.13:59263 as Client4 (p2, c1, k60). +1710415060: New connection from 192.168.176.12:49623 on port 1883. +1710415060: New client connected from 192.168.176.12:49623 as Client3 (p2, c1, k60). +1710415093: New connection from 192.168.176.15:50575 on port 1883. +1710415093: New client connected from 192.168.176.15:50575 as Client5 (p2, c1, k60). +1710415098: New connection from 192.168.176.14:56475 on port 1883. +1710415098: New client connected from 192.168.176.14:56475 as Client2 (p2, c1, k60). +1710415120: New connection from 192.168.176.16:57565 on port 1883. +1710415120: New client connected from 192.168.176.16:57565 as Client1 (p2, c1, k60). +1710415130: Client Client1 disconnected. +1710418765: mosquitto version 2.0.18 terminating +1710418975: mosquitto version 2.0.18 starting +1710418975: Config loaded from /mosquitto/config/mosquitto.conf. +1710418975: Opening ipv4 listen socket on port 1883. +1710418975: mosquitto version 2.0.18 running +1710419010: New connection from 192.168.192.12:44673 on port 1883. +1710419010: New client connected from 192.168.192.12:44673 as Client4 (p2, c1, k60). +1710419045: New connection from 192.168.192.13:56043 on port 1883. +1710419045: New client connected from 192.168.192.13:56043 as Client5 (p2, c1, k60). +1710419093: mosquitto version 2.0.18 terminating +1710419132: mosquitto version 2.0.18 starting +1710419132: Config loaded from /mosquitto/config/mosquitto.conf. +1710419132: Opening ipv4 listen socket on port 1883. +1710419132: mosquitto version 2.0.18 running +1710419180: New connection from 192.168.208.12:32867 on port 1883. +1710419180: New client connected from 192.168.208.12:32867 as Client4 (p2, c1, k60). +1710419185: New connection from 192.168.208.13:45283 on port 1883. +1710419185: New client connected from 192.168.208.13:45283 as Client3 (p2, c1, k60). +1710419213: New connection from 192.168.208.14:37403 on port 1883. +1710419213: New client connected from 192.168.208.14:37403 as Client5 (p2, c1, k60). +1710419280: New connection from 192.168.208.15:52501 on port 1883. +1710419280: New client connected from 192.168.208.15:52501 as Client1 (p2, c1, k60). +1710419297: Outgoing messages are being dropped for client Client5. +1710419316: Outgoing messages are being dropped for client Client3. +1710419334: Client Client1 disconnected. +1710419394: Client Client5 closed its connection. +1710419395: New connection from 192.168.208.14:34443 on port 1883. +1710419395: New client connected from 192.168.208.14:34443 as Client5 (p2, c1, k60). +1710419463: mosquitto version 2.0.18 terminating +1710419486: mosquitto version 2.0.18 starting +1710419486: Config loaded from /mosquitto/config/mosquitto.conf. +1710419486: Opening ipv4 listen socket on port 1883. +1710419486: mosquitto version 2.0.18 running +1710419519: New connection from 192.168.224.13:47567 on port 1883. +1710419519: New client connected from 192.168.224.13:47567 as Client4 (p2, c1, k60). +1710419520: New connection from 192.168.224.12:38101 on port 1883. +1710419520: New client connected from 192.168.224.12:38101 as Client3 (p2, c1, k60). +1710419558: New connection from 192.168.224.14:43853 on port 1883. +1710419558: New client connected from 192.168.224.14:43853 as Client5 (p2, c1, k60). +1710419582: New connection from 192.168.224.15:34027 on port 1883. +1710419582: New client connected from 192.168.224.15:34027 as Client2 (p2, c1, k60). +1710419612: New connection from 192.168.224.16:47491 on port 1883. +1710419612: New client connected from 192.168.224.16:47491 as Client1 (p2, c1, k60). +1710419629: Outgoing messages are being dropped for client Client2. +1710419629: Outgoing messages are being dropped for client Client5. +1710419632: Outgoing messages are being dropped for client Client3. +1710419674: Client Client1 disconnected. +1710419684: Client Client5 closed its connection. +1710419685: New connection from 192.168.224.14:46157 on port 1883. +1710419685: New client connected from 192.168.224.14:46157 as Client5 (p2, c1, k60). +1710419701: Client Client3 closed its connection. +1710419702: New connection from 192.168.224.12:43897 on port 1883. +1710419702: New client connected from 192.168.224.12:43897 as Client3 (p2, c1, k60). +1710419703: Client Client2 closed its connection. +1710419704: New connection from 192.168.224.15:49603 on port 1883. +1710419704: New client connected from 192.168.224.15:49603 as Client2 (p2, c1, k60). +1710419803: mosquitto version 2.0.18 terminating +1710419857: mosquitto version 2.0.18 starting +1710419857: Config loaded from /mosquitto/config/mosquitto.conf. +1710419857: Opening ipv4 listen socket on port 1883. +1710419857: mosquitto version 2.0.18 running +1710419896: New connection from 192.168.240.12:34677 on port 1883. +1710419896: New client connected from 192.168.240.12:34677 as postgres (p2, c1, k60). +1710419953: New connection from 192.168.240.13:37701 on port 1883. +1710419953: New client connected from 192.168.240.13:37701 as memgraph (p2, c1, k60). +1710420024: New connection from 192.168.240.14:57105 on port 1883. +1710420024: New client connected from 192.168.240.14:57105 as ongdb (p2, c1, k60). +1710420030: mosquitto version 2.0.18 terminating +1710420068: mosquitto version 2.0.18 starting +1710420068: Config loaded from /mosquitto/config/mosquitto.conf. +1710420068: Opening ipv4 listen socket on port 1883. +1710420068: mosquitto version 2.0.18 running +1710420133: New connection from 172.18.0.12:52069 on port 1883. +1710420133: New client connected from 172.18.0.12:52069 as memgraph (p2, c1, k60). +1710420172: New connection from 172.18.0.13:43409 on port 1883. +1710420172: New client connected from 172.18.0.13:43409 as ongdb (p2, c1, k60). +1710420221: New connection from 172.18.0.14:37937 on port 1883. +1710420221: New client connected from 172.18.0.14:37937 as postgres (p2, c1, k60). +1710420292: New connection from 172.18.0.15:57211 on port 1883. +1710420292: New client connected from 172.18.0.15:57211 as neo4j (p2, c1, k60). +1710420299: New connection from 172.18.0.16:56193 on port 1883. +1710420299: New client connected from 172.18.0.16:56193 as Client1 (p2, c1, k60). +1710420315: Outgoing messages are being dropped for client neo4j. +1710420315: Outgoing messages are being dropped for client ongdb. +1710420353: Client Client1 disconnected. +1710420413: Client ongdb closed its connection. +1710420414: New connection from 172.18.0.13:42417 on port 1883. +1710420414: New client connected from 172.18.0.13:42417 as ongdb (p2, c1, k60). +1710420997: mosquitto version 2.0.18 terminating +1710421041: mosquitto version 2.0.18 starting +1710421041: Config loaded from /mosquitto/config/mosquitto.conf. +1710421041: Opening ipv4 listen socket on port 1883. +1710421041: mosquitto version 2.0.18 running +1710421082: New connection from 172.19.0.12:40029 on port 1883. +1710421082: New client connected from 172.19.0.12:40029 as postgres (p2, c1, k60). +1710421105: New connection from 172.19.0.13:51985 on port 1883. +1710421105: New client connected from 172.19.0.13:51985 as memgraph (p2, c1, k60). +1710421154: New connection from 172.19.0.14:39737 on port 1883. +1710421154: New client connected from 172.19.0.14:39737 as ongdb (p2, c1, k60). +1710421238: New connection from 172.19.0.15:60217 on port 1883. +1710421238: New client connected from 172.19.0.15:60217 as neo4j (p2, c1, k60). +1710421238: New connection from 172.19.0.16:37887 on port 1883. +1710421238: New client connected from 172.19.0.16:37887 as Client1 (p2, c1, k60). +1710421253: Outgoing messages are being dropped for client neo4j. +1710421255: Outgoing messages are being dropped for client ongdb. +1710421265: Outgoing messages are being dropped for client postgres. +1710421296: Client Client1 disconnected. +1710421358: Client neo4j closed its connection. +1710421359: New connection from 172.19.0.15:41693 on port 1883. +1710421359: New client connected from 172.19.0.15:41693 as neo4j (p2, c1, k60). +1710421388: mosquitto version 2.0.18 terminating +1710421423: mosquitto version 2.0.18 starting +1710421423: Config loaded from /mosquitto/config/mosquitto.conf. +1710421423: Opening ipv4 listen socket on port 1883. +1710421423: mosquitto version 2.0.18 running +1710421464: New connection from 172.20.0.12:54555 on port 1883. +1710421465: New client connected from 172.20.0.12:54555 as postgres (p2, c1, k60). +1710421486: New connection from 172.20.0.13:54783 on port 1883. +1710421486: New client connected from 172.20.0.13:54783 as memgraph (p2, c1, k60). +1710421525: New connection from 172.20.0.14:34883 on port 1883. +1710421525: New client connected from 172.20.0.14:34883 as ongdb (p2, c1, k60). +1710421567: New connection from 172.20.0.15:40451 on port 1883. +1710421567: New client connected from 172.20.0.15:40451 as neo4j (p2, c1, k60). +1710421579: New connection from 172.20.0.16:47253 on port 1883. +1710421579: New client connected from 172.20.0.16:47253 as Client1 (p2, c1, k60). +1710421596: Outgoing messages are being dropped for client neo4j. +1710421596: Outgoing messages are being dropped for client ongdb. +1710421602: Outgoing messages are being dropped for client postgres. +1710421604: Client Client1 disconnected. +1710421646: Client ongdb closed its connection. +1710421647: New connection from 172.20.0.14:52985 on port 1883. +1710421647: New client connected from 172.20.0.14:52985 as ongdb (p2, c1, k60). +1710421674: mosquitto version 2.0.18 terminating +1710421717: mosquitto version 2.0.18 starting +1710421717: Config loaded from /mosquitto/config/mosquitto.conf. +1710421717: Opening ipv4 listen socket on port 1883. +1710421717: mosquitto version 2.0.18 running +1710421728: mosquitto version 2.0.18 terminating +1710421761: mosquitto version 2.0.18 starting +1710421761: Config loaded from /mosquitto/config/mosquitto.conf. +1710421761: Opening ipv4 listen socket on port 1883. +1710421761: mosquitto version 2.0.18 running +1710421795: New connection from 172.21.0.12:59927 on port 1883. +1710421795: New client connected from 172.21.0.12:59927 as memgraph (p2, c1, k60). +1710421861: New connection from 172.21.0.13:33601 on port 1883. +1710421861: New client connected from 172.21.0.13:33601 as ongdb (p2, c1, k60). +1710421974: mosquitto version 2.0.18 terminating +1710422097: mosquitto version 2.0.18 starting +1710422097: Config loaded from /mosquitto/config/mosquitto.conf. +1710422097: Opening ipv4 listen socket on port 1883. +1710422097: mosquitto version 2.0.18 running +1710422130: New connection from 172.22.0.12:46001 on port 1883. +1710422130: New client connected from 172.22.0.12:46001 as memgraph (p2, c1, k60). +1710422158: New connection from 172.22.0.13:52359 on port 1883. +1710422158: New client connected from 172.22.0.13:52359 as postgres (p2, c1, k60). +1710422161: New connection from 172.22.0.14:60773 on port 1883. +1710422161: New client connected from 172.22.0.14:60773 as ongdb (p2, c1, k60). +1710422225: New connection from 172.22.0.15:38939 on port 1883. +1710422225: New client connected from 172.22.0.15:38939 as neo4j (p2, c1, k60). +1710422233: New connection from 172.22.0.16:48229 on port 1883. +1710422233: New client connected from 172.22.0.16:48229 as Client1 (p2, c1, k60). +1710422245: Client Client1 disconnected. +1710424183: mosquitto version 2.0.18 terminating +1710424374: mosquitto version 2.0.18 starting +1710424374: Config loaded from /mosquitto/config/mosquitto.conf. +1710424374: Opening ipv4 listen socket on port 1883. +1710424374: mosquitto version 2.0.18 running +1710424407: New connection from 172.23.0.12:53913 on port 1883. +1710424407: New client connected from 172.23.0.12:53913 as memgraph (p2, c1, k60). +1710424437: New connection from 172.23.0.13:57275 on port 1883. +1710424437: New client connected from 172.23.0.13:57275 as ongdb (p2, c1, k60). +1710424464: New connection from 172.23.0.14:35799 on port 1883. +1710424464: New client connected from 172.23.0.14:35799 as postgres (p2, c1, k60). +1710424548: New connection from 172.23.0.15:39411 on port 1883. +1710424548: New client connected from 172.23.0.15:39411 as neo4j (p2, c1, k60). +1710424571: New connection from 172.23.0.16:53741 on port 1883. +1710424571: New client connected from 172.23.0.16:53741 as Client1 (p2, c1, k60). +1710424582: Client Client1 disconnected. +1710428718: mosquitto version 2.0.18 terminating +1710488785: mosquitto version 2.0.18 starting +1710488785: Config loaded from /mosquitto/config/mosquitto.conf. +1710488785: Opening ipv4 listen socket on port 1883. +1710488785: mosquitto version 2.0.18 running +1710488799: mosquitto version 2.0.18 terminating +1710488822: mosquitto version 2.0.18 starting +1710488822: Config loaded from /mosquitto/config/mosquitto.conf. +1710488822: Opening ipv4 listen socket on port 1883. +1710488822: mosquitto version 2.0.18 running +1710488889: New connection from 172.20.0.7:51909 on port 1883. +1710488889: New client connected from 172.20.0.7:51909 as neo4j (p2, c1, k60). +1710488916: New connection from 172.20.0.8:58695 on port 1883. +1710488916: New client connected from 172.20.0.8:58695 as Client1 (p2, c1, k60). +1710488921: Outgoing messages are being dropped for client neo4j. +1710489009: Client neo4j closed its connection. +1710489010: New connection from 172.20.0.7:37041 on port 1883. +1710489010: New client connected from 172.20.0.7:37041 as neo4j (p2, c1, k60). +1710489013: Outgoing messages are being dropped for client neo4j. +1710489161: Client Client1 disconnected. +1710489190: Client neo4j closed its connection. +1710489191: New connection from 172.20.0.7:40471 on port 1883. +1710489191: New client connected from 172.20.0.7:40471 as neo4j (p2, c1, k60). +1710490099: mosquitto version 2.0.18 terminating +1710490141: mosquitto version 2.0.18 starting +1710490141: Config loaded from /mosquitto/config/mosquitto.conf. +1710490141: Opening ipv4 listen socket on port 1883. +1710490141: mosquitto version 2.0.18 running +1710490173: New connection from 172.21.0.10:38709 on port 1883. +1710490173: New client connected from 172.21.0.10:38709 as Client1 (p2, c1, k60). +1710490174: New connection from 172.21.0.9:57717 on port 1883. +1710490174: New client connected from 172.21.0.9:57717 as postgres (p2, c1, k60). +1710490180: Outgoing messages are being dropped for client postgres. +1710490294: Client postgres closed its connection. +1710490295: New connection from 172.21.0.9:45235 on port 1883. +1710490295: New client connected from 172.21.0.9:45235 as postgres (p2, c1, k60). +1710490300: Outgoing messages are being dropped for client postgres. +1710490392: Client Client1 disconnected. +1710490516: mosquitto version 2.0.18 terminating +1710490555: mosquitto version 2.0.18 starting +1710490555: Config loaded from /mosquitto/config/mosquitto.conf. +1710490555: Opening ipv4 listen socket on port 1883. +1710490555: mosquitto version 2.0.18 running +1710490587: New connection from 172.22.0.10:38907 on port 1883. +1710490587: New client connected from 172.22.0.10:38907 as Client1 (p2, c1, k60). +1710490587: New connection from 172.22.0.9:58715 on port 1883. +1710490587: New client connected from 172.22.0.9:58715 as postgres (p2, c1, k60). +1710490593: Outgoing messages are being dropped for client postgres. +1710490707: Client postgres closed its connection. +1710490708: New connection from 172.22.0.9:44491 on port 1883. +1710490708: New client connected from 172.22.0.9:44491 as postgres (p2, c1, k60). +1710490713: Outgoing messages are being dropped for client postgres. +1710490806: Client Client1 disconnected. +1710490829: Client postgres closed its connection. +1710490830: New connection from 172.22.0.9:51887 on port 1883. +1710490830: New client connected from 172.22.0.9:51887 as postgres (p2, c1, k60). +1710492880: mosquitto version 2.0.18 terminating +1710495118: mosquitto version 2.0.18 starting +1710495118: Config loaded from /mosquitto/config/mosquitto.conf. +1710495118: Opening ipv4 listen socket on port 1883. +1710495118: mosquitto version 2.0.18 running +1710495180: New connection from 172.23.0.10:51835 on port 1883. +1710495180: New client connected from 172.23.0.10:51835 as Client1 (p2, c1, k60). +1710495180: New connection from 172.23.0.9:51835 on port 1883. +1710495180: New client connected from 172.23.0.9:51835 as postgres (p2, c1, k60). +1710495184: Outgoing messages are being dropped for client postgres. +1710495300: Client postgres closed its connection. +1710495301: New connection from 172.23.0.9:36643 on port 1883. +1710495301: New client connected from 172.23.0.9:36643 as postgres (p2, c1, k60). +1710495306: Outgoing messages are being dropped for client postgres. +1710495319: mosquitto version 2.0.18 terminating +1710495360: mosquitto version 2.0.18 starting +1710495360: Config loaded from /mosquitto/config/mosquitto.conf. +1710495360: Opening ipv4 listen socket on port 1883. +1710495360: mosquitto version 2.0.18 running +1710495392: New connection from 172.25.0.10:51311 on port 1883. +1710495392: New client connected from 172.25.0.10:51311 as Client1 (p2, c1, k60). +1710495393: New connection from 172.25.0.9:54871 on port 1883. +1710495393: New client connected from 172.25.0.9:54871 as postgres (p2, c1, k60). +1710495513: Client postgres disconnected: Broken pipe. +1710495514: New connection from 172.25.0.9:45219 on port 1883. +1710495514: New client connected from 172.25.0.9:45219 as postgres (p2, c1, k60). +1710495615: Client Client1 disconnected. +1710495634: Client postgres closed its connection. +1710495635: New connection from 172.25.0.9:37973 on port 1883. +1710495635: New client connected from 172.25.0.9:37973 as postgres (p2, c1, k60). +1710496131: mosquitto version 2.0.18 terminating diff --git a/code/infrastructure/streaming/mosquitto.conf b/code/infrastructure/streaming/broker/mosquitto.conf old mode 100755 new mode 100644 similarity index 52% rename from code/infrastructure/streaming/mosquitto.conf rename to code/infrastructure/streaming/broker/mosquitto.conf index 59034f4fba026c7b530f55156223604050ee9cd2..cb4082b7e060d744dc59a8e2dad8c8f1c277a59b --- a/code/infrastructure/streaming/mosquitto.conf +++ b/code/infrastructure/streaming/broker/mosquitto.conf @@ -1,6 +1,5 @@ -persistence true -persistence_location /mosquitto/data/ + log_dest file /mosquitto/log/mosquitto.log allow_anonymous true listener 1883 0.0.0.0 -max_queued_messages 1000 \ No newline at end of file +max_queued_messages 1000000000 \ No newline at end of file diff --git a/code/infrastructure/streaming/clients/pub/pub_cdm.py b/code/infrastructure/streaming/clients/pub/pub_cdm.py index f97d4ce76f2a56537eaf672d87c51397957219f5..85aef2f11045c34f1cdf53ce34f6c2fcf2c9cb7d 100755 --- a/code/infrastructure/streaming/clients/pub/pub_cdm.py +++ b/code/infrastructure/streaming/clients/pub/pub_cdm.py @@ -6,7 +6,7 @@ import os broker_hostname = str(os.getenv('mos_host',default="localhost")) port = int(os.getenv('mos_port',default="1883")) -lines_per_window = int(os.getenv('lines_per_window',default="1000")) +lines_per_window = int(os.getenv('lines_per_window',default=1000)) path = str(os.getenv('path_data',default='C:\\Studium_MIN\\05_Masterarbeit\\thesis\\ma_code\\code\\infrastructure\\streaming\\clients\\pub\\data\\')) sleep_time = int(os.getenv('sleeptime',default=1)) @@ -18,7 +18,7 @@ files = [ 'ta1-cadets-e3-official-1_1.json', 'ta1-cadets-e3-official-1_2.json', 'ta1-cadets-e3-official-1_3.json', - 'ta1-cadets-e3-official-1_4.json', + 'ta1-cadets-e3-official-1_4.json', 'ta1-cadets-e3-official-2_0.json', 'ta1-cadets-e3-official-2_1.json' ] @@ -29,9 +29,15 @@ topic = "neo4j" def read_moving_window_and_send_data(file_path, lines_per_window, line_count): with open(file_path, 'r') as file: i = 0 + index = 0 while True: + print("index: ",index) + print("i: ",i) + if index> stop_index: + break try: i += 1 + index += (lines_per_window) if i>=line_count: break # Read the next lines_per_window lines @@ -48,7 +54,7 @@ def read_moving_window_and_send_data(file_path, lines_per_window, line_count): # Process a window and send a message def process_window_lines(window_data, window_nr): - print(f"Processing window {window_nr}:") + print(f"Processing batch {window_nr}:") values =[] for line in window_data: json_obj = json.loads(line.strip()) @@ -61,15 +67,15 @@ def send_message(messages): msg_count = 1 time.sleep(sleep_time) for m in messages: - print(m) + #print(m) result = client.publish(topic,m) status = result[0] - if status == 0: - print(f'Message {str(msg_count)} from {lines_per_window} lines published') - else: - print("Failed to send message to topic " + topic) - if not client.is_connected(): - print("Client not connected, exiting...") + # if status == 0: + # #print(f'Message {str(msg_count)} from {lines_per_window} lines published') + # else: + # print("Failed to send message to topic " + topic) + # if not client.is_connected(): + # print("Client not connected, exiting...") msg_count +=1 def on_connect(client, userdata, flags, return_code): @@ -91,6 +97,7 @@ try: stop_index = line_count[i] file_path = path+file print("Reading file: ", file) + print("Max number of batches: ",line_count[i]/lines_per_window) read_moving_window_and_send_data(file_path, lines_per_window,stop_index) i += 1 finally: diff --git a/code/infrastructure/streaming/clients/spielwiese.ipynb b/code/infrastructure/streaming/clients/spielwiese.ipynb index 96327cc8dd86ecdfe3f38d7dc9f516846d60fe9b..ce4e26a688dd7db9e605438716be45b109887491 100755 --- a/code/infrastructure/streaming/clients/spielwiese.ipynb +++ b/code/infrastructure/streaming/clients/spielwiese.ipynb @@ -1,125 +1,18939 @@ { "cells": [ - { - "cell_type": "markdown", - "metadata": {}, - "source": [ - "# Mögliche Optimierung der Neo4j Subscriber..." - ] - }, { "cell_type": "code", - "execution_count": null, + "execution_count": 10, "metadata": {}, - "outputs": [], - "source": [ - "import paho.mqtt.client as mqtt\n", - "import time\n", - "import json\n", - "from neo4j import GraphDatabase\n", - "import os\n", - "from threading import Thread\n", - "from queue import Queue\n", - "\n", - "# Existing setup for MQTT and Neo4j connection\n", - "broker_hostname = str(os.getenv('mos_host', default=\"localhost\"))\n", - "broker_port = int(os.getenv('mos_port', default=1883))\n", - "client = mqtt.Client(\"Client4\")\n", - "db_uri = str(os.getenv('mem_host', default=\"bolt://localhost:7687\"))\n", - "neo4j_auth = (\"\", \"\")\n", - "abort_time_limit = int(os.getenv('abort_time_limit', default=99999))\n", - "\n", - "# Initialize a Queue for incoming MQTT messages\n", - "message_queue = Queue()\n", - "\n", - "def flatten_obj(key, val, target):\n", - " # Your existing flatten_obj function\n", - " pass\n", - "\n", - "def parse_json_to_cypher(input):\n", - " # Your existing parse_json_to_cypher function\n", - " pass\n", - "\n", - "def create_cypher_query_from_cdm(json):\n", - " # Your existing create_cypher_query_from_cdm function\n", - " pass\n", - "\n", - "def on_message(client, userdata, message):\n", - " data = json.loads(message.payload.decode(\"utf-8\"))\n", - " # Instead of processing immediately, put the message into the queue\n", - " message_queue.put(data)\n", - "\n", - "def on_connect(client, userdata, flags, return_code):\n", - " # Your existing on_connect function\n", - " pass\n", - "\n", - "def connect_to_db(uri, auth):\n", - " # Establish db connection to neo4j\n", - " driver = GraphDatabase.driver(uri, auth=auth)\n", - " # Consider moving session cleanup and connection verification outside of this function\n", - " return driver\n", - "\n", - "def execute_batch_queries(batch):\n", - " # New function to handle batch processing of messages\n", - " with driver.session() as session:\n", - " for data in batch:\n", - " q, attr = create_cypher_query_from_cdm(data)\n", - " session.run(q, attributes=attr)\n", - "\n", - "def process_message_batch():\n", - " while True:\n", - " batch = []\n", - " while not message_queue.empty():\n", - " batch.append(message_queue.get())\n", - "\n", - " if batch:\n", - " execute_batch_queries(batch)\n", - "\n", - " for _ in batch:\n", - " message_queue.task_done()\n", - "\n", - "# Start processing thread for handling MQTT messages in batches\n", - "processing_thread = Thread(target=process_message_batch, daemon=True)\n", - "processing_thread.start()\n", - "\n", - "driver = connect_to_db(db_uri, neo4j_auth)\n", - "\n", - "client.on_connect = on_connect\n", - "client.on_message = on_message\n", - "client.connect(broker_hostname, broker_port)\n", - "client.loop_start()\n", - "\n", - "# Your MQTT client loop and cleanup logic with try-finally\n", - "try:\n", - " i = 0\n", - " while i < abort_time_limit and not client.failed_connect:\n", - " time.sleep(1)\n", - " i += 1\n", - "finally:\n", - " client.disconnect()\n", - " client.loop_stop()\n", - " driver.close()\n" - ] - }, - { - "cell_type": "markdown", - "metadata": {}, - "source": [ - "CDM Data" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "metadata": {}, - "outputs": [], - "source": [] - }, - { - "cell_type": "code", - "execution_count": null, - "metadata": {}, - "outputs": [], + "outputs": [ + { + "name": "stderr", + "output_type": "stream", + "text": [ + "C:\\Users\\SVEN-O~1\\AppData\\Local\\Temp/ipykernel_9780/4244516374.py:17: DeprecationWarning: Callback API version 1 is deprecated, update to latest version\n", + " client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,\"postgres\",clean_session=False)\n" + ] + }, + { + "name": "stdout", + "output_type": "stream", + "text": [ + "Create DB Connection\n", + "Create PG CDM Schema: \n", + "connected\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Host': {'uuid': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'hostName': 'ta1-cadets', 'hostIdentifiers': [], 'osDetails': 'FreeBSD 12.0-CURRENT FreeBSD 12.0-CURRENT #1 1863588dca9(HEAD)-dirty: Wed Feb 28 17:23:37 UTC 2018 root@ta1-cadets:/usr/obj/data/update/build-meta/freebsd/amd64.amd64/sys/CADETS amd64', 'hostType': 'HOST_DESKTOP', 'interfaces': [{'name': 'vtnet0', 'macAddress': '52:54:00:f0:0d:23', 'ipAddresses': ['fe80::5054:ff:fef0:d23%vtnet0', '10.0.6.23']}, {'name': 'vtnet1', 'macAddress': '52:54:00:f0:08:23', 'ipAddresses': ['fe80::5054:ff:fef0:823%vtnet1', '128.55.12.73']}]}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "no edges\n", + "Insert Query 1: INSERT INTO host (line, uuid,hostName,osDetails,hostType,interfaces_0_name,interfaces_0_macAddress,interfaces_0_ipAddresses_0,interfaces_0_ipAddresses_1,interfaces_1_name,interfaces_1_macAddress,interfaces_1_ipAddresses_0,interfaces_1_ipAddresses_1) VALUES (nextval('line_number_seq'),'83C8ED1F-5045-DBCD-B39F-918F0DF4F851','ta1-cadets','FreeBSD 12.0-CURRENT FreeBSD 12.0-CURRENT #1 1863588dca9(HEAD)-dirty: Wed Feb 28 17:23:37 UTC 2018 root@ta1-cadets:/usr/obj/data/update/build-meta/freebsd/amd64.amd64/sys/CADETS amd64','HOST_DESKTOP','vtnet0','52:54:00:f0:0d:23','fe80::5054:ff:fef0:d23%vtnet0','10.0.6.23','vtnet1','52:54:00:f0:08:23','fe80::5054:ff:fef0:823%vtnet1','128.55.12.73');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'83C8ED1F-5045-DBCD-B39F-918F0DF4F851','Host');\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '42DD2C9E-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'42DD2C9E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'42DD2C9E-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'42DD2C9E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Principal': {'uuid': '7DCA248E-1BBA-59F5-9227-B25D5F253594', 'type': 'PRINCIPAL_LOCAL', 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'userId': '0', 'username': {'string': 'root'}, 'groupIds': [], 'properties': {'map': {}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO principal (line, uuid,type,hostId,userId,username_string) VALUES (nextval('line_number_seq'),'7DCA248E-1BBA-59F5-9227-B25D5F253594','PRINCIPAL_LOCAL','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0','root');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7DCA248E-1BBA-59F5-9227-B25D5F253594','Principal');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7DCA248E-1BBA-59F5-9227-B25D5F253594','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','hasAccountOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 787, 'parentSubject': None, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '7DCA248E-1BBA-59F5-9227-B25D5F253594', 'startTimestampNanos': 0, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'72FB0406-3678-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','787','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','7DCA248E-1BBA-59F5-9227-B25D5F253594','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'72FB0406-3678-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'72FB0406-3678-11E8-BF66-D9AA8AFF4A69','7DCA248E-1BBA-59F5-9227-B25D5F253594','hasLocalPrincipal'),(nextval('edge_number_seq'),'72FB0406-3678-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3EDAE524-F140-566E-8E72-94FE35EDC809', 'sequence': {'long': 0}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '42DD2C9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861813350340, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3EDAE524-F140-566E-8E72-94FE35EDC809','0','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','42DD2C9E-36C2-11E8-BF66-D9AA8AFF4A69','1522706861813350340','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3EDAE524-F140-566E-8E72-94FE35EDC809','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3EDAE524-F140-566E-8E72-94FE35EDC809','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3EDAE524-F140-566E-8E72-94FE35EDC809','42DD2C9E-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '42DD2DBA-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'42DD2DBA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'42DD2DBA-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'42DD2DBA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5CC868CD-FF30-5E2B-BB74-6C5B474A62B2', 'sequence': {'long': 1}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '42DD2DBA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861813350340, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5CC868CD-FF30-5E2B-BB74-6C5B474A62B2','1','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','42DD2DBA-36C2-11E8-BF66-D9AA8AFF4A69','1522706861813350340','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5CC868CD-FF30-5E2B-BB74-6C5B474A62B2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5CC868CD-FF30-5E2B-BB74-6C5B474A62B2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5CC868CD-FF30-5E2B-BB74-6C5B474A62B2','42DD2DBA-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4375DD69-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4375DD69-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4375DD69-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4375DD69-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4375DCB0-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4375DCB0-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4375DCB0-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4375DCB0-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5CABA334-5FCC-5353-9A76-D039DC87DAFE', 'sequence': {'long': 2}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4375DCB0-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4375DD69-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706861813350340, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5CABA334-5FCC-5353-9A76-D039DC87DAFE','2','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4375DCB0-36C2-11E8-BF66-D9AA8AFF4A69','4375DD69-36C2-11E8-BF66-D9AA8AFF4A69','1522706861813350340','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5CABA334-5FCC-5353-9A76-D039DC87DAFE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5CABA334-5FCC-5353-9A76-D039DC87DAFE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5CABA334-5FCC-5353-9A76-D039DC87DAFE','4375DCB0-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'5CABA334-5FCC-5353-9A76-D039DC87DAFE','4375DD69-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '835EB7B8-CC6A-5940-A952-18469BBFA613', 'sequence': {'long': 3}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861813350340, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'835EB7B8-CC6A-5940-A952-18469BBFA613','3','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706861813350340','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'835EB7B8-CC6A-5940-A952-18469BBFA613','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'835EB7B8-CC6A-5940-A952-18469BBFA613','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9964F506-0FA0-5AA8-924C-63FEDAC0D36B', 'sequence': {'long': 4}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861813350340, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9964F506-0FA0-5AA8-924C-63FEDAC0D36B','4','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706861813350340','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9964F506-0FA0-5AA8-924C-63FEDAC0D36B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9964F506-0FA0-5AA8-924C-63FEDAC0D36B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3F4FE9CD-35AF-5A78-9188-69564522B176', 'sequence': {'long': 5}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861813350340, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3F4FE9CD-35AF-5A78-9188-69564522B176','5','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706861813350340','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3F4FE9CD-35AF-5A78-9188-69564522B176','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3F4FE9CD-35AF-5A78-9188-69564522B176','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CF1478A9-72E4-5D8E-ABD9-A93B56BB434C', 'sequence': {'long': 6}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861813350340, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CF1478A9-72E4-5D8E-ABD9-A93B56BB434C','6','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706861813350340','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CF1478A9-72E4-5D8E-ABD9-A93B56BB434C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CF1478A9-72E4-5D8E-ABD9-A93B56BB434C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 1281, 'parentSubject': None, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '7DCA248E-1BBA-59F5-9227-B25D5F253594', 'startTimestampNanos': 0, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','1281','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','7DCA248E-1BBA-59F5-9227-B25D5F253594','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','7DCA248E-1BBA-59F5-9227-B25D5F253594','hasLocalPrincipal'),(nextval('edge_number_seq'),'0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '30B3A036-2CF4-5950-9768-301A8144D037', 'sequence': {'long': 7}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861923350864, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'30B3A036-2CF4-5950-9768-301A8144D037','7','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706861923350864','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'30B3A036-2CF4-5950-9768-301A8144D037','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'30B3A036-2CF4-5950-9768-301A8144D037','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E04FCB00-9CCA-5B76-8E80-292D9D5844ED', 'sequence': {'long': 8}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861923350864, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E04FCB00-9CCA-5B76-8E80-292D9D5844ED','8','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706861923350864','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E04FCB00-9CCA-5B76-8E80-292D9D5844ED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E04FCB00-9CCA-5B76-8E80-292D9D5844ED','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '438736C4-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'438736C4-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'438736C4-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'438736C4-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BFBA243A-34F8-5FD1-9359-EE55A3634B39', 'sequence': {'long': 9}, 'type': 'EVENT_CONNECT', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '438736C4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861923350864, 'name': {'string': 'aue_connect'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'address': 'public/pickup', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_address,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BFBA243A-34F8-5FD1-9359-EE55A3634B39','9','EVENT_CONNECT','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','438736C4-36C2-11E8-BF66-D9AA8AFF4A69','1522706861923350864','aue_connect','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','public/pickup','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BFBA243A-34F8-5FD1-9359-EE55A3634B39','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BFBA243A-34F8-5FD1-9359-EE55A3634B39','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BFBA243A-34F8-5FD1-9359-EE55A3634B39','438736C4-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '43877862-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'43877862-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'43877862-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'43877862-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '0C0D74DB-3680-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'0C0D74DB-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C0D74DB-3680-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C0D74DB-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Principal': {'uuid': '5B2929DF-D2D0-5AFD-B05D-EC65679EC9D7', 'type': 'PRINCIPAL_LOCAL', 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'userId': '125', 'username': {'string': 'postfix'}, 'groupIds': [], 'properties': {'map': {}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO principal (line, uuid,type,hostId,userId,username_string) VALUES (nextval('line_number_seq'),'5B2929DF-D2D0-5AFD-B05D-EC65679EC9D7','PRINCIPAL_LOCAL','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','125','postfix');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5B2929DF-D2D0-5AFD-B05D-EC65679EC9D7','Principal');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5B2929DF-D2D0-5AFD-B05D-EC65679EC9D7','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','hasAccountOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2303, 'parentSubject': None, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '5B2929DF-D2D0-5AFD-B05D-EC65679EC9D7', 'startTimestampNanos': 0, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2303','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5B2929DF-D2D0-5AFD-B05D-EC65679EC9D7','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','5B2929DF-D2D0-5AFD-B05D-EC65679EC9D7','hasLocalPrincipal'),(nextval('edge_number_seq'),'0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0401AEEC-8F82-5384-B36F-05EEBB9F8424', 'sequence': {'long': 10}, 'type': 'EVENT_ACCEPT', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0D74DB-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '43877862-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706861923350864, 'name': {'string': 'aue_accept'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'return_value': '11', 'address': '', 'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '11', 'fd': '6', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_return_value,properties_map_address,properties_map_host,properties_map_ret_fd1,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0401AEEC-8F82-5384-B36F-05EEBB9F8424','10','EVENT_ACCEPT','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','0C0D74DB-3680-11E8-BF66-D9AA8AFF4A69','43877862-36C2-11E8-BF66-D9AA8AFF4A69','1522706861923350864','aue_accept','11','','83c8ed1f-5045-dbcd-b39f-918f0df4f851','11','6','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0401AEEC-8F82-5384-B36F-05EEBB9F8424','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0401AEEC-8F82-5384-B36F-05EEBB9F8424','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0401AEEC-8F82-5384-B36F-05EEBB9F8424','0C0D74DB-3680-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'0401AEEC-8F82-5384-B36F-05EEBB9F8424','43877862-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '898C411F-B84C-5DBB-BEBF-BF12A3581E52', 'sequence': {'long': 11}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861923350864, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '1', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'898C411F-B84C-5DBB-BEBF-BF12A3581E52','11','EVENT_FCNTL','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','1522706861923350864','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','01','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','1','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'898C411F-B84C-5DBB-BEBF-BF12A3581E52','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'898C411F-B84C-5DBB-BEBF-BF12A3581E52','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8739E263-2375-5336-924F-9BCAD3F07866', 'sequence': {'long': 12}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861923350864, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '6', 'fd': '3', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8739E263-2375-5336-924F-9BCAD3F07866','12','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706861923350864','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','6','3','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8739E263-2375-5336-924F-9BCAD3F07866','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8739E263-2375-5336-924F-9BCAD3F07866','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '67A2BED6-AB1D-5D8F-B0C4-AE1A39A7DD98', 'sequence': {'long': 13}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861923350864, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '02'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '2', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'67A2BED6-AB1D-5D8F-B0C4-AE1A39A7DD98','13','EVENT_FCNTL','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','1522706861923350864','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','02','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','2','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'67A2BED6-AB1D-5D8F-B0C4-AE1A39A7DD98','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'67A2BED6-AB1D-5D8F-B0C4-AE1A39A7DD98','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '689146FF-FC37-5E3D-9CD9-A5D91D5A7391', 'sequence': {'long': 14}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861923350864, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'689146FF-FC37-5E3D-9CD9-A5D91D5A7391','14','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706861923350864','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'689146FF-FC37-5E3D-9CD9-A5D91D5A7391','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'689146FF-FC37-5E3D-9CD9-A5D91D5A7391','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B080312E-AC37-5B3D-8B21-47BC4AC2E556', 'sequence': {'long': 15}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861923350864, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '1', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B080312E-AC37-5B3D-8B21-47BC4AC2E556','15','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706861923350864','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','01','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','1','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B080312E-AC37-5B3D-8B21-47BC4AC2E556','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B080312E-AC37-5B3D-8B21-47BC4AC2E556','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D9B2F899-34CC-5342-83D9-9C6090F10C8D', 'sequence': {'long': 16}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861923350864, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '02'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '2', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D9B2F899-34CC-5342-83D9-9C6090F10C8D','16','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706861923350864','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','02','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','2','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D9B2F899-34CC-5342-83D9-9C6090F10C8D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D9B2F899-34CC-5342-83D9-9C6090F10C8D','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '26E6F6AB-17BF-58BF-92EF-48938E31F127', 'sequence': {'long': 17}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '438736C4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861933350905, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'26E6F6AB-17BF-58BF-92EF-48938E31F127','17','EVENT_WRITE','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','438736C4-36C2-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706861933350905','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'26E6F6AB-17BF-58BF-92EF-48938E31F127','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'26E6F6AB-17BF-58BF-92EF-48938E31F127','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'26E6F6AB-17BF-58BF-92EF-48938E31F127','438736C4-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6B1C7691-E7E7-5A4C-A34F-D2E1AC9F29F7', 'sequence': {'long': 18}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '438736C4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861933350905, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6B1C7691-E7E7-5A4C-A34F-D2E1AC9F29F7','18','EVENT_WRITE','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','438736C4-36C2-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706861933350905','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6B1C7691-E7E7-5A4C-A34F-D2E1AC9F29F7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6B1C7691-E7E7-5A4C-A34F-D2E1AC9F29F7','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6B1C7691-E7E7-5A4C-A34F-D2E1AC9F29F7','438736C4-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '925B437F-F42B-57FE-B8F0-D9CD0635F9D2', 'sequence': {'long': 19}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861933350905, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '5', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'925B437F-F42B-57FE-B8F0-D9CD0635F9D2','19','EVENT_WRITE','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706861933350905','aue_write','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','5','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'925B437F-F42B-57FE-B8F0-D9CD0635F9D2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'925B437F-F42B-57FE-B8F0-D9CD0635F9D2','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'925B437F-F42B-57FE-B8F0-D9CD0635F9D2','0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F06BD1DE-2FEB-5D5B-ADE5-34265C2909BB', 'sequence': {'long': 20}, 'type': 'EVENT_READ', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '43877862-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861933350905, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '11', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F06BD1DE-2FEB-5D5B-ADE5-34265C2909BB','20','EVENT_READ','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','43877862-36C2-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706861933350905','aue_read','2','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','11','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F06BD1DE-2FEB-5D5B-ADE5-34265C2909BB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F06BD1DE-2FEB-5D5B-ADE5-34265C2909BB','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F06BD1DE-2FEB-5D5B-ADE5-34265C2909BB','43877862-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '0C0DB755-3680-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'0C0DB755-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C0DB755-3680-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C0DB755-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9D79A58F-2EDF-51CA-9A5F-47950C6F9009', 'sequence': {'long': 21}, 'type': 'EVENT_READ', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0DB755-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861933350905, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '18', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9D79A58F-2EDF-51CA-9A5F-47950C6F9009','21','EVENT_READ','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','0C0DB755-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706861933350905','aue_read','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','18','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9D79A58F-2EDF-51CA-9A5F-47950C6F9009','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9D79A58F-2EDF-51CA-9A5F-47950C6F9009','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9D79A58F-2EDF-51CA-9A5F-47950C6F9009','0C0DB755-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '586C56DA-CB56-745E-96CB-52069E742598', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'586C56DA-CB56-745E-96CB-52069E742598','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'586C56DA-CB56-745E-96CB-52069E742598','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'586C56DA-CB56-745E-96CB-52069E742598','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '69F3F456-3BA9-5576-B7EF-41E3DC2302C6', 'sequence': {'long': 22}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '586C56DA-CB56-745E-96CB-52069E742598'}, 'predicateObjectPath': {'string': '/var/spool/postfix/maildrop'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861933350905, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '7200'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '12', 'return_value': '12', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'69F3F456-3BA9-5576-B7EF-41E3DC2302C6','22','EVENT_OPEN','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','586C56DA-CB56-745E-96CB-52069E742598','/var/spool/postfix/maildrop','1522706861933350905','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','7200','83c8ed1f-5045-dbcd-b39f-918f0df4f851','12','12','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'69F3F456-3BA9-5576-B7EF-41E3DC2302C6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'69F3F456-3BA9-5576-B7EF-41E3DC2302C6','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'69F3F456-3BA9-5576-B7EF-41E3DC2302C6','586C56DA-CB56-745E-96CB-52069E742598','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BB02B3EE-9896-58DA-8780-538378FEE727', 'sequence': {'long': 23}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '586C56DA-CB56-745E-96CB-52069E742598'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861933350905, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '12', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BB02B3EE-9896-58DA-8780-538378FEE727','23','EVENT_CLOSE','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','586C56DA-CB56-745E-96CB-52069E742598','1522706861933350905','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','12','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BB02B3EE-9896-58DA-8780-538378FEE727','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BB02B3EE-9896-58DA-8780-538378FEE727','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BB02B3EE-9896-58DA-8780-538378FEE727','586C56DA-CB56-745E-96CB-52069E742598','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A3B3EBFB-50E8-5D17-B7CB-BF698C76AD29', 'sequence': {'long': 24}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861933350905, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '5', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A3B3EBFB-50E8-5D17-B7CB-BF698C76AD29','24','EVENT_WRITE','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706861933350905','aue_write','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','5','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A3B3EBFB-50E8-5D17-B7CB-BF698C76AD29','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A3B3EBFB-50E8-5D17-B7CB-BF698C76AD29','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A3B3EBFB-50E8-5D17-B7CB-BF698C76AD29','0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '18992259-3264-516B-A46C-3B8556EEA165', 'sequence': {'long': 25}, 'type': 'EVENT_READ', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0DB755-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861933350905, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '18', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'18992259-3264-516B-A46C-3B8556EEA165','25','EVENT_READ','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','0C0DB755-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706861933350905','aue_read','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','18','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'18992259-3264-516B-A46C-3B8556EEA165','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'18992259-3264-516B-A46C-3B8556EEA165','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'18992259-3264-516B-A46C-3B8556EEA165','0C0DB755-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '16AC18EB-1F93-5A82-9A97-B11E2F9091A8', 'sequence': {'long': 26}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '43877862-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861933350905, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '11', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'16AC18EB-1F93-5A82-9A97-B11E2F9091A8','26','EVENT_CLOSE','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','43877862-36C2-11E8-BF66-D9AA8AFF4A69','1522706861933350905','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','11','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'16AC18EB-1F93-5A82-9A97-B11E2F9091A8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'16AC18EB-1F93-5A82-9A97-B11E2F9091A8','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'16AC18EB-1F93-5A82-9A97-B11E2F9091A8','43877862-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7FF3D7F0-632D-522A-8603-63F7E16C5309', 'sequence': {'long': 27}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '438736C4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706861933350905, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7FF3D7F0-632D-522A-8603-63F7E16C5309','27','EVENT_CLOSE','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','438736C4-36C2-11E8-BF66-D9AA8AFF4A69','1522706861933350905','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7FF3D7F0-632D-522A-8603-63F7E16C5309','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7FF3D7F0-632D-522A-8603-63F7E16C5309','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7FF3D7F0-632D-522A-8603-63F7E16C5309','438736C4-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FF4AF065-E1B1-57B7-A929-210B57505F5D', 'sequence': {'long': 28}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4375DCB0-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706862813351957, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FF4AF065-E1B1-57B7-A929-210B57505F5D','28','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4375DCB0-36C2-11E8-BF66-D9AA8AFF4A69','1522706862813351957','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FF4AF065-E1B1-57B7-A929-210B57505F5D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FF4AF065-E1B1-57B7-A929-210B57505F5D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FF4AF065-E1B1-57B7-A929-210B57505F5D','4375DCB0-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0C77BD76-DE0A-5541-A86D-95DABA97A679', 'sequence': {'long': 29}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4375DD69-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706862813351957, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0C77BD76-DE0A-5541-A86D-95DABA97A679','29','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4375DD69-36C2-11E8-BF66-D9AA8AFF4A69','1522706862813351957','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C77BD76-DE0A-5541-A86D-95DABA97A679','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C77BD76-DE0A-5541-A86D-95DABA97A679','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0C77BD76-DE0A-5541-A86D-95DABA97A679','4375DD69-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '440E7114-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'440E7114-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'440E7114-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'440E7114-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '440E7059-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'440E7059-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'440E7059-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'440E7059-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '51E1E104-1EF6-5083-94DA-FA31DA168744', 'sequence': {'long': 30}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '440E7059-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '440E7114-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706862813351957, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'51E1E104-1EF6-5083-94DA-FA31DA168744','30','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','440E7059-36C2-11E8-BF66-D9AA8AFF4A69','440E7114-36C2-11E8-BF66-D9AA8AFF4A69','1522706862813351957','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'51E1E104-1EF6-5083-94DA-FA31DA168744','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'51E1E104-1EF6-5083-94DA-FA31DA168744','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'51E1E104-1EF6-5083-94DA-FA31DA168744','440E7059-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'51E1E104-1EF6-5083-94DA-FA31DA168744','440E7114-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CBE878C7-C225-53AB-ADE3-CEB63CF9F892', 'sequence': {'long': 31}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706862813351957, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CBE878C7-C225-53AB-ADE3-CEB63CF9F892','31','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706862813351957','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CBE878C7-C225-53AB-ADE3-CEB63CF9F892','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CBE878C7-C225-53AB-ADE3-CEB63CF9F892','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E0EB8FA7-4EA4-559E-83A0-E6176E85177C', 'sequence': {'long': 32}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706862813351957, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E0EB8FA7-4EA4-559E-83A0-E6176E85177C','32','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706862813351957','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E0EB8FA7-4EA4-559E-83A0-E6176E85177C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E0EB8FA7-4EA4-559E-83A0-E6176E85177C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '73BB6A5B-7826-554C-A2BC-FFD6A8123476', 'sequence': {'long': 33}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706862813351957, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'73BB6A5B-7826-554C-A2BC-FFD6A8123476','33','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706862813351957','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'73BB6A5B-7826-554C-A2BC-FFD6A8123476','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'73BB6A5B-7826-554C-A2BC-FFD6A8123476','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '64B5458E-A2B6-5C5F-AB09-F4B0614C042A', 'sequence': {'long': 34}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706862813351957, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'64B5458E-A2B6-5C5F-AB09-F4B0614C042A','34','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706862813351957','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'64B5458E-A2B6-5C5F-AB09-F4B0614C042A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'64B5458E-A2B6-5C5F-AB09-F4B0614C042A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Principal': {'uuid': '26B62C58-E245-578A-AE04-495EBA139703', 'type': 'PRINCIPAL_LOCAL', 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'userId': '1001', 'username': {'string': 'darpa'}, 'groupIds': [], 'properties': {'map': {}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO principal (line, uuid,type,hostId,userId,username_string) VALUES (nextval('line_number_seq'),'26B62C58-E245-578A-AE04-495EBA139703','PRINCIPAL_LOCAL','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','1001','darpa');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'26B62C58-E245-578A-AE04-495EBA139703','Principal');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'26B62C58-E245-578A-AE04-495EBA139703','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','hasAccountOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '2246F9AA-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2792, 'parentSubject': None, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 0, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'2246F9AA-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2792','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2246F9AA-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2246F9AA-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'2246F9AA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '140CAF4A-E833-5FDF-A67E-C92131E267C8', 'sequence': {'long': 35}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '2246F9AA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '2246F9AA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'140CAF4A-E833-5FDF-A67E-C92131E267C8','35','EVENT_EXIT','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','2246F9AA-36C2-11E8-BF66-D9AA8AFF4A69','2246F9AA-36C2-11E8-BF66-D9AA8AFF4A69','1522706863153351329','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'140CAF4A-E833-5FDF-A67E-C92131E267C8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'140CAF4A-E833-5FDF-A67E-C92131E267C8','2246F9AA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'140CAF4A-E833-5FDF-A67E-C92131E267C8','2246F9AA-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2549, 'parentSubject': None, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 0, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2549','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2800, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706863153351329, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2800','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706863153351329','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8A0A8B94-B4BB-5F86-BC4F-711F5B4FE3F2', 'sequence': {'long': 36}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2800', 'exec': 'bash', 'arg_pid': '2800', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'8A0A8B94-B4BB-5F86-BC4F-711F5B4FE3F2','36','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','1522706863153351329','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2800','bash','2800','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8A0A8B94-B4BB-5F86-BC4F-711F5B4FE3F2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8A0A8B94-B4BB-5F86-BC4F-711F5B4FE3F2','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8A0A8B94-B4BB-5F86-BC4F-711F5B4FE3F2','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '98F606DF-A939-5109-9ABE-BF8ED1FB841C', 'sequence': {'long': 37}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'98F606DF-A939-5109-9ABE-BF8ED1FB841C','37','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706863153351329','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'98F606DF-A939-5109-9ABE-BF8ED1FB841C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'98F606DF-A939-5109-9ABE-BF8ED1FB841C','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'98F606DF-A939-5109-9ABE-BF8ED1FB841C','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4D344F9D-3989-8550-8939-91A3B085C709', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4D344F9D-3989-8550-8939-91A3B085C709','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4D344F9D-3989-8550-8939-91A3B085C709','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4D344F9D-3989-8550-8939-91A3B085C709','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '300CF651-E15E-541B-ACA2-BF7D1DA52B86', 'sequence': {'long': 38}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D344F9D-3989-8550-8939-91A3B085C709'}, 'predicateObjectPath': {'string': '/usr/home/darpa/kernel_mem.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '0209'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'300CF651-E15E-541B-ACA2-BF7D1DA52B86','38','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4D344F9D-3989-8550-8939-91A3B085C709','/usr/home/darpa/kernel_mem.txt','1522706863153351329','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','0209','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'300CF651-E15E-541B-ACA2-BF7D1DA52B86','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'300CF651-E15E-541B-ACA2-BF7D1DA52B86','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'300CF651-E15E-541B-ACA2-BF7D1DA52B86','4D344F9D-3989-8550-8939-91A3B085C709','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2242E131-98EE-5CB2-8C50-EF25389F5BA8', 'sequence': {'long': 39}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D344F9D-3989-8550-8939-91A3B085C709'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2242E131-98EE-5CB2-8C50-EF25389F5BA8','39','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4D344F9D-3989-8550-8939-91A3B085C709','1522706863153351329','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2242E131-98EE-5CB2-8C50-EF25389F5BA8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2242E131-98EE-5CB2-8C50-EF25389F5BA8','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2242E131-98EE-5CB2-8C50-EF25389F5BA8','4D344F9D-3989-8550-8939-91A3B085C709','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '7A350F75-9945-425D-8599-15CEBD426F06', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'7A350F75-9945-425D-8599-15CEBD426F06','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7A350F75-9945-425D-8599-15CEBD426F06','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7A350F75-9945-425D-8599-15CEBD426F06','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '330061CF-6BB3-C45E-B36B-B89D7EC4F443', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'330061CF-6BB3-C45E-B36B-B89D7EC4F443','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'330061CF-6BB3-C45E-B36B-B89D7EC4F443','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'330061CF-6BB3-C45E-B36B-B89D7EC4F443','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DBC29206-6193-514A-9A71-4CBD4DEDC147', 'sequence': {'long': 40}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '330061CF-6BB3-C45E-B36B-B89D7EC4F443'}, 'predicateObjectPath': {'string': '/usr/bin/vmstat'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': '/usr/bin/vmstat -m', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DBC29206-6193-514A-9A71-4CBD4DEDC147','40','EVENT_EXECUTE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','330061CF-6BB3-C45E-B36B-B89D7EC4F443','/usr/bin/vmstat','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706863153351329','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/bin/vmstat -m','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DBC29206-6193-514A-9A71-4CBD4DEDC147','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DBC29206-6193-514A-9A71-4CBD4DEDC147','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DBC29206-6193-514A-9A71-4CBD4DEDC147','330061CF-6BB3-C45E-B36B-B89D7EC4F443','affects'),(nextval('edge_number_seq'),'DBC29206-6193-514A-9A71-4CBD4DEDC147','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '51110606-D232-9652-B2D2-3A7242968F8A', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'51110606-D232-9652-B2D2-3A7242968F8A','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'51110606-D232-9652-B2D2-3A7242968F8A','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'51110606-D232-9652-B2D2-3A7242968F8A','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F80C3181-94CB-5784-8532-DDF7488C532A', 'sequence': {'long': 41}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F80C3181-94CB-5784-8532-DDF7488C532A','41','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706863153351329','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F80C3181-94CB-5784-8532-DDF7488C532A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F80C3181-94CB-5784-8532-DDF7488C532A','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F80C3181-94CB-5784-8532-DDF7488C532A','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5E02A62D-61DE-5AA5-BE13-0771E5DC286E', 'sequence': {'long': 42}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5E02A62D-61DE-5AA5-BE13-0771E5DC286E','42','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706863153351329','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5E02A62D-61DE-5AA5-BE13-0771E5DC286E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5E02A62D-61DE-5AA5-BE13-0771E5DC286E','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5E02A62D-61DE-5AA5-BE13-0771E5DC286E','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1A520A47-8ADF-5543-8A0B-64084745A987', 'sequence': {'long': 43}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1A520A47-8ADF-5543-8A0B-64084745A987','43','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706863153351329','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1A520A47-8ADF-5543-8A0B-64084745A987','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1A520A47-8ADF-5543-8A0B-64084745A987','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1A520A47-8ADF-5543-8A0B-64084745A987','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '29D1C360-CCE6-165C-A6CC-FC6A6C167357', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'29D1C360-CCE6-165C-A6CC-FC6A6C167357','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'29D1C360-CCE6-165C-A6CC-FC6A6C167357','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'29D1C360-CCE6-165C-A6CC-FC6A6C167357','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '99DBA152-8AE2-58E7-8439-1C8A3651384A', 'sequence': {'long': 44}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'99DBA152-8AE2-58E7-8439-1C8A3651384A','44','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706863153351329','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'99DBA152-8AE2-58E7-8439-1C8A3651384A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'99DBA152-8AE2-58E7-8439-1C8A3651384A','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'99DBA152-8AE2-58E7-8439-1C8A3651384A','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '650DFCB6-D7E3-51C3-8067-289D621D31AA', 'sequence': {'long': 45}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'650DFCB6-D7E3-51C3-8067-289D621D31AA','45','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706863153351329','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'650DFCB6-D7E3-51C3-8067-289D621D31AA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'650DFCB6-D7E3-51C3-8067-289D621D31AA','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'650DFCB6-D7E3-51C3-8067-289D621D31AA','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '86DFF6B5-335D-598B-B34D-FF906E72B804', 'sequence': {'long': 46}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863153351329, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'86DFF6B5-335D-598B-B34D-FF906E72B804','46','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706863153351329','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'86DFF6B5-335D-598B-B34D-FF906E72B804','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'86DFF6B5-335D-598B-B34D-FF906E72B804','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'86DFF6B5-335D-598B-B34D-FF906E72B804','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '60042D58-E6B9-5A10-A92F-9625FE47E14B', 'sequence': {'long': 47}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'60042D58-E6B9-5A10-A92F-9625FE47E14B','47','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706863163352079','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'60042D58-E6B9-5A10-A92F-9625FE47E14B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'60042D58-E6B9-5A10-A92F-9625FE47E14B','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'60042D58-E6B9-5A10-A92F-9625FE47E14B','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7FA01637-5A5B-5A79-99C0-27F52A006FDD', 'sequence': {'long': 48}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': {'string': '/lib/libdevstat.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7FA01637-5A5B-5A79-99C0-27F52A006FDD','48','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','/lib/libdevstat.so.7','1522706863163352079','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7FA01637-5A5B-5A79-99C0-27F52A006FDD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7FA01637-5A5B-5A79-99C0-27F52A006FDD','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7FA01637-5A5B-5A79-99C0-27F52A006FDD','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FFC1CF76-4F7E-5E73-A2F1-46FFA48F15F5', 'sequence': {'long': 49}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'FFC1CF76-4F7E-5E73-A2F1-46FFA48F15F5','49','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706863163352079','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FFC1CF76-4F7E-5E73-A2F1-46FFA48F15F5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FFC1CF76-4F7E-5E73-A2F1-46FFA48F15F5','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FFC1CF76-4F7E-5E73-A2F1-46FFA48F15F5','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '285A6E50-E228-5EA6-9798-428EF3B67821', 'sequence': {'long': 50}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'285A6E50-E228-5EA6-9798-428EF3B67821','50','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706863163352079','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'285A6E50-E228-5EA6-9798-428EF3B67821','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'285A6E50-E228-5EA6-9798-428EF3B67821','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'285A6E50-E228-5EA6-9798-428EF3B67821','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2BF82B4D-E906-5E4B-A9F6-D28FA9CC9525', 'sequence': {'long': 51}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8572928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2BF82B4D-E906-5E4B-A9F6-D28FA9CC9525','51','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706863163352079','aue_mmap','8572928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2BF82B4D-E906-5E4B-A9F6-D28FA9CC9525','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2BF82B4D-E906-5E4B-A9F6-D28FA9CC9525','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2BF82B4D-E906-5E4B-A9F6-D28FA9CC9525','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C1268A62-9CCC-5DBE-90E1-EA8805CBE366', 'sequence': {'long': 52}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8572928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C1268A62-9CCC-5DBE-90E1-EA8805CBE366','52','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706863163352079','aue_mmap','8572928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C1268A62-9CCC-5DBE-90E1-EA8805CBE366','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C1268A62-9CCC-5DBE-90E1-EA8805CBE366','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C1268A62-9CCC-5DBE-90E1-EA8805CBE366','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C67499A8-7AB3-5A74-B127-994EC3AFE3E0', 'sequence': {'long': 53}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10690560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C67499A8-7AB3-5A74-B127-994EC3AFE3E0','53','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706863163352079','aue_mmap','10690560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C67499A8-7AB3-5A74-B127-994EC3AFE3E0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C67499A8-7AB3-5A74-B127-994EC3AFE3E0','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C67499A8-7AB3-5A74-B127-994EC3AFE3E0','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5B7DE004-2078-53FD-AED4-24B6105DC8C5', 'sequence': {'long': 54}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10690560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5B7DE004-2078-53FD-AED4-24B6105DC8C5','54','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706863163352079','aue_mmap','10690560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5B7DE004-2078-53FD-AED4-24B6105DC8C5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5B7DE004-2078-53FD-AED4-24B6105DC8C5','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5B7DE004-2078-53FD-AED4-24B6105DC8C5','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2B1B94B7-D365-510D-AF21-D7B4F811E43B', 'sequence': {'long': 55}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2B1B94B7-D365-510D-AF21-D7B4F811E43B','55','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706863163352079','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2B1B94B7-D365-510D-AF21-D7B4F811E43B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2B1B94B7-D365-510D-AF21-D7B4F811E43B','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2B1B94B7-D365-510D-AF21-D7B4F811E43B','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '718F288D-A702-1B5D-82A7-80807D1BB326', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'718F288D-A702-1B5D-82A7-80807D1BB326','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'718F288D-A702-1B5D-82A7-80807D1BB326','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'718F288D-A702-1B5D-82A7-80807D1BB326','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C15EA55B-84EF-5463-9724-699FD375A77D', 'sequence': {'long': 56}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': {'string': '/lib/libkvm.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C15EA55B-84EF-5463-9724-699FD375A77D','56','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','/lib/libkvm.so.7','1522706863163352079','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C15EA55B-84EF-5463-9724-699FD375A77D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C15EA55B-84EF-5463-9724-699FD375A77D','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C15EA55B-84EF-5463-9724-699FD375A77D','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '80F9068E-23EB-5788-B056-D6563919B2C9', 'sequence': {'long': 57}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'80F9068E-23EB-5788-B056-D6563919B2C9','57','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706863163352079','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'80F9068E-23EB-5788-B056-D6563919B2C9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'80F9068E-23EB-5788-B056-D6563919B2C9','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'80F9068E-23EB-5788-B056-D6563919B2C9','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '148F7BB8-C76A-50A0-A064-8222A263CBC8', 'sequence': {'long': 58}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'148F7BB8-C76A-50A0-A064-8222A263CBC8','58','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706863163352079','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'148F7BB8-C76A-50A0-A064-8222A263CBC8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'148F7BB8-C76A-50A0-A064-8222A263CBC8','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'148F7BB8-C76A-50A0-A064-8222A263CBC8','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '64329107-E97B-50CA-ACA0-6C8FB6026B61', 'sequence': {'long': 59}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10694656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'64329107-E97B-50CA-ACA0-6C8FB6026B61','59','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706863163352079','aue_mmap','10694656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'64329107-E97B-50CA-ACA0-6C8FB6026B61','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'64329107-E97B-50CA-ACA0-6C8FB6026B61','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'64329107-E97B-50CA-ACA0-6C8FB6026B61','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6D3456B5-788A-5A47-84ED-61E84DB3F86B', 'sequence': {'long': 60}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10694656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6D3456B5-788A-5A47-84ED-61E84DB3F86B','60','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706863163352079','aue_mmap','10694656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6D3456B5-788A-5A47-84ED-61E84DB3F86B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6D3456B5-788A-5A47-84ED-61E84DB3F86B','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6D3456B5-788A-5A47-84ED-61E84DB3F86B','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5974ABA9-6004-536B-9B3E-A78C661BA992', 'sequence': {'long': 61}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12853248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5974ABA9-6004-536B-9B3E-A78C661BA992','61','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706863163352079','aue_mmap','12853248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5974ABA9-6004-536B-9B3E-A78C661BA992','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5974ABA9-6004-536B-9B3E-A78C661BA992','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5974ABA9-6004-536B-9B3E-A78C661BA992','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CA383DB7-5D23-5AF0-BF46-DD487FD42C2F', 'sequence': {'long': 62}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12853248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'CA383DB7-5D23-5AF0-BF46-DD487FD42C2F','62','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706863163352079','aue_mmap','12853248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CA383DB7-5D23-5AF0-BF46-DD487FD42C2F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CA383DB7-5D23-5AF0-BF46-DD487FD42C2F','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CA383DB7-5D23-5AF0-BF46-DD487FD42C2F','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D37FD6CB-BF76-5B66-B873-0F12A5AEA5C8', 'sequence': {'long': 63}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D37FD6CB-BF76-5B66-B873-0F12A5AEA5C8','63','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706863163352079','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D37FD6CB-BF76-5B66-B873-0F12A5AEA5C8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D37FD6CB-BF76-5B66-B873-0F12A5AEA5C8','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D37FD6CB-BF76-5B66-B873-0F12A5AEA5C8','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4F909471-32BE-7C54-BE32-1D05C47CA876', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4F909471-32BE-7C54-BE32-1D05C47CA876','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4F909471-32BE-7C54-BE32-1D05C47CA876','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4F909471-32BE-7C54-BE32-1D05C47CA876','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6A86F117-F2A2-5C8C-A914-2CCEB8ECF64D', 'sequence': {'long': 64}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': {'string': '/usr/lib/libmemstat.so.3'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6A86F117-F2A2-5C8C-A914-2CCEB8ECF64D','64','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','/usr/lib/libmemstat.so.3','1522706863163352079','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6A86F117-F2A2-5C8C-A914-2CCEB8ECF64D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6A86F117-F2A2-5C8C-A914-2CCEB8ECF64D','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6A86F117-F2A2-5C8C-A914-2CCEB8ECF64D','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '38BB27AF-48FB-516A-9EA3-6D9E6529BD61', 'sequence': {'long': 65}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'38BB27AF-48FB-516A-9EA3-6D9E6529BD61','65','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706863163352079','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'38BB27AF-48FB-516A-9EA3-6D9E6529BD61','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'38BB27AF-48FB-516A-9EA3-6D9E6529BD61','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'38BB27AF-48FB-516A-9EA3-6D9E6529BD61','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FDEC8271-E2B6-5EF1-A9C3-CB59C611F338', 'sequence': {'long': 66}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'FDEC8271-E2B6-5EF1-A9C3-CB59C611F338','66','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706863163352079','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FDEC8271-E2B6-5EF1-A9C3-CB59C611F338','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FDEC8271-E2B6-5EF1-A9C3-CB59C611F338','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FDEC8271-E2B6-5EF1-A9C3-CB59C611F338','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6B29ADF0-F909-5D68-B9FE-692164255F0C', 'sequence': {'long': 67}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12857344}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6B29ADF0-F909-5D68-B9FE-692164255F0C','67','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706863163352079','aue_mmap','12857344','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6B29ADF0-F909-5D68-B9FE-692164255F0C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6B29ADF0-F909-5D68-B9FE-692164255F0C','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6B29ADF0-F909-5D68-B9FE-692164255F0C','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EF4ED244-7795-536D-82CF-26EE261BA131', 'sequence': {'long': 68}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863163352079, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12857344}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EF4ED244-7795-536D-82CF-26EE261BA131','68','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706863163352079','aue_mmap','12857344','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EF4ED244-7795-536D-82CF-26EE261BA131','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EF4ED244-7795-536D-82CF-26EE261BA131','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EF4ED244-7795-536D-82CF-26EE261BA131','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A5308704-F07C-54DE-8215-80969FBAA2AD', 'sequence': {'long': 69}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14966784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A5308704-F07C-54DE-8215-80969FBAA2AD','69','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706863173351420','aue_mmap','14966784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A5308704-F07C-54DE-8215-80969FBAA2AD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A5308704-F07C-54DE-8215-80969FBAA2AD','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A5308704-F07C-54DE-8215-80969FBAA2AD','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '10D307A4-E08D-5248-88B6-65138AC37F6F', 'sequence': {'long': 70}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14966784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'10D307A4-E08D-5248-88B6-65138AC37F6F','70','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706863173351420','aue_mmap','14966784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'10D307A4-E08D-5248-88B6-65138AC37F6F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'10D307A4-E08D-5248-88B6-65138AC37F6F','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'10D307A4-E08D-5248-88B6-65138AC37F6F','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C06D97F5-02C3-5EFB-8285-86D7EA404645', 'sequence': {'long': 71}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C06D97F5-02C3-5EFB-8285-86D7EA404645','71','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706863173351420','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C06D97F5-02C3-5EFB-8285-86D7EA404645','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C06D97F5-02C3-5EFB-8285-86D7EA404645','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C06D97F5-02C3-5EFB-8285-86D7EA404645','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '0905A02C-D979-5D57-B9D9-F12D475D7A9B', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'0905A02C-D979-5D57-B9D9-F12D475D7A9B','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0905A02C-D979-5D57-B9D9-F12D475D7A9B','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0905A02C-D979-5D57-B9D9-F12D475D7A9B','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6DC36CC5-D4D4-5B11-B84A-53891906024F', 'sequence': {'long': 72}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': {'string': '/lib/libxo.so.0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6DC36CC5-D4D4-5B11-B84A-53891906024F','72','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','/lib/libxo.so.0','1522706863173351420','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6DC36CC5-D4D4-5B11-B84A-53891906024F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6DC36CC5-D4D4-5B11-B84A-53891906024F','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6DC36CC5-D4D4-5B11-B84A-53891906024F','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F7E23B0F-94D8-5A31-90E8-1997E0750D00', 'sequence': {'long': 73}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F7E23B0F-94D8-5A31-90E8-1997E0750D00','73','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706863173351420','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F7E23B0F-94D8-5A31-90E8-1997E0750D00','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F7E23B0F-94D8-5A31-90E8-1997E0750D00','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F7E23B0F-94D8-5A31-90E8-1997E0750D00','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D5F0CE4-BF8A-5495-89FB-60E11E2B150B', 'sequence': {'long': 74}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D5F0CE4-BF8A-5495-89FB-60E11E2B150B','74','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706863173351420','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D5F0CE4-BF8A-5495-89FB-60E11E2B150B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D5F0CE4-BF8A-5495-89FB-60E11E2B150B','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7D5F0CE4-BF8A-5495-89FB-60E11E2B150B','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D99B4304-904B-5CD6-B0AE-682D2EF4FBC2', 'sequence': {'long': 75}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14970880}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D99B4304-904B-5CD6-B0AE-682D2EF4FBC2','75','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706863173351420','aue_mmap','14970880','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D99B4304-904B-5CD6-B0AE-682D2EF4FBC2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D99B4304-904B-5CD6-B0AE-682D2EF4FBC2','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D99B4304-904B-5CD6-B0AE-682D2EF4FBC2','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CCAD1CFF-CA50-5A96-AFE2-85F77E62F7F8', 'sequence': {'long': 76}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14970880}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'CCAD1CFF-CA50-5A96-AFE2-85F77E62F7F8','76','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706863173351420','aue_mmap','14970880','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CCAD1CFF-CA50-5A96-AFE2-85F77E62F7F8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CCAD1CFF-CA50-5A96-AFE2-85F77E62F7F8','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CCAD1CFF-CA50-5A96-AFE2-85F77E62F7F8','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4BFBB7BF-629A-56A3-92E6-002A476BC67C', 'sequence': {'long': 77}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17182720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'4BFBB7BF-629A-56A3-92E6-002A476BC67C','77','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706863173351420','aue_mmap','17182720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4BFBB7BF-629A-56A3-92E6-002A476BC67C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4BFBB7BF-629A-56A3-92E6-002A476BC67C','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4BFBB7BF-629A-56A3-92E6-002A476BC67C','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A87F295B-0CA5-5822-AE3C-65BC4FD91B01', 'sequence': {'long': 78}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17182720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A87F295B-0CA5-5822-AE3C-65BC4FD91B01','78','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706863173351420','aue_mmap','17182720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A87F295B-0CA5-5822-AE3C-65BC4FD91B01','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A87F295B-0CA5-5822-AE3C-65BC4FD91B01','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A87F295B-0CA5-5822-AE3C-65BC4FD91B01','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3886BC57-C499-589E-A955-70BC3060CCA9', 'sequence': {'long': 79}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3886BC57-C499-589E-A955-70BC3060CCA9','79','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706863173351420','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3886BC57-C499-589E-A955-70BC3060CCA9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3886BC57-C499-589E-A955-70BC3060CCA9','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3886BC57-C499-589E-A955-70BC3060CCA9','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '9FF334BB-9072-D756-B290-556656D73728', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'9FF334BB-9072-D756-B290-556656D73728','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9FF334BB-9072-D756-B290-556656D73728','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9FF334BB-9072-D756-B290-556656D73728','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A3B7F691-7A3D-5F6E-A1AB-19CA1E5C81A9', 'sequence': {'long': 80}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': {'string': '/lib/libutil.so.9'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A3B7F691-7A3D-5F6E-A1AB-19CA1E5C81A9','80','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','/lib/libutil.so.9','1522706863173351420','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A3B7F691-7A3D-5F6E-A1AB-19CA1E5C81A9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A3B7F691-7A3D-5F6E-A1AB-19CA1E5C81A9','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A3B7F691-7A3D-5F6E-A1AB-19CA1E5C81A9','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8B4F073F-9373-5776-ACD2-37A016EC3CDF', 'sequence': {'long': 81}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8B4F073F-9373-5776-ACD2-37A016EC3CDF','81','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706863173351420','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8B4F073F-9373-5776-ACD2-37A016EC3CDF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8B4F073F-9373-5776-ACD2-37A016EC3CDF','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8B4F073F-9373-5776-ACD2-37A016EC3CDF','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7420D494-8F76-57A7-94FA-59C863EC6F8F', 'sequence': {'long': 82}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7420D494-8F76-57A7-94FA-59C863EC6F8F','82','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706863173351420','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7420D494-8F76-57A7-94FA-59C863EC6F8F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7420D494-8F76-57A7-94FA-59C863EC6F8F','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7420D494-8F76-57A7-94FA-59C863EC6F8F','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5F64CD77-2137-58D7-A5B8-7CF83F5EA735', 'sequence': {'long': 83}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17186816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5F64CD77-2137-58D7-A5B8-7CF83F5EA735','83','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706863173351420','aue_mmap','17186816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5F64CD77-2137-58D7-A5B8-7CF83F5EA735','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5F64CD77-2137-58D7-A5B8-7CF83F5EA735','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5F64CD77-2137-58D7-A5B8-7CF83F5EA735','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3815492C-DF31-5F5B-9C93-C0B66F9A532F', 'sequence': {'long': 84}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17186816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3815492C-DF31-5F5B-9C93-C0B66F9A532F','84','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706863173351420','aue_mmap','17186816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3815492C-DF31-5F5B-9C93-C0B66F9A532F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3815492C-DF31-5F5B-9C93-C0B66F9A532F','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3815492C-DF31-5F5B-9C93-C0B66F9A532F','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '031538E1-FAD2-5C36-B5B5-1B8DB603C57D', 'sequence': {'long': 85}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19353600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'031538E1-FAD2-5C36-B5B5-1B8DB603C57D','85','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706863173351420','aue_mmap','19353600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'031538E1-FAD2-5C36-B5B5-1B8DB603C57D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'031538E1-FAD2-5C36-B5B5-1B8DB603C57D','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'031538E1-FAD2-5C36-B5B5-1B8DB603C57D','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9BA2EAB2-8D67-51A8-9A1D-5A9A060F941C', 'sequence': {'long': 86}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19353600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9BA2EAB2-8D67-51A8-9A1D-5A9A060F941C','86','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706863173351420','aue_mmap','19353600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9BA2EAB2-8D67-51A8-9A1D-5A9A060F941C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9BA2EAB2-8D67-51A8-9A1D-5A9A060F941C','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9BA2EAB2-8D67-51A8-9A1D-5A9A060F941C','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2371A2CA-6B8F-5212-B921-930F0C26D634', 'sequence': {'long': 87}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2371A2CA-6B8F-5212-B921-930F0C26D634','87','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706863173351420','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2371A2CA-6B8F-5212-B921-930F0C26D634','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2371A2CA-6B8F-5212-B921-930F0C26D634','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2371A2CA-6B8F-5212-B921-930F0C26D634','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '76A739B1-A13E-FD50-BEA1-B218A0FD0400', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'76A739B1-A13E-FD50-BEA1-B218A0FD0400','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'76A739B1-A13E-FD50-BEA1-B218A0FD0400','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'76A739B1-A13E-FD50-BEA1-B218A0FD0400','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EB76D1C1-CEB4-5D82-B577-2B20E7CA6EFF', 'sequence': {'long': 88}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EB76D1C1-CEB4-5D82-B577-2B20E7CA6EFF','88','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706863173351420','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EB76D1C1-CEB4-5D82-B577-2B20E7CA6EFF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EB76D1C1-CEB4-5D82-B577-2B20E7CA6EFF','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EB76D1C1-CEB4-5D82-B577-2B20E7CA6EFF','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '213A438A-188E-5A49-82DF-6C6EC77F148E', 'sequence': {'long': 89}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'213A438A-188E-5A49-82DF-6C6EC77F148E','89','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863173351420','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'213A438A-188E-5A49-82DF-6C6EC77F148E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'213A438A-188E-5A49-82DF-6C6EC77F148E','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'213A438A-188E-5A49-82DF-6C6EC77F148E','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '625ED001-DA33-5D6C-B8EB-2C6E56A11EA6', 'sequence': {'long': 90}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'625ED001-DA33-5D6C-B8EB-2C6E56A11EA6','90','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863173351420','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'625ED001-DA33-5D6C-B8EB-2C6E56A11EA6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'625ED001-DA33-5D6C-B8EB-2C6E56A11EA6','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'625ED001-DA33-5D6C-B8EB-2C6E56A11EA6','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B0980667-FE9B-54CF-9430-2826FBE8257A', 'sequence': {'long': 91}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19365888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B0980667-FE9B-54CF-9430-2826FBE8257A','91','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863173351420','aue_mmap','19365888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B0980667-FE9B-54CF-9430-2826FBE8257A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B0980667-FE9B-54CF-9430-2826FBE8257A','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B0980667-FE9B-54CF-9430-2826FBE8257A','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '185157BE-CADC-5C2D-81E4-66FBDE627F0F', 'sequence': {'long': 92}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863173351420, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19365888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'185157BE-CADC-5C2D-81E4-66FBDE627F0F','92','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863173351420','aue_mmap','19365888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'185157BE-CADC-5C2D-81E4-66FBDE627F0F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'185157BE-CADC-5C2D-81E4-66FBDE627F0F','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'185157BE-CADC-5C2D-81E4-66FBDE627F0F','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D33A405C-4D38-5F14-8CCB-3888F95D6F95', 'sequence': {'long': 93}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23252992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D33A405C-4D38-5F14-8CCB-3888F95D6F95','93','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863183362480','aue_mmap','23252992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D33A405C-4D38-5F14-8CCB-3888F95D6F95','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D33A405C-4D38-5F14-8CCB-3888F95D6F95','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D33A405C-4D38-5F14-8CCB-3888F95D6F95','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1F7E9431-51B9-5DFB-BE79-C7260666CC27', 'sequence': {'long': 94}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23252992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1F7E9431-51B9-5DFB-BE79-C7260666CC27','94','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863183362480','aue_mmap','23252992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1F7E9431-51B9-5DFB-BE79-C7260666CC27','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1F7E9431-51B9-5DFB-BE79-C7260666CC27','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1F7E9431-51B9-5DFB-BE79-C7260666CC27','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BB8BFB4E-2526-5F94-A1C7-E895BA0E2856', 'sequence': {'long': 95}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BB8BFB4E-2526-5F94-A1C7-E895BA0E2856','95','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863183362480','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BB8BFB4E-2526-5F94-A1C7-E895BA0E2856','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BB8BFB4E-2526-5F94-A1C7-E895BA0E2856','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BB8BFB4E-2526-5F94-A1C7-E895BA0E2856','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'F29977F6-07A2-935B-A207-C4871B93FE07', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'F29977F6-07A2-935B-A207-C4871B93FE07','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F29977F6-07A2-935B-A207-C4871B93FE07','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F29977F6-07A2-935B-A207-C4871B93FE07','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '108D1AFD-B44B-5CB4-94ED-2CB7AE268621', 'sequence': {'long': 96}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': {'string': '/lib/libelf.so.2'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'108D1AFD-B44B-5CB4-94ED-2CB7AE268621','96','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','/lib/libelf.so.2','1522706863183362480','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'108D1AFD-B44B-5CB4-94ED-2CB7AE268621','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'108D1AFD-B44B-5CB4-94ED-2CB7AE268621','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'108D1AFD-B44B-5CB4-94ED-2CB7AE268621','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B92BA435-6EBC-5A57-9335-BCC79F7F2F47', 'sequence': {'long': 97}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B92BA435-6EBC-5A57-9335-BCC79F7F2F47','97','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706863183362480','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B92BA435-6EBC-5A57-9335-BCC79F7F2F47','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B92BA435-6EBC-5A57-9335-BCC79F7F2F47','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B92BA435-6EBC-5A57-9335-BCC79F7F2F47','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '00FF67A1-0D13-5A90-8811-89501C9CC190', 'sequence': {'long': 98}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'00FF67A1-0D13-5A90-8811-89501C9CC190','98','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706863183362480','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'00FF67A1-0D13-5A90-8811-89501C9CC190','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'00FF67A1-0D13-5A90-8811-89501C9CC190','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'00FF67A1-0D13-5A90-8811-89501C9CC190','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '698EB289-4004-5BA6-A5F1-A000D1BF3BA3', 'sequence': {'long': 99}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 25567232}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'698EB289-4004-5BA6-A5F1-A000D1BF3BA3','99','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706863183362480','aue_mmap','25567232','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'698EB289-4004-5BA6-A5F1-A000D1BF3BA3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'698EB289-4004-5BA6-A5F1-A000D1BF3BA3','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'698EB289-4004-5BA6-A5F1-A000D1BF3BA3','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DB76589F-3467-5DC1-B37A-5CA74FDF4ADA', 'sequence': {'long': 100}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 25567232}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'DB76589F-3467-5DC1-B37A-5CA74FDF4ADA','100','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706863183362480','aue_mmap','25567232','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DB76589F-3467-5DC1-B37A-5CA74FDF4ADA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DB76589F-3467-5DC1-B37A-5CA74FDF4ADA','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DB76589F-3467-5DC1-B37A-5CA74FDF4ADA','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9C3F04DA-3ADB-550F-8ABF-E6ED041C6334', 'sequence': {'long': 101}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 27758592}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9C3F04DA-3ADB-550F-8ABF-E6ED041C6334','101','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706863183362480','aue_mmap','27758592','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9C3F04DA-3ADB-550F-8ABF-E6ED041C6334','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9C3F04DA-3ADB-550F-8ABF-E6ED041C6334','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9C3F04DA-3ADB-550F-8ABF-E6ED041C6334','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AB0DE301-221B-5181-A94E-55848D0A31C6', 'sequence': {'long': 102}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 27758592}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'AB0DE301-221B-5181-A94E-55848D0A31C6','102','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706863183362480','aue_mmap','27758592','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AB0DE301-221B-5181-A94E-55848D0A31C6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AB0DE301-221B-5181-A94E-55848D0A31C6','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AB0DE301-221B-5181-A94E-55848D0A31C6','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1FC3FF82-A882-5E98-A98F-69C279AE64DE', 'sequence': {'long': 103}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1FC3FF82-A882-5E98-A98F-69C279AE64DE','103','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706863183362480','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1FC3FF82-A882-5E98-A98F-69C279AE64DE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1FC3FF82-A882-5E98-A98F-69C279AE64DE','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1FC3FF82-A882-5E98-A98F-69C279AE64DE','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'F410BE96-4C0C-765E-8C4C-6F0E2E760020','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F410BE96-4C0C-765E-8C4C-6F0E2E760020','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F410BE96-4C0C-765E-8C4C-6F0E2E760020','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5664C3B0-3B00-5330-B2DE-2E147F8AA183', 'sequence': {'long': 104}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5664C3B0-3B00-5330-B2DE-2E147F8AA183','104','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706863183362480','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5664C3B0-3B00-5330-B2DE-2E147F8AA183','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5664C3B0-3B00-5330-B2DE-2E147F8AA183','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5664C3B0-3B00-5330-B2DE-2E147F8AA183','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A70D06D2-E326-5DB8-9647-CF19D49F8200', 'sequence': {'long': 105}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A70D06D2-E326-5DB8-9647-CF19D49F8200','105','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706863183362480','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A70D06D2-E326-5DB8-9647-CF19D49F8200','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A70D06D2-E326-5DB8-9647-CF19D49F8200','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A70D06D2-E326-5DB8-9647-CF19D49F8200','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AC2C51C1-02C8-592B-9AB4-7FBB82A95AE4', 'sequence': {'long': 106}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'AC2C51C1-02C8-592B-9AB4-7FBB82A95AE4','106','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706863183362480','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AC2C51C1-02C8-592B-9AB4-7FBB82A95AE4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AC2C51C1-02C8-592B-9AB4-7FBB82A95AE4','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AC2C51C1-02C8-592B-9AB4-7FBB82A95AE4','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C7249384-C49B-5CD1-A293-AA9F1F394E65', 'sequence': {'long': 107}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863183362480, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C7249384-C49B-5CD1-A293-AA9F1F394E65','107','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706863183362480','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C7249384-C49B-5CD1-A293-AA9F1F394E65','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C7249384-C49B-5CD1-A293-AA9F1F394E65','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C7249384-C49B-5CD1-A293-AA9F1F394E65','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4DAD7D76-0A05-54C6-9FB4-FCFD63C6F0F3', 'sequence': {'long': 108}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D344F9D-3989-8550-8939-91A3B085C709'}, 'predicateObjectPath': {'string': 'kernel_mem.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863233355192, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 7703}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kernel_mem.txt', 'fd': '1', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4DAD7D76-0A05-54C6-9FB4-FCFD63C6F0F3','108','EVENT_WRITE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4D344F9D-3989-8550-8939-91A3B085C709','kernel_mem.txt','1522706863233355192','aue_write','7703','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kernel_mem.txt','1','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4DAD7D76-0A05-54C6-9FB4-FCFD63C6F0F3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4DAD7D76-0A05-54C6-9FB4-FCFD63C6F0F3','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4DAD7D76-0A05-54C6-9FB4-FCFD63C6F0F3','4D344F9D-3989-8550-8939-91A3B085C709','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '04F09FE6-59A6-5680-8361-4709380E39D9', 'sequence': {'long': 109}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D344F9D-3989-8550-8939-91A3B085C709'}, 'predicateObjectPath': {'string': 'kernel_mem.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863233355192, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2191}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kernel_mem.txt', 'fd': '1', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'04F09FE6-59A6-5680-8361-4709380E39D9','109','EVENT_WRITE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4D344F9D-3989-8550-8939-91A3B085C709','kernel_mem.txt','1522706863233355192','aue_write','2191','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kernel_mem.txt','1','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'04F09FE6-59A6-5680-8361-4709380E39D9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'04F09FE6-59A6-5680-8361-4709380E39D9','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'04F09FE6-59A6-5680-8361-4709380E39D9','4D344F9D-3989-8550-8939-91A3B085C709','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C35A825C-9F74-5DBB-A219-6F0D7A229A6C', 'sequence': {'long': 110}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4442CA52-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863233355192, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C35A825C-9F74-5DBB-A219-6F0D7A229A6C','110','EVENT_EXIT','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','1522706863233355192','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C35A825C-9F74-5DBB-A219-6F0D7A229A6C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C35A825C-9F74-5DBB-A219-6F0D7A229A6C','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C35A825C-9F74-5DBB-A219-6F0D7A229A6C','4442CA52-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2801, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706863243355502, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'445027EE-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2801','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706863243355502','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'445027EE-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'445027EE-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'445027EE-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'445027EE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '477C2520-474E-5D10-BEA0-C1D70146C220', 'sequence': {'long': 111}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2801', 'exec': 'bash', 'arg_pid': '2801', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'477C2520-474E-5D10-BEA0-C1D70146C220','111','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','1522706863243355502','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2801','bash','2801','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'477C2520-474E-5D10-BEA0-C1D70146C220','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'477C2520-474E-5D10-BEA0-C1D70146C220','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'477C2520-474E-5D10-BEA0-C1D70146C220','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ED355913-216B-5CE6-B1A2-A6EC06386D22', 'sequence': {'long': 112}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ED355913-216B-5CE6-B1A2-A6EC06386D22','112','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706863243355502','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ED355913-216B-5CE6-B1A2-A6EC06386D22','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ED355913-216B-5CE6-B1A2-A6EC06386D22','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ED355913-216B-5CE6-B1A2-A6EC06386D22','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6C836AA2-BB54-3A58-94BB-1E5D583A637E', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6C836AA2-BB54-3A58-94BB-1E5D583A637E','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6C836AA2-BB54-3A58-94BB-1E5D583A637E','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6C836AA2-BB54-3A58-94BB-1E5D583A637E','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '82975568-AA39-5A28-B888-50C98869F8AB', 'sequence': {'long': 113}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C836AA2-BB54-3A58-94BB-1E5D583A637E'}, 'predicateObjectPath': {'string': '/bin/sleep'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'sleep 1', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'82975568-AA39-5A28-B888-50C98869F8AB','113','EVENT_EXECUTE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','6C836AA2-BB54-3A58-94BB-1E5D583A637E','/bin/sleep','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706863243355502','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','sleep 1','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'82975568-AA39-5A28-B888-50C98869F8AB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'82975568-AA39-5A28-B888-50C98869F8AB','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'82975568-AA39-5A28-B888-50C98869F8AB','6C836AA2-BB54-3A58-94BB-1E5D583A637E','affects'),(nextval('edge_number_seq'),'82975568-AA39-5A28-B888-50C98869F8AB','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AC854FC4-F361-52B0-A444-A8FDA332409B', 'sequence': {'long': 114}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AC854FC4-F361-52B0-A444-A8FDA332409B','114','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706863243355502','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AC854FC4-F361-52B0-A444-A8FDA332409B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AC854FC4-F361-52B0-A444-A8FDA332409B','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AC854FC4-F361-52B0-A444-A8FDA332409B','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AF5C046D-3CBC-53ED-9152-4FD34C714EA9', 'sequence': {'long': 115}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AF5C046D-3CBC-53ED-9152-4FD34C714EA9','115','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706863243355502','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AF5C046D-3CBC-53ED-9152-4FD34C714EA9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AF5C046D-3CBC-53ED-9152-4FD34C714EA9','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AF5C046D-3CBC-53ED-9152-4FD34C714EA9','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '88685E5C-5E49-50D4-800A-C0B56F2C7FCE', 'sequence': {'long': 116}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'88685E5C-5E49-50D4-800A-C0B56F2C7FCE','116','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706863243355502','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'88685E5C-5E49-50D4-800A-C0B56F2C7FCE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'88685E5C-5E49-50D4-800A-C0B56F2C7FCE','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'88685E5C-5E49-50D4-800A-C0B56F2C7FCE','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '77521C2E-CEFA-5503-9A39-75B43A06B740', 'sequence': {'long': 117}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'77521C2E-CEFA-5503-9A39-75B43A06B740','117','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706863243355502','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'77521C2E-CEFA-5503-9A39-75B43A06B740','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'77521C2E-CEFA-5503-9A39-75B43A06B740','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'77521C2E-CEFA-5503-9A39-75B43A06B740','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AABD219E-E44F-5D6C-B780-742A680D0279', 'sequence': {'long': 118}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AABD219E-E44F-5D6C-B780-742A680D0279','118','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706863243355502','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AABD219E-E44F-5D6C-B780-742A680D0279','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AABD219E-E44F-5D6C-B780-742A680D0279','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AABD219E-E44F-5D6C-B780-742A680D0279','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8FD0FB5C-AE20-5C97-AAB4-FED91F8BA736', 'sequence': {'long': 119}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8FD0FB5C-AE20-5C97-AAB4-FED91F8BA736','119','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706863243355502','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8FD0FB5C-AE20-5C97-AAB4-FED91F8BA736','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8FD0FB5C-AE20-5C97-AAB4-FED91F8BA736','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8FD0FB5C-AE20-5C97-AAB4-FED91F8BA736','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EB3627B1-A85B-5578-BECB-701B36BC7BA4', 'sequence': {'long': 120}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EB3627B1-A85B-5578-BECB-701B36BC7BA4','120','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706863243355502','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EB3627B1-A85B-5578-BECB-701B36BC7BA4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EB3627B1-A85B-5578-BECB-701B36BC7BA4','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EB3627B1-A85B-5578-BECB-701B36BC7BA4','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '57149390-A536-5D30-A204-23F41E369EB5', 'sequence': {'long': 121}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'57149390-A536-5D30-A204-23F41E369EB5','121','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706863243355502','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'57149390-A536-5D30-A204-23F41E369EB5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'57149390-A536-5D30-A204-23F41E369EB5','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'57149390-A536-5D30-A204-23F41E369EB5','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '77DD97DA-B046-5A42-A3D5-16270C9945BA', 'sequence': {'long': 122}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'77DD97DA-B046-5A42-A3D5-16270C9945BA','122','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863243355502','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'77DD97DA-B046-5A42-A3D5-16270C9945BA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'77DD97DA-B046-5A42-A3D5-16270C9945BA','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'77DD97DA-B046-5A42-A3D5-16270C9945BA','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '422F7BFF-59DF-58E2-9B53-D2F4666A8270', 'sequence': {'long': 123}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'422F7BFF-59DF-58E2-9B53-D2F4666A8270','123','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863243355502','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'422F7BFF-59DF-58E2-9B53-D2F4666A8270','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'422F7BFF-59DF-58E2-9B53-D2F4666A8270','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'422F7BFF-59DF-58E2-9B53-D2F4666A8270','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8FC17384-8D1D-5307-906D-3A91646DB40D', 'sequence': {'long': 124}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8FC17384-8D1D-5307-906D-3A91646DB40D','124','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863243355502','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8FC17384-8D1D-5307-906D-3A91646DB40D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8FC17384-8D1D-5307-906D-3A91646DB40D','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8FC17384-8D1D-5307-906D-3A91646DB40D','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D0A8750-2F1C-5568-8CCD-3F0DD56FD814', 'sequence': {'long': 125}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D0A8750-2F1C-5568-8CCD-3F0DD56FD814','125','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863243355502','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D0A8750-2F1C-5568-8CCD-3F0DD56FD814','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D0A8750-2F1C-5568-8CCD-3F0DD56FD814','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7D0A8750-2F1C-5568-8CCD-3F0DD56FD814','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8426C647-E58F-58E3-BD82-2E722300698C', 'sequence': {'long': 126}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8426C647-E58F-58E3-BD82-2E722300698C','126','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863243355502','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8426C647-E58F-58E3-BD82-2E722300698C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8426C647-E58F-58E3-BD82-2E722300698C','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8426C647-E58F-58E3-BD82-2E722300698C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A7D6749C-666B-5AF6-B27F-D51BD3628FF0', 'sequence': {'long': 127}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A7D6749C-666B-5AF6-B27F-D51BD3628FF0','127','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863243355502','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A7D6749C-666B-5AF6-B27F-D51BD3628FF0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A7D6749C-666B-5AF6-B27F-D51BD3628FF0','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A7D6749C-666B-5AF6-B27F-D51BD3628FF0','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6F7FDC2D-F169-5491-B471-B349F47365F7', 'sequence': {'long': 128}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6F7FDC2D-F169-5491-B471-B349F47365F7','128','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706863243355502','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6F7FDC2D-F169-5491-B471-B349F47365F7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6F7FDC2D-F169-5491-B471-B349F47365F7','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6F7FDC2D-F169-5491-B471-B349F47365F7','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E2D6838C-CE27-549E-9692-7DCBA1077B6D', 'sequence': {'long': 129}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863243355502, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E2D6838C-CE27-549E-9692-7DCBA1077B6D','129','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706863243355502','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E2D6838C-CE27-549E-9692-7DCBA1077B6D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E2D6838C-CE27-549E-9692-7DCBA1077B6D','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E2D6838C-CE27-549E-9692-7DCBA1077B6D','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '05F28CB7-9453-5DCF-BB30-32F9954D4238', 'sequence': {'long': 130}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863253351552, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'05F28CB7-9453-5DCF-BB30-32F9954D4238','130','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706863253351552','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'05F28CB7-9453-5DCF-BB30-32F9954D4238','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'05F28CB7-9453-5DCF-BB30-32F9954D4238','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'05F28CB7-9453-5DCF-BB30-32F9954D4238','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AB3FA6F4-B34C-54E9-B26A-45892C9CE4F6', 'sequence': {'long': 131}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863253351552, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'AB3FA6F4-B34C-54E9-B26A-45892C9CE4F6','131','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706863253351552','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AB3FA6F4-B34C-54E9-B26A-45892C9CE4F6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AB3FA6F4-B34C-54E9-B26A-45892C9CE4F6','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AB3FA6F4-B34C-54E9-B26A-45892C9CE4F6','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '931C7DC0-E2AC-586A-B65C-46735AA4B07C', 'sequence': {'long': 132}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863253351552, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'931C7DC0-E2AC-586A-B65C-46735AA4B07C','132','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706863253351552','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'931C7DC0-E2AC-586A-B65C-46735AA4B07C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'931C7DC0-E2AC-586A-B65C-46735AA4B07C','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'931C7DC0-E2AC-586A-B65C-46735AA4B07C','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B8DA4278-844E-52D9-9C18-B7AA4B8EF409', 'sequence': {'long': 133}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '440E7059-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863813351843, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B8DA4278-844E-52D9-9C18-B7AA4B8EF409','133','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','440E7059-36C2-11E8-BF66-D9AA8AFF4A69','1522706863813351843','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B8DA4278-844E-52D9-9C18-B7AA4B8EF409','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B8DA4278-844E-52D9-9C18-B7AA4B8EF409','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B8DA4278-844E-52D9-9C18-B7AA4B8EF409','440E7059-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '058843BA-36B8-5EBB-9555-70E79F8479AB', 'sequence': {'long': 134}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '440E7114-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863813351843, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'058843BA-36B8-5EBB-9555-70E79F8479AB','134','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','440E7114-36C2-11E8-BF66-D9AA8AFF4A69','1522706863813351843','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'058843BA-36B8-5EBB-9555-70E79F8479AB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'058843BA-36B8-5EBB-9555-70E79F8479AB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'058843BA-36B8-5EBB-9555-70E79F8479AB','440E7114-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '44A7080F-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'44A7080F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'44A7080F-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'44A7080F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '44A70762-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'44A70762-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'44A70762-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'44A70762-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C8670FC9-CFFA-5033-8955-118095B738F7', 'sequence': {'long': 135}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44A70762-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '44A7080F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706863813351843, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C8670FC9-CFFA-5033-8955-118095B738F7','135','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','44A70762-36C2-11E8-BF66-D9AA8AFF4A69','44A7080F-36C2-11E8-BF66-D9AA8AFF4A69','1522706863813351843','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C8670FC9-CFFA-5033-8955-118095B738F7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C8670FC9-CFFA-5033-8955-118095B738F7','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C8670FC9-CFFA-5033-8955-118095B738F7','44A70762-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'C8670FC9-CFFA-5033-8955-118095B738F7','44A7080F-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C5DF1EB9-7E24-5D20-A5FC-FAB32651E5DE', 'sequence': {'long': 136}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863813351843, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C5DF1EB9-7E24-5D20-A5FC-FAB32651E5DE','136','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706863813351843','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C5DF1EB9-7E24-5D20-A5FC-FAB32651E5DE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C5DF1EB9-7E24-5D20-A5FC-FAB32651E5DE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2809CEA2-55E2-58AE-AD69-36095964486D', 'sequence': {'long': 137}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863813351843, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2809CEA2-55E2-58AE-AD69-36095964486D','137','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706863813351843','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2809CEA2-55E2-58AE-AD69-36095964486D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2809CEA2-55E2-58AE-AD69-36095964486D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5C66B6D7-0C97-5ECD-86CB-DAA12F647AE5', 'sequence': {'long': 138}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863813351843, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5C66B6D7-0C97-5ECD-86CB-DAA12F647AE5','138','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706863813351843','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5C66B6D7-0C97-5ECD-86CB-DAA12F647AE5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5C66B6D7-0C97-5ECD-86CB-DAA12F647AE5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '802F30F0-02F5-52F5-8E4A-0A75DB402C22', 'sequence': {'long': 139}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706863813351843, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'802F30F0-02F5-52F5-8E4A-0A75DB402C22','139','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706863813351843','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'802F30F0-02F5-52F5-8E4A-0A75DB402C22','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'802F30F0-02F5-52F5-8E4A-0A75DB402C22','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '77D1F914-61A5-555B-B3D5-5CD468F57B6B', 'sequence': {'long': 140}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '445027EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'77D1F914-61A5-555B-B3D5-5CD468F57B6B','140','EVENT_EXIT','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','1522706864273354979','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'77D1F914-61A5-555B-B3D5-5CD468F57B6B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'77D1F914-61A5-555B-B3D5-5CD468F57B6B','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'77D1F914-61A5-555B-B3D5-5CD468F57B6B','445027EE-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2802, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706864273354979, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2802','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706864273354979','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7796BF8C-EF7E-570A-B313-1F4A5DC2E768', 'sequence': {'long': 141}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2802', 'exec': 'bash', 'arg_pid': '2802', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'7796BF8C-EF7E-570A-B313-1F4A5DC2E768','141','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','1522706864273354979','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2802','bash','2802','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7796BF8C-EF7E-570A-B313-1F4A5DC2E768','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7796BF8C-EF7E-570A-B313-1F4A5DC2E768','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7796BF8C-EF7E-570A-B313-1F4A5DC2E768','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DDCC045F-CCE9-524D-A41C-38EE5E57682D', 'sequence': {'long': 142}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DDCC045F-CCE9-524D-A41C-38EE5E57682D','142','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706864273354979','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DDCC045F-CCE9-524D-A41C-38EE5E57682D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DDCC045F-CCE9-524D-A41C-38EE5E57682D','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DDCC045F-CCE9-524D-A41C-38EE5E57682D','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '0E1A657D-11F7-F051-B711-8D3E01F0DC22', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'0E1A657D-11F7-F051-B711-8D3E01F0DC22','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0E1A657D-11F7-F051-B711-8D3E01F0DC22','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0E1A657D-11F7-F051-B711-8D3E01F0DC22','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8B214303-9169-52B1-920A-D8D704A213F9', 'sequence': {'long': 143}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0E1A657D-11F7-F051-B711-8D3E01F0DC22'}, 'predicateObjectPath': {'string': '/usr/home/darpa/kernel_zones.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '0209'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8B214303-9169-52B1-920A-D8D704A213F9','143','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0E1A657D-11F7-F051-B711-8D3E01F0DC22','/usr/home/darpa/kernel_zones.txt','1522706864273354979','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','0209','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8B214303-9169-52B1-920A-D8D704A213F9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8B214303-9169-52B1-920A-D8D704A213F9','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8B214303-9169-52B1-920A-D8D704A213F9','0E1A657D-11F7-F051-B711-8D3E01F0DC22','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '53124805-ED19-57B7-90FD-F74F8453694A', 'sequence': {'long': 144}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0E1A657D-11F7-F051-B711-8D3E01F0DC22'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'53124805-ED19-57B7-90FD-F74F8453694A','144','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0E1A657D-11F7-F051-B711-8D3E01F0DC22','1522706864273354979','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'53124805-ED19-57B7-90FD-F74F8453694A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'53124805-ED19-57B7-90FD-F74F8453694A','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'53124805-ED19-57B7-90FD-F74F8453694A','0E1A657D-11F7-F051-B711-8D3E01F0DC22','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0D01372C-88DF-508D-A453-AF377F78B380', 'sequence': {'long': 145}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '330061CF-6BB3-C45E-B36B-B89D7EC4F443'}, 'predicateObjectPath': {'string': '/usr/bin/vmstat'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': '/usr/bin/vmstat -z', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0D01372C-88DF-508D-A453-AF377F78B380','145','EVENT_EXECUTE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','330061CF-6BB3-C45E-B36B-B89D7EC4F443','/usr/bin/vmstat','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706864273354979','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/bin/vmstat -z','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0D01372C-88DF-508D-A453-AF377F78B380','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0D01372C-88DF-508D-A453-AF377F78B380','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0D01372C-88DF-508D-A453-AF377F78B380','330061CF-6BB3-C45E-B36B-B89D7EC4F443','affects'),(nextval('edge_number_seq'),'0D01372C-88DF-508D-A453-AF377F78B380','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '92ED4C51-2F32-5568-B621-8C131581B352', 'sequence': {'long': 146}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'92ED4C51-2F32-5568-B621-8C131581B352','146','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706864273354979','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'92ED4C51-2F32-5568-B621-8C131581B352','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'92ED4C51-2F32-5568-B621-8C131581B352','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'92ED4C51-2F32-5568-B621-8C131581B352','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E4D672DE-6DC8-57FA-8361-876EB9AC0D92', 'sequence': {'long': 147}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E4D672DE-6DC8-57FA-8361-876EB9AC0D92','147','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706864273354979','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E4D672DE-6DC8-57FA-8361-876EB9AC0D92','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E4D672DE-6DC8-57FA-8361-876EB9AC0D92','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E4D672DE-6DC8-57FA-8361-876EB9AC0D92','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '37F6DAC5-E378-5C12-9CD0-4A99AD032AFB', 'sequence': {'long': 148}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'37F6DAC5-E378-5C12-9CD0-4A99AD032AFB','148','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706864273354979','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'37F6DAC5-E378-5C12-9CD0-4A99AD032AFB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'37F6DAC5-E378-5C12-9CD0-4A99AD032AFB','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'37F6DAC5-E378-5C12-9CD0-4A99AD032AFB','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8246CF8E-30EC-5973-8419-D1F90185D171', 'sequence': {'long': 149}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8246CF8E-30EC-5973-8419-D1F90185D171','149','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706864273354979','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8246CF8E-30EC-5973-8419-D1F90185D171','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8246CF8E-30EC-5973-8419-D1F90185D171','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8246CF8E-30EC-5973-8419-D1F90185D171','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '779D9C32-0D44-5B36-854F-A42F5CCDFBF7', 'sequence': {'long': 150}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'779D9C32-0D44-5B36-854F-A42F5CCDFBF7','150','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706864273354979','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'779D9C32-0D44-5B36-854F-A42F5CCDFBF7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'779D9C32-0D44-5B36-854F-A42F5CCDFBF7','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'779D9C32-0D44-5B36-854F-A42F5CCDFBF7','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B95FD152-5DBC-5E24-9C52-BA3A63EAA53F', 'sequence': {'long': 151}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B95FD152-5DBC-5E24-9C52-BA3A63EAA53F','151','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706864273354979','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B95FD152-5DBC-5E24-9C52-BA3A63EAA53F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B95FD152-5DBC-5E24-9C52-BA3A63EAA53F','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B95FD152-5DBC-5E24-9C52-BA3A63EAA53F','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B92881A4-C4BC-534C-8C84-1C89F0D00923', 'sequence': {'long': 152}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B92881A4-C4BC-534C-8C84-1C89F0D00923','152','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706864273354979','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B92881A4-C4BC-534C-8C84-1C89F0D00923','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B92881A4-C4BC-534C-8C84-1C89F0D00923','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B92881A4-C4BC-534C-8C84-1C89F0D00923','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A5FEFA74-6476-5512-B742-2B28F5D39A88', 'sequence': {'long': 153}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': {'string': '/lib/libdevstat.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A5FEFA74-6476-5512-B742-2B28F5D39A88','153','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','/lib/libdevstat.so.7','1522706864273354979','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A5FEFA74-6476-5512-B742-2B28F5D39A88','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A5FEFA74-6476-5512-B742-2B28F5D39A88','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A5FEFA74-6476-5512-B742-2B28F5D39A88','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E8F7BF37-A984-56D2-8D8F-0D5A8A62ECBF', 'sequence': {'long': 154}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E8F7BF37-A984-56D2-8D8F-0D5A8A62ECBF','154','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706864273354979','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E8F7BF37-A984-56D2-8D8F-0D5A8A62ECBF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E8F7BF37-A984-56D2-8D8F-0D5A8A62ECBF','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E8F7BF37-A984-56D2-8D8F-0D5A8A62ECBF','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8DCB204D-7037-56FD-A570-C2C91DA4696C', 'sequence': {'long': 155}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8DCB204D-7037-56FD-A570-C2C91DA4696C','155','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706864273354979','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8DCB204D-7037-56FD-A570-C2C91DA4696C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8DCB204D-7037-56FD-A570-C2C91DA4696C','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8DCB204D-7037-56FD-A570-C2C91DA4696C','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7BE0768D-9C39-5976-B2CB-9830437B16C9', 'sequence': {'long': 156}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8572928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7BE0768D-9C39-5976-B2CB-9830437B16C9','156','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706864273354979','aue_mmap','8572928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7BE0768D-9C39-5976-B2CB-9830437B16C9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7BE0768D-9C39-5976-B2CB-9830437B16C9','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7BE0768D-9C39-5976-B2CB-9830437B16C9','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AED8A4D4-8FAC-599A-805A-73E8852D0DB9', 'sequence': {'long': 157}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8572928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'AED8A4D4-8FAC-599A-805A-73E8852D0DB9','157','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706864273354979','aue_mmap','8572928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AED8A4D4-8FAC-599A-805A-73E8852D0DB9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AED8A4D4-8FAC-599A-805A-73E8852D0DB9','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AED8A4D4-8FAC-599A-805A-73E8852D0DB9','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5ACD1FBE-813B-5433-BAF2-D7B74D8B5B47', 'sequence': {'long': 158}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10690560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5ACD1FBE-813B-5433-BAF2-D7B74D8B5B47','158','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706864273354979','aue_mmap','10690560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5ACD1FBE-813B-5433-BAF2-D7B74D8B5B47','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5ACD1FBE-813B-5433-BAF2-D7B74D8B5B47','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5ACD1FBE-813B-5433-BAF2-D7B74D8B5B47','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '565D4D7C-4371-5EF5-A8BF-E9F1FA4ACC76', 'sequence': {'long': 159}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864273354979, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10690560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'565D4D7C-4371-5EF5-A8BF-E9F1FA4ACC76','159','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706864273354979','aue_mmap','10690560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'565D4D7C-4371-5EF5-A8BF-E9F1FA4ACC76','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'565D4D7C-4371-5EF5-A8BF-E9F1FA4ACC76','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'565D4D7C-4371-5EF5-A8BF-E9F1FA4ACC76','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '28FB3504-52C6-5AAF-A448-CA6DCC61F41A', 'sequence': {'long': 160}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'28FB3504-52C6-5AAF-A448-CA6DCC61F41A','160','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706864283351910','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'28FB3504-52C6-5AAF-A448-CA6DCC61F41A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'28FB3504-52C6-5AAF-A448-CA6DCC61F41A','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'28FB3504-52C6-5AAF-A448-CA6DCC61F41A','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5FFE6673-0901-5D2B-844E-CB9110360B4B', 'sequence': {'long': 161}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': {'string': '/lib/libkvm.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5FFE6673-0901-5D2B-844E-CB9110360B4B','161','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','/lib/libkvm.so.7','1522706864283351910','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5FFE6673-0901-5D2B-844E-CB9110360B4B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5FFE6673-0901-5D2B-844E-CB9110360B4B','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5FFE6673-0901-5D2B-844E-CB9110360B4B','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1BAFD55C-4061-54F5-BB7F-A042DDC53E56', 'sequence': {'long': 162}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1BAFD55C-4061-54F5-BB7F-A042DDC53E56','162','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706864283351910','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1BAFD55C-4061-54F5-BB7F-A042DDC53E56','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1BAFD55C-4061-54F5-BB7F-A042DDC53E56','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1BAFD55C-4061-54F5-BB7F-A042DDC53E56','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C1A7D8C8-9375-5AA6-9DE4-19F7853F5F87', 'sequence': {'long': 163}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C1A7D8C8-9375-5AA6-9DE4-19F7853F5F87','163','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706864283351910','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C1A7D8C8-9375-5AA6-9DE4-19F7853F5F87','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C1A7D8C8-9375-5AA6-9DE4-19F7853F5F87','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C1A7D8C8-9375-5AA6-9DE4-19F7853F5F87','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '26949EE6-40AC-5849-B6D4-5A9158F65F2D', 'sequence': {'long': 164}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10694656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'26949EE6-40AC-5849-B6D4-5A9158F65F2D','164','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706864283351910','aue_mmap','10694656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'26949EE6-40AC-5849-B6D4-5A9158F65F2D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'26949EE6-40AC-5849-B6D4-5A9158F65F2D','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'26949EE6-40AC-5849-B6D4-5A9158F65F2D','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '29430F0E-79E0-5BE0-90CD-296EF9D46979', 'sequence': {'long': 165}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10694656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'29430F0E-79E0-5BE0-90CD-296EF9D46979','165','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706864283351910','aue_mmap','10694656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'29430F0E-79E0-5BE0-90CD-296EF9D46979','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'29430F0E-79E0-5BE0-90CD-296EF9D46979','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'29430F0E-79E0-5BE0-90CD-296EF9D46979','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '560AC50C-EC62-5CF4-B7BC-697B3850AFC5', 'sequence': {'long': 166}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12853248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'560AC50C-EC62-5CF4-B7BC-697B3850AFC5','166','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706864283351910','aue_mmap','12853248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'560AC50C-EC62-5CF4-B7BC-697B3850AFC5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'560AC50C-EC62-5CF4-B7BC-697B3850AFC5','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'560AC50C-EC62-5CF4-B7BC-697B3850AFC5','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4FB4251E-0F8F-5BD9-8168-55C2D9D0EFDF', 'sequence': {'long': 167}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12853248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'4FB4251E-0F8F-5BD9-8168-55C2D9D0EFDF','167','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706864283351910','aue_mmap','12853248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4FB4251E-0F8F-5BD9-8168-55C2D9D0EFDF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4FB4251E-0F8F-5BD9-8168-55C2D9D0EFDF','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4FB4251E-0F8F-5BD9-8168-55C2D9D0EFDF','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2DD03F04-D482-5735-B3FF-247D88F6BC29', 'sequence': {'long': 168}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2DD03F04-D482-5735-B3FF-247D88F6BC29','168','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706864283351910','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2DD03F04-D482-5735-B3FF-247D88F6BC29','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2DD03F04-D482-5735-B3FF-247D88F6BC29','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2DD03F04-D482-5735-B3FF-247D88F6BC29','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4D5C80BB-FE1C-5E86-B62E-636DE747EBA2', 'sequence': {'long': 169}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': {'string': '/usr/lib/libmemstat.so.3'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4D5C80BB-FE1C-5E86-B62E-636DE747EBA2','169','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','/usr/lib/libmemstat.so.3','1522706864283351910','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4D5C80BB-FE1C-5E86-B62E-636DE747EBA2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4D5C80BB-FE1C-5E86-B62E-636DE747EBA2','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4D5C80BB-FE1C-5E86-B62E-636DE747EBA2','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '72A09C5E-84EF-52F8-82A6-74274C9DE9CD', 'sequence': {'long': 170}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'72A09C5E-84EF-52F8-82A6-74274C9DE9CD','170','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706864283351910','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'72A09C5E-84EF-52F8-82A6-74274C9DE9CD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'72A09C5E-84EF-52F8-82A6-74274C9DE9CD','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'72A09C5E-84EF-52F8-82A6-74274C9DE9CD','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '349073EB-CF38-5D6F-800A-969A0B7E37F7', 'sequence': {'long': 171}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'349073EB-CF38-5D6F-800A-969A0B7E37F7','171','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706864283351910','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'349073EB-CF38-5D6F-800A-969A0B7E37F7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'349073EB-CF38-5D6F-800A-969A0B7E37F7','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'349073EB-CF38-5D6F-800A-969A0B7E37F7','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7F33FE1E-E2F2-58E7-840B-07658DD487F0', 'sequence': {'long': 172}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12857344}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7F33FE1E-E2F2-58E7-840B-07658DD487F0','172','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706864283351910','aue_mmap','12857344','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7F33FE1E-E2F2-58E7-840B-07658DD487F0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7F33FE1E-E2F2-58E7-840B-07658DD487F0','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7F33FE1E-E2F2-58E7-840B-07658DD487F0','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F715404E-318A-53CA-B713-F29D1286AC5F', 'sequence': {'long': 173}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12857344}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F715404E-318A-53CA-B713-F29D1286AC5F','173','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706864283351910','aue_mmap','12857344','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F715404E-318A-53CA-B713-F29D1286AC5F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F715404E-318A-53CA-B713-F29D1286AC5F','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F715404E-318A-53CA-B713-F29D1286AC5F','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '702C31EB-2655-5FA8-91A8-798CB821670A', 'sequence': {'long': 174}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14966784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'702C31EB-2655-5FA8-91A8-798CB821670A','174','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706864283351910','aue_mmap','14966784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'702C31EB-2655-5FA8-91A8-798CB821670A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'702C31EB-2655-5FA8-91A8-798CB821670A','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'702C31EB-2655-5FA8-91A8-798CB821670A','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '652CCD54-6B6E-5680-8F86-0275CF62A8F1', 'sequence': {'long': 175}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14966784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'652CCD54-6B6E-5680-8F86-0275CF62A8F1','175','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706864283351910','aue_mmap','14966784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'652CCD54-6B6E-5680-8F86-0275CF62A8F1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'652CCD54-6B6E-5680-8F86-0275CF62A8F1','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'652CCD54-6B6E-5680-8F86-0275CF62A8F1','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '825B5576-E2CF-5C09-88A0-E1862432B028', 'sequence': {'long': 176}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'825B5576-E2CF-5C09-88A0-E1862432B028','176','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706864283351910','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'825B5576-E2CF-5C09-88A0-E1862432B028','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'825B5576-E2CF-5C09-88A0-E1862432B028','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'825B5576-E2CF-5C09-88A0-E1862432B028','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FCF425AD-8F1F-5945-B0F9-9350E9CD660C', 'sequence': {'long': 177}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': {'string': '/lib/libxo.so.0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FCF425AD-8F1F-5945-B0F9-9350E9CD660C','177','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','/lib/libxo.so.0','1522706864283351910','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FCF425AD-8F1F-5945-B0F9-9350E9CD660C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FCF425AD-8F1F-5945-B0F9-9350E9CD660C','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FCF425AD-8F1F-5945-B0F9-9350E9CD660C','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6EB141BF-0481-5275-9B49-55529A003F02', 'sequence': {'long': 178}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6EB141BF-0481-5275-9B49-55529A003F02','178','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706864283351910','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6EB141BF-0481-5275-9B49-55529A003F02','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6EB141BF-0481-5275-9B49-55529A003F02','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6EB141BF-0481-5275-9B49-55529A003F02','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E8E39666-3D9A-5E0E-B22E-907BD40738EF', 'sequence': {'long': 179}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E8E39666-3D9A-5E0E-B22E-907BD40738EF','179','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706864283351910','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E8E39666-3D9A-5E0E-B22E-907BD40738EF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E8E39666-3D9A-5E0E-B22E-907BD40738EF','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E8E39666-3D9A-5E0E-B22E-907BD40738EF','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2F3B31DA-9891-569F-BA44-3A9B84AF0E69', 'sequence': {'long': 180}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14970880}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2F3B31DA-9891-569F-BA44-3A9B84AF0E69','180','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706864283351910','aue_mmap','14970880','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2F3B31DA-9891-569F-BA44-3A9B84AF0E69','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2F3B31DA-9891-569F-BA44-3A9B84AF0E69','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2F3B31DA-9891-569F-BA44-3A9B84AF0E69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '074A1B5F-FA03-58BC-8D5F-60F274D2F59B', 'sequence': {'long': 181}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14970880}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'074A1B5F-FA03-58BC-8D5F-60F274D2F59B','181','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706864283351910','aue_mmap','14970880','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'074A1B5F-FA03-58BC-8D5F-60F274D2F59B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'074A1B5F-FA03-58BC-8D5F-60F274D2F59B','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'074A1B5F-FA03-58BC-8D5F-60F274D2F59B','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '469ABD6C-02BC-57D0-8A1C-1A6F9D959BA4', 'sequence': {'long': 182}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17182720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'469ABD6C-02BC-57D0-8A1C-1A6F9D959BA4','182','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706864283351910','aue_mmap','17182720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'469ABD6C-02BC-57D0-8A1C-1A6F9D959BA4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'469ABD6C-02BC-57D0-8A1C-1A6F9D959BA4','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'469ABD6C-02BC-57D0-8A1C-1A6F9D959BA4','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '31ADC27D-CD88-5E47-AF71-5E5B649104EE', 'sequence': {'long': 183}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17182720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'31ADC27D-CD88-5E47-AF71-5E5B649104EE','183','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706864283351910','aue_mmap','17182720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'31ADC27D-CD88-5E47-AF71-5E5B649104EE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'31ADC27D-CD88-5E47-AF71-5E5B649104EE','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'31ADC27D-CD88-5E47-AF71-5E5B649104EE','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E928BE5E-C972-506D-A223-7898D6615656', 'sequence': {'long': 184}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E928BE5E-C972-506D-A223-7898D6615656','184','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706864283351910','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E928BE5E-C972-506D-A223-7898D6615656','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E928BE5E-C972-506D-A223-7898D6615656','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E928BE5E-C972-506D-A223-7898D6615656','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3FAA9F1A-B7B9-5870-A7B7-756026088EF5', 'sequence': {'long': 185}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': {'string': '/lib/libutil.so.9'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3FAA9F1A-B7B9-5870-A7B7-756026088EF5','185','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','/lib/libutil.so.9','1522706864283351910','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3FAA9F1A-B7B9-5870-A7B7-756026088EF5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3FAA9F1A-B7B9-5870-A7B7-756026088EF5','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3FAA9F1A-B7B9-5870-A7B7-756026088EF5','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B480FE96-62D1-50F2-B264-A98DB4FB5E7E', 'sequence': {'long': 186}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B480FE96-62D1-50F2-B264-A98DB4FB5E7E','186','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706864283351910','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B480FE96-62D1-50F2-B264-A98DB4FB5E7E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B480FE96-62D1-50F2-B264-A98DB4FB5E7E','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B480FE96-62D1-50F2-B264-A98DB4FB5E7E','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5F4944B4-9685-569D-84B7-D8B57ED9BE53', 'sequence': {'long': 187}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5F4944B4-9685-569D-84B7-D8B57ED9BE53','187','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706864283351910','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5F4944B4-9685-569D-84B7-D8B57ED9BE53','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5F4944B4-9685-569D-84B7-D8B57ED9BE53','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5F4944B4-9685-569D-84B7-D8B57ED9BE53','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4588F39B-5836-5111-9C86-6CF72265AC29', 'sequence': {'long': 188}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17186816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'4588F39B-5836-5111-9C86-6CF72265AC29','188','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706864283351910','aue_mmap','17186816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4588F39B-5836-5111-9C86-6CF72265AC29','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4588F39B-5836-5111-9C86-6CF72265AC29','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4588F39B-5836-5111-9C86-6CF72265AC29','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A1ECF9C2-610F-5184-943B-A9119ABA8843', 'sequence': {'long': 189}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864283351910, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17186816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A1ECF9C2-610F-5184-943B-A9119ABA8843','189','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706864283351910','aue_mmap','17186816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A1ECF9C2-610F-5184-943B-A9119ABA8843','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A1ECF9C2-610F-5184-943B-A9119ABA8843','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A1ECF9C2-610F-5184-943B-A9119ABA8843','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FA1187D3-8A6E-5182-BFC2-1013381057FD', 'sequence': {'long': 190}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19353600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'FA1187D3-8A6E-5182-BFC2-1013381057FD','190','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706864293354010','aue_mmap','19353600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FA1187D3-8A6E-5182-BFC2-1013381057FD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FA1187D3-8A6E-5182-BFC2-1013381057FD','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FA1187D3-8A6E-5182-BFC2-1013381057FD','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5484282B-1E3B-5218-A2A6-2A66A19B4C3C', 'sequence': {'long': 191}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19353600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5484282B-1E3B-5218-A2A6-2A66A19B4C3C','191','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706864293354010','aue_mmap','19353600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5484282B-1E3B-5218-A2A6-2A66A19B4C3C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5484282B-1E3B-5218-A2A6-2A66A19B4C3C','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5484282B-1E3B-5218-A2A6-2A66A19B4C3C','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '291244C0-403C-5801-BE14-68F98A7B07BC', 'sequence': {'long': 192}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'291244C0-403C-5801-BE14-68F98A7B07BC','192','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706864293354010','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'291244C0-403C-5801-BE14-68F98A7B07BC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'291244C0-403C-5801-BE14-68F98A7B07BC','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'291244C0-403C-5801-BE14-68F98A7B07BC','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FD18F38B-D4ED-5372-AC16-80561C43F2C9', 'sequence': {'long': 193}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FD18F38B-D4ED-5372-AC16-80561C43F2C9','193','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706864293354010','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FD18F38B-D4ED-5372-AC16-80561C43F2C9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FD18F38B-D4ED-5372-AC16-80561C43F2C9','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FD18F38B-D4ED-5372-AC16-80561C43F2C9','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F8B6197B-2542-594D-9E9D-AF3F9AD9F856', 'sequence': {'long': 194}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F8B6197B-2542-594D-9E9D-AF3F9AD9F856','194','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864293354010','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F8B6197B-2542-594D-9E9D-AF3F9AD9F856','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F8B6197B-2542-594D-9E9D-AF3F9AD9F856','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F8B6197B-2542-594D-9E9D-AF3F9AD9F856','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9D72276C-3A34-5B6A-BEC7-687994877F93', 'sequence': {'long': 195}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9D72276C-3A34-5B6A-BEC7-687994877F93','195','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864293354010','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9D72276C-3A34-5B6A-BEC7-687994877F93','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9D72276C-3A34-5B6A-BEC7-687994877F93','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9D72276C-3A34-5B6A-BEC7-687994877F93','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5D35589E-6211-5CE9-BF23-C098B6E44D76', 'sequence': {'long': 196}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19365888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5D35589E-6211-5CE9-BF23-C098B6E44D76','196','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864293354010','aue_mmap','19365888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5D35589E-6211-5CE9-BF23-C098B6E44D76','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5D35589E-6211-5CE9-BF23-C098B6E44D76','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5D35589E-6211-5CE9-BF23-C098B6E44D76','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B605AC10-DBD1-52A6-AD63-7DE55A005618', 'sequence': {'long': 197}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19365888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B605AC10-DBD1-52A6-AD63-7DE55A005618','197','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864293354010','aue_mmap','19365888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B605AC10-DBD1-52A6-AD63-7DE55A005618','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B605AC10-DBD1-52A6-AD63-7DE55A005618','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B605AC10-DBD1-52A6-AD63-7DE55A005618','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3E04A886-F015-56E5-9B85-049C0F33AA8A', 'sequence': {'long': 198}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23252992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3E04A886-F015-56E5-9B85-049C0F33AA8A','198','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864293354010','aue_mmap','23252992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3E04A886-F015-56E5-9B85-049C0F33AA8A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3E04A886-F015-56E5-9B85-049C0F33AA8A','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3E04A886-F015-56E5-9B85-049C0F33AA8A','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '81871644-EE72-5AAB-8E5D-8CC27AF98808', 'sequence': {'long': 199}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23252992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'81871644-EE72-5AAB-8E5D-8CC27AF98808','199','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864293354010','aue_mmap','23252992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'81871644-EE72-5AAB-8E5D-8CC27AF98808','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'81871644-EE72-5AAB-8E5D-8CC27AF98808','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'81871644-EE72-5AAB-8E5D-8CC27AF98808','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '516BE2FD-5A8A-5D13-B36A-6D7A05292A1F', 'sequence': {'long': 200}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'516BE2FD-5A8A-5D13-B36A-6D7A05292A1F','200','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864293354010','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'516BE2FD-5A8A-5D13-B36A-6D7A05292A1F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'516BE2FD-5A8A-5D13-B36A-6D7A05292A1F','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'516BE2FD-5A8A-5D13-B36A-6D7A05292A1F','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '443D209B-4C00-586C-86F3-08DBEC294FF4', 'sequence': {'long': 201}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': {'string': '/lib/libelf.so.2'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'443D209B-4C00-586C-86F3-08DBEC294FF4','201','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','/lib/libelf.so.2','1522706864293354010','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'443D209B-4C00-586C-86F3-08DBEC294FF4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'443D209B-4C00-586C-86F3-08DBEC294FF4','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'443D209B-4C00-586C-86F3-08DBEC294FF4','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F43EB297-CECC-595E-BEC4-793F1720DEEC', 'sequence': {'long': 202}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F43EB297-CECC-595E-BEC4-793F1720DEEC','202','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706864293354010','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F43EB297-CECC-595E-BEC4-793F1720DEEC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F43EB297-CECC-595E-BEC4-793F1720DEEC','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F43EB297-CECC-595E-BEC4-793F1720DEEC','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '885C0B6E-ADA9-573D-8A58-A4F6DB1B0B34', 'sequence': {'long': 203}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'885C0B6E-ADA9-573D-8A58-A4F6DB1B0B34','203','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706864293354010','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'885C0B6E-ADA9-573D-8A58-A4F6DB1B0B34','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'885C0B6E-ADA9-573D-8A58-A4F6DB1B0B34','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'885C0B6E-ADA9-573D-8A58-A4F6DB1B0B34','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '16C31DC7-9DA1-5BA9-8438-8BA8B39E7124', 'sequence': {'long': 204}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 25567232}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'16C31DC7-9DA1-5BA9-8438-8BA8B39E7124','204','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706864293354010','aue_mmap','25567232','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'16C31DC7-9DA1-5BA9-8438-8BA8B39E7124','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'16C31DC7-9DA1-5BA9-8438-8BA8B39E7124','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'16C31DC7-9DA1-5BA9-8438-8BA8B39E7124','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F28DF012-0561-5443-B13C-4FB27015A4B9', 'sequence': {'long': 205}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 25567232}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F28DF012-0561-5443-B13C-4FB27015A4B9','205','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706864293354010','aue_mmap','25567232','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F28DF012-0561-5443-B13C-4FB27015A4B9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F28DF012-0561-5443-B13C-4FB27015A4B9','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F28DF012-0561-5443-B13C-4FB27015A4B9','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '89819142-D16B-5D60-8746-48BE49C8992E', 'sequence': {'long': 206}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 27758592}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'89819142-D16B-5D60-8746-48BE49C8992E','206','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706864293354010','aue_mmap','27758592','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'89819142-D16B-5D60-8746-48BE49C8992E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'89819142-D16B-5D60-8746-48BE49C8992E','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'89819142-D16B-5D60-8746-48BE49C8992E','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E3A6A71A-B315-5B05-9983-070CD80058AA', 'sequence': {'long': 207}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 27758592}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E3A6A71A-B315-5B05-9983-070CD80058AA','207','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706864293354010','aue_mmap','27758592','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E3A6A71A-B315-5B05-9983-070CD80058AA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E3A6A71A-B315-5B05-9983-070CD80058AA','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E3A6A71A-B315-5B05-9983-070CD80058AA','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F0D78631-4DC9-5A2F-834E-149C98FE3CFF', 'sequence': {'long': 208}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F0D78631-4DC9-5A2F-834E-149C98FE3CFF','208','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706864293354010','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F0D78631-4DC9-5A2F-834E-149C98FE3CFF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F0D78631-4DC9-5A2F-834E-149C98FE3CFF','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F0D78631-4DC9-5A2F-834E-149C98FE3CFF','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3390A1C4-D515-5CFF-994C-37D69A949216', 'sequence': {'long': 209}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3390A1C4-D515-5CFF-994C-37D69A949216','209','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706864293354010','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3390A1C4-D515-5CFF-994C-37D69A949216','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3390A1C4-D515-5CFF-994C-37D69A949216','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3390A1C4-D515-5CFF-994C-37D69A949216','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8A1FC77D-A6FB-5E92-A590-BDF252DACDD5', 'sequence': {'long': 210}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8A1FC77D-A6FB-5E92-A590-BDF252DACDD5','210','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706864293354010','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8A1FC77D-A6FB-5E92-A590-BDF252DACDD5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8A1FC77D-A6FB-5E92-A590-BDF252DACDD5','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8A1FC77D-A6FB-5E92-A590-BDF252DACDD5','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3DE72FA3-0369-5B70-A785-DBE8EC00313D', 'sequence': {'long': 211}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3DE72FA3-0369-5B70-A785-DBE8EC00313D','211','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706864293354010','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3DE72FA3-0369-5B70-A785-DBE8EC00313D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3DE72FA3-0369-5B70-A785-DBE8EC00313D','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3DE72FA3-0369-5B70-A785-DBE8EC00313D','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DBA746A7-F04E-57C6-A353-3FD4D2E1A431', 'sequence': {'long': 212}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864293354010, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DBA746A7-F04E-57C6-A353-3FD4D2E1A431','212','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706864293354010','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DBA746A7-F04E-57C6-A353-3FD4D2E1A431','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DBA746A7-F04E-57C6-A353-3FD4D2E1A431','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DBA746A7-F04E-57C6-A353-3FD4D2E1A431','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A72B7A8B-5142-5EA1-95F1-03F4B81EFA52', 'sequence': {'long': 213}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0E1A657D-11F7-F051-B711-8D3E01F0DC22'}, 'predicateObjectPath': {'string': 'kernel_zones.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 7746}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kernel_zones.txt', 'fd': '1', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A72B7A8B-5142-5EA1-95F1-03F4B81EFA52','213','EVENT_WRITE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0E1A657D-11F7-F051-B711-8D3E01F0DC22','kernel_zones.txt','1522706864303353710','aue_write','7746','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kernel_zones.txt','1','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A72B7A8B-5142-5EA1-95F1-03F4B81EFA52','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A72B7A8B-5142-5EA1-95F1-03F4B81EFA52','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A72B7A8B-5142-5EA1-95F1-03F4B81EFA52','0E1A657D-11F7-F051-B711-8D3E01F0DC22','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8C7E167C-6ADB-5FF5-8EE6-BA513E610A6E', 'sequence': {'long': 214}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0E1A657D-11F7-F051-B711-8D3E01F0DC22'}, 'predicateObjectPath': {'string': 'kernel_zones.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 7692}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kernel_zones.txt', 'fd': '1', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8C7E167C-6ADB-5FF5-8EE6-BA513E610A6E','214','EVENT_WRITE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0E1A657D-11F7-F051-B711-8D3E01F0DC22','kernel_zones.txt','1522706864303353710','aue_write','7692','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kernel_zones.txt','1','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8C7E167C-6ADB-5FF5-8EE6-BA513E610A6E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8C7E167C-6ADB-5FF5-8EE6-BA513E610A6E','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8C7E167C-6ADB-5FF5-8EE6-BA513E610A6E','0E1A657D-11F7-F051-B711-8D3E01F0DC22','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F9DD1E6B-7D39-59C4-8871-D4766BF253F3', 'sequence': {'long': 215}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0E1A657D-11F7-F051-B711-8D3E01F0DC22'}, 'predicateObjectPath': {'string': 'kernel_zones.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2602}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kernel_zones.txt', 'fd': '1', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F9DD1E6B-7D39-59C4-8871-D4766BF253F3','215','EVENT_WRITE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','0E1A657D-11F7-F051-B711-8D3E01F0DC22','kernel_zones.txt','1522706864303353710','aue_write','2602','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kernel_zones.txt','1','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F9DD1E6B-7D39-59C4-8871-D4766BF253F3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F9DD1E6B-7D39-59C4-8871-D4766BF253F3','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F9DD1E6B-7D39-59C4-8871-D4766BF253F3','0E1A657D-11F7-F051-B711-8D3E01F0DC22','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F0212C63-ACFC-5A46-A85C-0017F5CF507C', 'sequence': {'long': 216}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44ED5044-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F0212C63-ACFC-5A46-A85C-0017F5CF507C','216','EVENT_EXIT','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','1522706864303353710','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F0212C63-ACFC-5A46-A85C-0017F5CF507C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F0212C63-ACFC-5A46-A85C-0017F5CF507C','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F0212C63-ACFC-5A46-A85C-0017F5CF507C','44ED5044-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2803, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706864303353710, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2803','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706864303353710','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D2F45C43-DD4D-5043-856C-F2A4AA36C36F', 'sequence': {'long': 217}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2803', 'exec': 'bash', 'arg_pid': '2803', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'D2F45C43-DD4D-5043-856C-F2A4AA36C36F','217','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','1522706864303353710','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2803','bash','2803','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D2F45C43-DD4D-5043-856C-F2A4AA36C36F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D2F45C43-DD4D-5043-856C-F2A4AA36C36F','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D2F45C43-DD4D-5043-856C-F2A4AA36C36F','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '22B2E962-534E-5762-B92A-1BFFC92312DA', 'sequence': {'long': 218}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'22B2E962-534E-5762-B92A-1BFFC92312DA','218','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706864303353710','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'22B2E962-534E-5762-B92A-1BFFC92312DA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'22B2E962-534E-5762-B92A-1BFFC92312DA','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'22B2E962-534E-5762-B92A-1BFFC92312DA','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BA76FE97-01E0-559B-BFA8-DA83029C274F', 'sequence': {'long': 219}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C836AA2-BB54-3A58-94BB-1E5D583A637E'}, 'predicateObjectPath': {'string': '/bin/sleep'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'sleep 1', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BA76FE97-01E0-559B-BFA8-DA83029C274F','219','EVENT_EXECUTE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','6C836AA2-BB54-3A58-94BB-1E5D583A637E','/bin/sleep','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706864303353710','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','sleep 1','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BA76FE97-01E0-559B-BFA8-DA83029C274F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BA76FE97-01E0-559B-BFA8-DA83029C274F','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BA76FE97-01E0-559B-BFA8-DA83029C274F','6C836AA2-BB54-3A58-94BB-1E5D583A637E','affects'),(nextval('edge_number_seq'),'BA76FE97-01E0-559B-BFA8-DA83029C274F','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DAA1DCA5-0F6F-5257-8E5B-96619A2BAB10', 'sequence': {'long': 220}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DAA1DCA5-0F6F-5257-8E5B-96619A2BAB10','220','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706864303353710','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DAA1DCA5-0F6F-5257-8E5B-96619A2BAB10','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DAA1DCA5-0F6F-5257-8E5B-96619A2BAB10','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DAA1DCA5-0F6F-5257-8E5B-96619A2BAB10','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E4FB58A2-9E1F-5D95-B3FB-04699CBD640B', 'sequence': {'long': 221}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E4FB58A2-9E1F-5D95-B3FB-04699CBD640B','221','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706864303353710','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E4FB58A2-9E1F-5D95-B3FB-04699CBD640B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E4FB58A2-9E1F-5D95-B3FB-04699CBD640B','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E4FB58A2-9E1F-5D95-B3FB-04699CBD640B','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '30716EC1-70AC-5C7A-AE73-32C3AD03D7D6', 'sequence': {'long': 222}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'30716EC1-70AC-5C7A-AE73-32C3AD03D7D6','222','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706864303353710','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'30716EC1-70AC-5C7A-AE73-32C3AD03D7D6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'30716EC1-70AC-5C7A-AE73-32C3AD03D7D6','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'30716EC1-70AC-5C7A-AE73-32C3AD03D7D6','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0334D4F4-9568-51F3-AF76-3A7C334B51C8', 'sequence': {'long': 223}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0334D4F4-9568-51F3-AF76-3A7C334B51C8','223','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706864303353710','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0334D4F4-9568-51F3-AF76-3A7C334B51C8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0334D4F4-9568-51F3-AF76-3A7C334B51C8','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0334D4F4-9568-51F3-AF76-3A7C334B51C8','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FD05277E-D67B-5334-AAFE-2190A0E80AD3', 'sequence': {'long': 224}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FD05277E-D67B-5334-AAFE-2190A0E80AD3','224','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706864303353710','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FD05277E-D67B-5334-AAFE-2190A0E80AD3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FD05277E-D67B-5334-AAFE-2190A0E80AD3','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FD05277E-D67B-5334-AAFE-2190A0E80AD3','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '040013EB-15BB-5BEF-A117-512F468CC0A8', 'sequence': {'long': 225}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'040013EB-15BB-5BEF-A117-512F468CC0A8','225','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706864303353710','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'040013EB-15BB-5BEF-A117-512F468CC0A8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'040013EB-15BB-5BEF-A117-512F468CC0A8','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'040013EB-15BB-5BEF-A117-512F468CC0A8','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '53862456-F6CF-5767-BCE3-E745D9D70C35', 'sequence': {'long': 226}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'53862456-F6CF-5767-BCE3-E745D9D70C35','226','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706864303353710','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'53862456-F6CF-5767-BCE3-E745D9D70C35','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'53862456-F6CF-5767-BCE3-E745D9D70C35','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'53862456-F6CF-5767-BCE3-E745D9D70C35','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3EFDFF9B-4D9C-54E3-B4E8-C66997450B9D', 'sequence': {'long': 227}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3EFDFF9B-4D9C-54E3-B4E8-C66997450B9D','227','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706864303353710','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3EFDFF9B-4D9C-54E3-B4E8-C66997450B9D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3EFDFF9B-4D9C-54E3-B4E8-C66997450B9D','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3EFDFF9B-4D9C-54E3-B4E8-C66997450B9D','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5CD614EC-E405-5BE7-860D-DC9CE868DE51', 'sequence': {'long': 228}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5CD614EC-E405-5BE7-860D-DC9CE868DE51','228','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864303353710','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5CD614EC-E405-5BE7-860D-DC9CE868DE51','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5CD614EC-E405-5BE7-860D-DC9CE868DE51','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5CD614EC-E405-5BE7-860D-DC9CE868DE51','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A9589A48-5C34-51DE-93C2-755FD4289CDA', 'sequence': {'long': 229}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A9589A48-5C34-51DE-93C2-755FD4289CDA','229','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864303353710','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A9589A48-5C34-51DE-93C2-755FD4289CDA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A9589A48-5C34-51DE-93C2-755FD4289CDA','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A9589A48-5C34-51DE-93C2-755FD4289CDA','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AF67F6FA-5F2D-5B2F-8068-96EFB42EA3ED', 'sequence': {'long': 230}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'AF67F6FA-5F2D-5B2F-8068-96EFB42EA3ED','230','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864303353710','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AF67F6FA-5F2D-5B2F-8068-96EFB42EA3ED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AF67F6FA-5F2D-5B2F-8068-96EFB42EA3ED','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AF67F6FA-5F2D-5B2F-8068-96EFB42EA3ED','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E1FC8966-623F-58A5-8103-AD39AADF27F6', 'sequence': {'long': 231}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E1FC8966-623F-58A5-8103-AD39AADF27F6','231','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864303353710','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E1FC8966-623F-58A5-8103-AD39AADF27F6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E1FC8966-623F-58A5-8103-AD39AADF27F6','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E1FC8966-623F-58A5-8103-AD39AADF27F6','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '080D1687-1750-52FF-95B4-EABF292D325C', 'sequence': {'long': 232}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864303353710, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'080D1687-1750-52FF-95B4-EABF292D325C','232','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864303353710','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'080D1687-1750-52FF-95B4-EABF292D325C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'080D1687-1750-52FF-95B4-EABF292D325C','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'080D1687-1750-52FF-95B4-EABF292D325C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6A8FEB7F-BFA2-550C-A544-2E12BE6F638A', 'sequence': {'long': 233}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864313352731, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6A8FEB7F-BFA2-550C-A544-2E12BE6F638A','233','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864313352731','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6A8FEB7F-BFA2-550C-A544-2E12BE6F638A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6A8FEB7F-BFA2-550C-A544-2E12BE6F638A','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6A8FEB7F-BFA2-550C-A544-2E12BE6F638A','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '83121C7E-C1E4-51D5-B086-B985914D3B20', 'sequence': {'long': 234}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864313352731, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'83121C7E-C1E4-51D5-B086-B985914D3B20','234','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706864313352731','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'83121C7E-C1E4-51D5-B086-B985914D3B20','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'83121C7E-C1E4-51D5-B086-B985914D3B20','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'83121C7E-C1E4-51D5-B086-B985914D3B20','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0218669D-7F00-59A3-B803-009FF167FF67', 'sequence': {'long': 235}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864313352731, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0218669D-7F00-59A3-B803-009FF167FF67','235','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706864313352731','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0218669D-7F00-59A3-B803-009FF167FF67','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0218669D-7F00-59A3-B803-009FF167FF67','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0218669D-7F00-59A3-B803-009FF167FF67','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AE4A6FD5-52CA-5B7C-AA22-15F3277B0127', 'sequence': {'long': 236}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864313352731, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'AE4A6FD5-52CA-5B7C-AA22-15F3277B0127','236','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706864313352731','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AE4A6FD5-52CA-5B7C-AA22-15F3277B0127','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AE4A6FD5-52CA-5B7C-AA22-15F3277B0127','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AE4A6FD5-52CA-5B7C-AA22-15F3277B0127','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9924183A-B912-5240-8639-3A1EBD7EF764', 'sequence': {'long': 237}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864313352731, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9924183A-B912-5240-8639-3A1EBD7EF764','237','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706864313352731','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9924183A-B912-5240-8639-3A1EBD7EF764','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9924183A-B912-5240-8639-3A1EBD7EF764','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9924183A-B912-5240-8639-3A1EBD7EF764','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '08ED2D43-D087-5F77-A1D5-0C4380E703F1', 'sequence': {'long': 238}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864313352731, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'08ED2D43-D087-5F77-A1D5-0C4380E703F1','238','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706864313352731','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'08ED2D43-D087-5F77-A1D5-0C4380E703F1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'08ED2D43-D087-5F77-A1D5-0C4380E703F1','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'08ED2D43-D087-5F77-A1D5-0C4380E703F1','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '24C1CF91-2F10-59A0-A9C2-8A846E6B42AD', 'sequence': {'long': 239}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44A70762-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864813354999, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'24C1CF91-2F10-59A0-A9C2-8A846E6B42AD','239','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','44A70762-36C2-11E8-BF66-D9AA8AFF4A69','1522706864813354999','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'24C1CF91-2F10-59A0-A9C2-8A846E6B42AD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'24C1CF91-2F10-59A0-A9C2-8A846E6B42AD','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'24C1CF91-2F10-59A0-A9C2-8A846E6B42AD','44A70762-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '89FCF2B5-613E-50B0-A398-AEB86B818867', 'sequence': {'long': 240}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44A7080F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864813354999, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'89FCF2B5-613E-50B0-A398-AEB86B818867','240','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','44A7080F-36C2-11E8-BF66-D9AA8AFF4A69','1522706864813354999','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'89FCF2B5-613E-50B0-A398-AEB86B818867','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'89FCF2B5-613E-50B0-A398-AEB86B818867','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'89FCF2B5-613E-50B0-A398-AEB86B818867','44A7080F-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '453F9F03-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'453F9F03-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'453F9F03-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'453F9F03-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '453F9E58-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'453F9E58-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'453F9E58-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'453F9E58-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '043C903E-943E-551E-9FEF-134D47EAFA39', 'sequence': {'long': 241}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '453F9E58-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '453F9F03-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706864813354999, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'043C903E-943E-551E-9FEF-134D47EAFA39','241','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','453F9E58-36C2-11E8-BF66-D9AA8AFF4A69','453F9F03-36C2-11E8-BF66-D9AA8AFF4A69','1522706864813354999','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'043C903E-943E-551E-9FEF-134D47EAFA39','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'043C903E-943E-551E-9FEF-134D47EAFA39','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'043C903E-943E-551E-9FEF-134D47EAFA39','453F9E58-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'043C903E-943E-551E-9FEF-134D47EAFA39','453F9F03-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '19B9DEE2-8F96-575D-8346-EFFF073F2697', 'sequence': {'long': 242}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864813354999, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'19B9DEE2-8F96-575D-8346-EFFF073F2697','242','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706864813354999','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'19B9DEE2-8F96-575D-8346-EFFF073F2697','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'19B9DEE2-8F96-575D-8346-EFFF073F2697','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '72FD037A-ECB3-5038-8343-03942BFEA353', 'sequence': {'long': 243}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864813354999, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'72FD037A-ECB3-5038-8343-03942BFEA353','243','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706864813354999','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'72FD037A-ECB3-5038-8343-03942BFEA353','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'72FD037A-ECB3-5038-8343-03942BFEA353','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1AF19D54-F180-58BF-903F-ADF1A5F23235', 'sequence': {'long': 244}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864813354999, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1AF19D54-F180-58BF-903F-ADF1A5F23235','244','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706864813354999','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1AF19D54-F180-58BF-903F-ADF1A5F23235','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1AF19D54-F180-58BF-903F-ADF1A5F23235','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '82A348D3-6F82-5B6E-8727-CF507BEB0908', 'sequence': {'long': 245}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706864813354999, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'82A348D3-6F82-5B6E-8727-CF507BEB0908','245','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706864813354999','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'82A348D3-6F82-5B6E-8727-CF507BEB0908','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'82A348D3-6F82-5B6E-8727-CF507BEB0908','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B68A91AA-9EBF-57B6-86CF-34E928A93F9E', 'sequence': {'long': 246}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '44F222BB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B68A91AA-9EBF-57B6-86CF-34E928A93F9E','246','EVENT_EXIT','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','1522706865333352098','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B68A91AA-9EBF-57B6-86CF-34E928A93F9E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B68A91AA-9EBF-57B6-86CF-34E928A93F9E','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B68A91AA-9EBF-57B6-86CF-34E928A93F9E','44F222BB-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.SrcSinkObject': {'uuid': '458F02C5-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'SRCSINK_IPC', 'fileDescriptor': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO srcsinkobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'458F02C5-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','SRCSINK_IPC');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'458F02C5-36C2-11E8-BF66-D9AA8AFF4A69','SrcSinkObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'458F02C5-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.SrcSinkObject': {'uuid': '458F029B-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'SRCSINK_IPC', 'fileDescriptor': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO srcsinkobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'458F029B-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','SRCSINK_IPC');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'458F029B-36C2-11E8-BF66-D9AA8AFF4A69','SrcSinkObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'458F029B-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.UnnamedPipeObject': {'uuid': '43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'sourceFileDescriptor': None, 'sinkFileDescriptor': None, 'sourceUUID': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F029B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'sinkUUID': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F02C5-36C2-11E8-BF66-D9AA8AFF4A69'}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO unnamedpipeobject (line, uuid,baseObject_hostId,sourceUUID_UUID,sinkUUID_UUID) VALUES (nextval('line_number_seq'),'43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F029B-36C2-11E8-BF66-D9AA8AFF4A69','458F02C5-36C2-11E8-BF66-D9AA8AFF4A69');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1','UnnamedPipeObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn'),(nextval('edge_number_seq'),'43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1','458F029B-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1','458F02C5-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F9B781D7-3B7F-5CC0-B4E2-46FA9B0957AD', 'sequence': {'long': 247}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_pipe'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '4', 'ret_fd1': '3', 'return_value': '0', 'exec': 'bash', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F9B781D7-3B7F-5CC0-B4E2-46FA9B0957AD','247','EVENT_CREATE_OBJECT','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1','1522706865333352098','aue_pipe','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','3','0','bash','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F9B781D7-3B7F-5CC0-B4E2-46FA9B0957AD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F9B781D7-3B7F-5CC0-B4E2-46FA9B0957AD','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F9B781D7-3B7F-5CC0-B4E2-46FA9B0957AD','43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2804, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706865333352098, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'458F195B-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2804','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706865333352098','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'458F195B-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'458F195B-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'458F195B-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'458F195B-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BED3F1E3-0DE7-5E55-9782-156762636475', 'sequence': {'long': 248}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2804', 'exec': 'bash', 'arg_pid': '2804', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'BED3F1E3-0DE7-5E55-9782-156762636475','248','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','1522706865333352098','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2804','bash','2804','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BED3F1E3-0DE7-5E55-9782-156762636475','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BED3F1E3-0DE7-5E55-9782-156762636475','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BED3F1E3-0DE7-5E55-9782-156762636475','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1B9F65CA-2B33-53E2-910D-F69C91ECF6B0', 'sequence': {'long': 249}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1B9F65CA-2B33-53E2-910D-F69C91ECF6B0','249','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706865333352098','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1B9F65CA-2B33-53E2-910D-F69C91ECF6B0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1B9F65CA-2B33-53E2-910D-F69C91ECF6B0','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1B9F65CA-2B33-53E2-910D-F69C91ECF6B0','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2805, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706865333352098, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2805','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706865333352098','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9F8E3BD8-EF8F-5E6C-940A-4677D3BAF3DC', 'sequence': {'long': 250}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2805', 'exec': 'bash', 'arg_pid': '2805', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'9F8E3BD8-EF8F-5E6C-940A-4677D3BAF3DC','250','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','1522706865333352098','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2805','bash','2805','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9F8E3BD8-EF8F-5E6C-940A-4677D3BAF3DC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9F8E3BD8-EF8F-5E6C-940A-4677D3BAF3DC','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9F8E3BD8-EF8F-5E6C-940A-4677D3BAF3DC','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BFCF3ACF-DE40-5912-8624-7FCB1B6E712C', 'sequence': {'long': 251}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BFCF3ACF-DE40-5912-8624-7FCB1B6E712C','251','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706865333352098','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BFCF3ACF-DE40-5912-8624-7FCB1B6E712C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BFCF3ACF-DE40-5912-8624-7FCB1B6E712C','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BFCF3ACF-DE40-5912-8624-7FCB1B6E712C','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'FADB56EB-6919-8A51-9969-955CD18AFFC9', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'FADB56EB-6919-8A51-9969-955CD18AFFC9','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FADB56EB-6919-8A51-9969-955CD18AFFC9','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FADB56EB-6919-8A51-9969-955CD18AFFC9','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F4AF0C0B-3562-5A9A-BEF9-BA473228F932', 'sequence': {'long': 252}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FADB56EB-6919-8A51-9969-955CD18AFFC9'}, 'predicateObjectPath': {'string': '/usr/home/darpa/top_procs.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '0209'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F4AF0C0B-3562-5A9A-BEF9-BA473228F932','252','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','FADB56EB-6919-8A51-9969-955CD18AFFC9','/usr/home/darpa/top_procs.txt','1522706865333352098','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','0209','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F4AF0C0B-3562-5A9A-BEF9-BA473228F932','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F4AF0C0B-3562-5A9A-BEF9-BA473228F932','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F4AF0C0B-3562-5A9A-BEF9-BA473228F932','FADB56EB-6919-8A51-9969-955CD18AFFC9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '9D6CE3F1-AA37-D656-B7AA-BA6D46D61C69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'9D6CE3F1-AA37-D656-B7AA-BA6D46D61C69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9D6CE3F1-AA37-D656-B7AA-BA6D46D61C69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9D6CE3F1-AA37-D656-B7AA-BA6D46D61C69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BAB335F0-8C18-5FC9-A640-9DC09E4FDEDB', 'sequence': {'long': 253}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9D6CE3F1-AA37-D656-B7AA-BA6D46D61C69'}, 'predicateObjectPath': {'string': '/usr/bin/top'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'top -osize', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BAB335F0-8C18-5FC9-A640-9DC09E4FDEDB','253','EVENT_EXECUTE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','9D6CE3F1-AA37-D656-B7AA-BA6D46D61C69','/usr/bin/top','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706865333352098','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','top -osize','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BAB335F0-8C18-5FC9-A640-9DC09E4FDEDB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BAB335F0-8C18-5FC9-A640-9DC09E4FDEDB','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BAB335F0-8C18-5FC9-A640-9DC09E4FDEDB','9D6CE3F1-AA37-D656-B7AA-BA6D46D61C69','affects'),(nextval('edge_number_seq'),'BAB335F0-8C18-5FC9-A640-9DC09E4FDEDB','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AC6B63ED-E102-53BC-BDD9-6D6AC5D678F6', 'sequence': {'long': 254}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FADB56EB-6919-8A51-9969-955CD18AFFC9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AC6B63ED-E102-53BC-BDD9-6D6AC5D678F6','254','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','FADB56EB-6919-8A51-9969-955CD18AFFC9','1522706865333352098','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AC6B63ED-E102-53BC-BDD9-6D6AC5D678F6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AC6B63ED-E102-53BC-BDD9-6D6AC5D678F6','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AC6B63ED-E102-53BC-BDD9-6D6AC5D678F6','FADB56EB-6919-8A51-9969-955CD18AFFC9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0AA1D62B-F3DC-54A9-90DD-D3D7901C235C', 'sequence': {'long': 255}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0AA1D62B-F3DC-54A9-90DD-D3D7901C235C','255','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706865333352098','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0AA1D62B-F3DC-54A9-90DD-D3D7901C235C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0AA1D62B-F3DC-54A9-90DD-D3D7901C235C','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0AA1D62B-F3DC-54A9-90DD-D3D7901C235C','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '91207D42-8B6E-6454-AE8B-D3FF24648D84', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'91207D42-8B6E-6454-AE8B-D3FF24648D84','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'91207D42-8B6E-6454-AE8B-D3FF24648D84','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'91207D42-8B6E-6454-AE8B-D3FF24648D84','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D2FEBD3A-071B-5FF7-A490-D7A95BDD777E', 'sequence': {'long': 256}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '91207D42-8B6E-6454-AE8B-D3FF24648D84'}, 'predicateObjectPath': {'string': '/usr/bin/head'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'head -n15', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D2FEBD3A-071B-5FF7-A490-D7A95BDD777E','256','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','91207D42-8B6E-6454-AE8B-D3FF24648D84','/usr/bin/head','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706865333352098','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','head -n15','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D2FEBD3A-071B-5FF7-A490-D7A95BDD777E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D2FEBD3A-071B-5FF7-A490-D7A95BDD777E','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D2FEBD3A-071B-5FF7-A490-D7A95BDD777E','91207D42-8B6E-6454-AE8B-D3FF24648D84','affects'),(nextval('edge_number_seq'),'D2FEBD3A-071B-5FF7-A490-D7A95BDD777E','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '497F43A4-47F1-5CC1-BD78-BDEFB2926B60', 'sequence': {'long': 257}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'497F43A4-47F1-5CC1-BD78-BDEFB2926B60','257','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706865333352098','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'497F43A4-47F1-5CC1-BD78-BDEFB2926B60','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'497F43A4-47F1-5CC1-BD78-BDEFB2926B60','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'497F43A4-47F1-5CC1-BD78-BDEFB2926B60','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '46B424FC-0652-5449-8035-7C210E692F4F', 'sequence': {'long': 258}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'46B424FC-0652-5449-8035-7C210E692F4F','258','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706865333352098','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'46B424FC-0652-5449-8035-7C210E692F4F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'46B424FC-0652-5449-8035-7C210E692F4F','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'46B424FC-0652-5449-8035-7C210E692F4F','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '196B5F31-8C2B-5A3E-9700-E59922850DAA', 'sequence': {'long': 259}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'196B5F31-8C2B-5A3E-9700-E59922850DAA','259','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706865333352098','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'196B5F31-8C2B-5A3E-9700-E59922850DAA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'196B5F31-8C2B-5A3E-9700-E59922850DAA','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'196B5F31-8C2B-5A3E-9700-E59922850DAA','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AAE22ED0-438B-5A80-BC7A-EA4241D90B18', 'sequence': {'long': 260}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AAE22ED0-438B-5A80-BC7A-EA4241D90B18','260','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706865333352098','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AAE22ED0-438B-5A80-BC7A-EA4241D90B18','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AAE22ED0-438B-5A80-BC7A-EA4241D90B18','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AAE22ED0-438B-5A80-BC7A-EA4241D90B18','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1E2091FC-0810-5B28-A9B0-204A79DEBC12', 'sequence': {'long': 261}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1E2091FC-0810-5B28-A9B0-204A79DEBC12','261','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706865333352098','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1E2091FC-0810-5B28-A9B0-204A79DEBC12','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1E2091FC-0810-5B28-A9B0-204A79DEBC12','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1E2091FC-0810-5B28-A9B0-204A79DEBC12','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0BA3FF14-A01E-5E31-B659-65CA34B547F0', 'sequence': {'long': 262}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0BA3FF14-A01E-5E31-B659-65CA34B547F0','262','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706865333352098','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0BA3FF14-A01E-5E31-B659-65CA34B547F0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0BA3FF14-A01E-5E31-B659-65CA34B547F0','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0BA3FF14-A01E-5E31-B659-65CA34B547F0','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '38450931-2B9C-521A-B928-D6031A15D351', 'sequence': {'long': 263}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'38450931-2B9C-521A-B928-D6031A15D351','263','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706865333352098','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'38450931-2B9C-521A-B928-D6031A15D351','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'38450931-2B9C-521A-B928-D6031A15D351','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'38450931-2B9C-521A-B928-D6031A15D351','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1429DC27-63F6-5522-AD4D-6C6699A84174', 'sequence': {'long': 264}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1429DC27-63F6-5522-AD4D-6C6699A84174','264','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706865333352098','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1429DC27-63F6-5522-AD4D-6C6699A84174','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1429DC27-63F6-5522-AD4D-6C6699A84174','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1429DC27-63F6-5522-AD4D-6C6699A84174','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E16DDB92-3DFA-5AC6-9C66-7C849B2389F0', 'sequence': {'long': 265}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E16DDB92-3DFA-5AC6-9C66-7C849B2389F0','265','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706865333352098','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E16DDB92-3DFA-5AC6-9C66-7C849B2389F0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E16DDB92-3DFA-5AC6-9C66-7C849B2389F0','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E16DDB92-3DFA-5AC6-9C66-7C849B2389F0','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C93A7E0C-3F36-5837-8176-0D29DAEEB853', 'sequence': {'long': 266}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865333352098, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C93A7E0C-3F36-5837-8176-0D29DAEEB853','266','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706865333352098','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C93A7E0C-3F36-5837-8176-0D29DAEEB853','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C93A7E0C-3F36-5837-8176-0D29DAEEB853','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C93A7E0C-3F36-5837-8176-0D29DAEEB853','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CD8D0CA2-2418-51A9-964C-3CCAD16B5D24', 'sequence': {'long': 267}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CD8D0CA2-2418-51A9-964C-3CCAD16B5D24','267','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706865343358958','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CD8D0CA2-2418-51A9-964C-3CCAD16B5D24','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CD8D0CA2-2418-51A9-964C-3CCAD16B5D24','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CD8D0CA2-2418-51A9-964C-3CCAD16B5D24','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0CFB94E7-73BB-54B8-99A7-5886A2FE4C1E', 'sequence': {'long': 268}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0CFB94E7-73BB-54B8-99A7-5886A2FE4C1E','268','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706865343358958','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0CFB94E7-73BB-54B8-99A7-5886A2FE4C1E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0CFB94E7-73BB-54B8-99A7-5886A2FE4C1E','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0CFB94E7-73BB-54B8-99A7-5886A2FE4C1E','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7165F566-4F8E-56BE-820A-76DD2E462F1C', 'sequence': {'long': 269}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7165F566-4F8E-56BE-820A-76DD2E462F1C','269','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706865343358958','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7165F566-4F8E-56BE-820A-76DD2E462F1C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7165F566-4F8E-56BE-820A-76DD2E462F1C','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7165F566-4F8E-56BE-820A-76DD2E462F1C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E7770931-C967-5B5F-8526-4BE142FB2B09', 'sequence': {'long': 270}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E7770931-C967-5B5F-8526-4BE142FB2B09','270','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706865343358958','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E7770931-C967-5B5F-8526-4BE142FB2B09','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E7770931-C967-5B5F-8526-4BE142FB2B09','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E7770931-C967-5B5F-8526-4BE142FB2B09','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F9753E17-5D08-5209-8578-4A254248AD7B', 'sequence': {'long': 271}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F9753E17-5D08-5209-8578-4A254248AD7B','271','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865343358958','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F9753E17-5D08-5209-8578-4A254248AD7B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F9753E17-5D08-5209-8578-4A254248AD7B','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F9753E17-5D08-5209-8578-4A254248AD7B','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '962AAB11-6765-529B-BB7A-ECD9A837329A', 'sequence': {'long': 272}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'962AAB11-6765-529B-BB7A-ECD9A837329A','272','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865343358958','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'962AAB11-6765-529B-BB7A-ECD9A837329A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'962AAB11-6765-529B-BB7A-ECD9A837329A','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'962AAB11-6765-529B-BB7A-ECD9A837329A','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '7A1B4973-09E5-AA50-A509-1753C0AA87A1', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'7A1B4973-09E5-AA50-A509-1753C0AA87A1','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7A1B4973-09E5-AA50-A509-1753C0AA87A1','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7A1B4973-09E5-AA50-A509-1753C0AA87A1','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '89B0EF7C-553C-5704-AC4E-6FE546150E13', 'sequence': {'long': 273}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': {'string': '/lib/libncursesw.so.8'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'89B0EF7C-553C-5704-AC4E-6FE546150E13','273','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','/lib/libncursesw.so.8','1522706865343358958','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'89B0EF7C-553C-5704-AC4E-6FE546150E13','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'89B0EF7C-553C-5704-AC4E-6FE546150E13','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'89B0EF7C-553C-5704-AC4E-6FE546150E13','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A4AEADC9-B14F-5706-97A6-C53CCAFD1F93', 'sequence': {'long': 274}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A4AEADC9-B14F-5706-97A6-C53CCAFD1F93','274','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865343358958','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A4AEADC9-B14F-5706-97A6-C53CCAFD1F93','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A4AEADC9-B14F-5706-97A6-C53CCAFD1F93','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A4AEADC9-B14F-5706-97A6-C53CCAFD1F93','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3E8CDB68-2D73-5D2C-A1F0-367AFB864392', 'sequence': {'long': 275}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3E8CDB68-2D73-5D2C-A1F0-367AFB864392','275','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706865343358958','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3E8CDB68-2D73-5D2C-A1F0-367AFB864392','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3E8CDB68-2D73-5D2C-A1F0-367AFB864392','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3E8CDB68-2D73-5D2C-A1F0-367AFB864392','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6D0A76C3-B609-5427-9FBC-CE23A13D8F10', 'sequence': {'long': 276}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6D0A76C3-B609-5427-9FBC-CE23A13D8F10','276','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865343358958','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6D0A76C3-B609-5427-9FBC-CE23A13D8F10','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6D0A76C3-B609-5427-9FBC-CE23A13D8F10','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6D0A76C3-B609-5427-9FBC-CE23A13D8F10','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ED489EE3-86AE-5F53-A97D-66729089CA97', 'sequence': {'long': 277}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'ED489EE3-86AE-5F53-A97D-66729089CA97','277','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865343358958','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ED489EE3-86AE-5F53-A97D-66729089CA97','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ED489EE3-86AE-5F53-A97D-66729089CA97','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ED489EE3-86AE-5F53-A97D-66729089CA97','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4EF8B092-E6D8-51FE-AE07-0494C11F4307', 'sequence': {'long': 278}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'4EF8B092-E6D8-51FE-AE07-0494C11F4307','278','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706865343358958','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4EF8B092-E6D8-51FE-AE07-0494C11F4307','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4EF8B092-E6D8-51FE-AE07-0494C11F4307','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4EF8B092-E6D8-51FE-AE07-0494C11F4307','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B5931622-EDA9-518B-AF5F-F43C12C530DC', 'sequence': {'long': 279}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B5931622-EDA9-518B-AF5F-F43C12C530DC','279','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865343358958','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B5931622-EDA9-518B-AF5F-F43C12C530DC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B5931622-EDA9-518B-AF5F-F43C12C530DC','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B5931622-EDA9-518B-AF5F-F43C12C530DC','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '00EC69F6-5C54-50D2-B63C-E91FF88EAAAC', 'sequence': {'long': 280}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'00EC69F6-5C54-50D2-B63C-E91FF88EAAAC','280','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865343358958','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'00EC69F6-5C54-50D2-B63C-E91FF88EAAAC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'00EC69F6-5C54-50D2-B63C-E91FF88EAAAC','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'00EC69F6-5C54-50D2-B63C-E91FF88EAAAC','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2012423B-E0D2-5842-AF04-3C9B3257B3A7', 'sequence': {'long': 281}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8601600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2012423B-E0D2-5842-AF04-3C9B3257B3A7','281','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706865343358958','aue_mmap','8601600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2012423B-E0D2-5842-AF04-3C9B3257B3A7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2012423B-E0D2-5842-AF04-3C9B3257B3A7','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2012423B-E0D2-5842-AF04-3C9B3257B3A7','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F1EA5B60-019C-5213-811C-76886DCD133F', 'sequence': {'long': 282}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8601600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F1EA5B60-019C-5213-811C-76886DCD133F','282','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706865343358958','aue_mmap','8601600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F1EA5B60-019C-5213-811C-76886DCD133F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F1EA5B60-019C-5213-811C-76886DCD133F','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F1EA5B60-019C-5213-811C-76886DCD133F','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B90EC902-B112-5E26-BB3C-BF7F2124F78D', 'sequence': {'long': 283}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B90EC902-B112-5E26-BB3C-BF7F2124F78D','283','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706865343358958','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B90EC902-B112-5E26-BB3C-BF7F2124F78D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B90EC902-B112-5E26-BB3C-BF7F2124F78D','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B90EC902-B112-5E26-BB3C-BF7F2124F78D','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '75D23E91-3FD2-59B7-82C2-4C0D784E71D0', 'sequence': {'long': 284}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11059200}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'75D23E91-3FD2-59B7-82C2-4C0D784E71D0','284','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706865343358958','aue_mmap','11059200','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'75D23E91-3FD2-59B7-82C2-4C0D784E71D0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'75D23E91-3FD2-59B7-82C2-4C0D784E71D0','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'75D23E91-3FD2-59B7-82C2-4C0D784E71D0','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C874A635-82FF-55F4-A20B-E6FD4929D8C8', 'sequence': {'long': 285}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C874A635-82FF-55F4-A20B-E6FD4929D8C8','285','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706865343358958','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','head','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C874A635-82FF-55F4-A20B-E6FD4929D8C8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C874A635-82FF-55F4-A20B-E6FD4929D8C8','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C874A635-82FF-55F4-A20B-E6FD4929D8C8','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '178062F3-0526-5FE7-9C1C-B1622627BEF6', 'sequence': {'long': 286}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'178062F3-0526-5FE7-9C1C-B1622627BEF6','286','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706865343358958','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','head','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'178062F3-0526-5FE7-9C1C-B1622627BEF6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'178062F3-0526-5FE7-9C1C-B1622627BEF6','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'178062F3-0526-5FE7-9C1C-B1622627BEF6','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ADD9502C-8B39-5809-B5C7-754007AA6130', 'sequence': {'long': 287}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11059200}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'ADD9502C-8B39-5809-B5C7-754007AA6130','287','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706865343358958','aue_mmap','11059200','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ADD9502C-8B39-5809-B5C7-754007AA6130','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ADD9502C-8B39-5809-B5C7-754007AA6130','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ADD9502C-8B39-5809-B5C7-754007AA6130','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1BECE747-5111-5F0D-BF43-8373DAF3E45A', 'sequence': {'long': 288}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1BECE747-5111-5F0D-BF43-8373DAF3E45A','288','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706865343358958','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1BECE747-5111-5F0D-BF43-8373DAF3E45A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1BECE747-5111-5F0D-BF43-8373DAF3E45A','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1BECE747-5111-5F0D-BF43-8373DAF3E45A','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9ECA666D-C203-5FEA-8399-3F83C0C25CEE', 'sequence': {'long': 289}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9ECA666D-C203-5FEA-8399-3F83C0C25CEE','289','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706865343358958','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9ECA666D-C203-5FEA-8399-3F83C0C25CEE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9ECA666D-C203-5FEA-8399-3F83C0C25CEE','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9ECA666D-C203-5FEA-8399-3F83C0C25CEE','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'D57B2A07-B373-B75A-B3B3-93790AB76535', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'D57B2A07-B373-B75A-B3B3-93790AB76535','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D57B2A07-B373-B75A-B3B3-93790AB76535','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D57B2A07-B373-B75A-B3B3-93790AB76535','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '551B2ECA-AB7F-579C-8B37-D800EC2BE28E', 'sequence': {'long': 290}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': {'string': '/lib/libm.so.5'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'551B2ECA-AB7F-579C-8B37-D800EC2BE28E','290','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','/lib/libm.so.5','1522706865343358958','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'551B2ECA-AB7F-579C-8B37-D800EC2BE28E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'551B2ECA-AB7F-579C-8B37-D800EC2BE28E','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'551B2ECA-AB7F-579C-8B37-D800EC2BE28E','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '392DE5F6-CE2F-5025-BAEF-6F7200DD4B3B', 'sequence': {'long': 291}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'392DE5F6-CE2F-5025-BAEF-6F7200DD4B3B','291','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706865343358958','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'392DE5F6-CE2F-5025-BAEF-6F7200DD4B3B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'392DE5F6-CE2F-5025-BAEF-6F7200DD4B3B','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'392DE5F6-CE2F-5025-BAEF-6F7200DD4B3B','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5630F2D7-FA68-597B-8052-21032C69B32A', 'sequence': {'long': 292}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5630F2D7-FA68-597B-8052-21032C69B32A','292','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706865343358958','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5630F2D7-FA68-597B-8052-21032C69B32A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5630F2D7-FA68-597B-8052-21032C69B32A','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5630F2D7-FA68-597B-8052-21032C69B32A','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EC5B86AC-03F0-5D71-A660-301E1414E6CC', 'sequence': {'long': 293}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11083776}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EC5B86AC-03F0-5D71-A660-301E1414E6CC','293','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706865343358958','aue_mmap','11083776','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EC5B86AC-03F0-5D71-A660-301E1414E6CC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EC5B86AC-03F0-5D71-A660-301E1414E6CC','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EC5B86AC-03F0-5D71-A660-301E1414E6CC','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CB115322-4C78-5745-B5EA-34113F9E8D4E', 'sequence': {'long': 294}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11083776}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'CB115322-4C78-5745-B5EA-34113F9E8D4E','294','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706865343358958','aue_mmap','11083776','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CB115322-4C78-5745-B5EA-34113F9E8D4E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CB115322-4C78-5745-B5EA-34113F9E8D4E','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CB115322-4C78-5745-B5EA-34113F9E8D4E','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2C5ECC24-1B36-5025-903A-978DDB1E9240', 'sequence': {'long': 295}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 13361152}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2C5ECC24-1B36-5025-903A-978DDB1E9240','295','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706865343358958','aue_mmap','13361152','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2C5ECC24-1B36-5025-903A-978DDB1E9240','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2C5ECC24-1B36-5025-903A-978DDB1E9240','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2C5ECC24-1B36-5025-903A-978DDB1E9240','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C0FB20A1-1272-5FC6-89A2-ECC1FDF5EF91', 'sequence': {'long': 296}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 13361152}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C0FB20A1-1272-5FC6-89A2-ECC1FDF5EF91','296','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706865343358958','aue_mmap','13361152','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C0FB20A1-1272-5FC6-89A2-ECC1FDF5EF91','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C0FB20A1-1272-5FC6-89A2-ECC1FDF5EF91','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C0FB20A1-1272-5FC6-89A2-ECC1FDF5EF91','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '488D7176-AA78-568F-A215-F65C66513B4B', 'sequence': {'long': 297}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865343358958, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'488D7176-AA78-568F-A215-F65C66513B4B','297','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706865343358958','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'488D7176-AA78-568F-A215-F65C66513B4B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'488D7176-AA78-568F-A215-F65C66513B4B','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'488D7176-AA78-568F-A215-F65C66513B4B','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8DD005D9-2B13-5A36-B34F-6DDBA430E053', 'sequence': {'long': 298}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': {'string': '/lib/libkvm.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8DD005D9-2B13-5A36-B34F-6DDBA430E053','298','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','/lib/libkvm.so.7','1522706865353352328','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8DD005D9-2B13-5A36-B34F-6DDBA430E053','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8DD005D9-2B13-5A36-B34F-6DDBA430E053','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8DD005D9-2B13-5A36-B34F-6DDBA430E053','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '64FD0572-C020-5187-8DDC-E60BF568E1D0', 'sequence': {'long': 299}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'64FD0572-C020-5187-8DDC-E60BF568E1D0','299','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706865353352328','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'64FD0572-C020-5187-8DDC-E60BF568E1D0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'64FD0572-C020-5187-8DDC-E60BF568E1D0','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'64FD0572-C020-5187-8DDC-E60BF568E1D0','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C1A20807-3A2D-56FF-B7AB-B2C948BF667F', 'sequence': {'long': 300}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C1A20807-3A2D-56FF-B7AB-B2C948BF667F','300','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706865353352328','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C1A20807-3A2D-56FF-B7AB-B2C948BF667F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C1A20807-3A2D-56FF-B7AB-B2C948BF667F','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C1A20807-3A2D-56FF-B7AB-B2C948BF667F','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CE4D02E8-F9C3-5D24-86D5-EE7F1D490387', 'sequence': {'long': 301}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 13365248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'CE4D02E8-F9C3-5D24-86D5-EE7F1D490387','301','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706865353352328','aue_mmap','13365248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CE4D02E8-F9C3-5D24-86D5-EE7F1D490387','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CE4D02E8-F9C3-5D24-86D5-EE7F1D490387','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CE4D02E8-F9C3-5D24-86D5-EE7F1D490387','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '62F4D3C0-A735-5980-96CA-34E983201C33', 'sequence': {'long': 302}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 13365248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'62F4D3C0-A735-5980-96CA-34E983201C33','302','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706865353352328','aue_mmap','13365248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'62F4D3C0-A735-5980-96CA-34E983201C33','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'62F4D3C0-A735-5980-96CA-34E983201C33','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'62F4D3C0-A735-5980-96CA-34E983201C33','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3D02880F-E029-55A1-BB95-2708270B6D30', 'sequence': {'long': 303}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15523840}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3D02880F-E029-55A1-BB95-2708270B6D30','303','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706865353352328','aue_mmap','15523840','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3D02880F-E029-55A1-BB95-2708270B6D30','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3D02880F-E029-55A1-BB95-2708270B6D30','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3D02880F-E029-55A1-BB95-2708270B6D30','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '32B6FB42-5E6E-592C-9542-C2C12D7C0BFB', 'sequence': {'long': 304}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15523840}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'32B6FB42-5E6E-592C-9542-C2C12D7C0BFB','304','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706865353352328','aue_mmap','15523840','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'32B6FB42-5E6E-592C-9542-C2C12D7C0BFB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'32B6FB42-5E6E-592C-9542-C2C12D7C0BFB','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'32B6FB42-5E6E-592C-9542-C2C12D7C0BFB','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '037D338A-E3D4-55BB-9F95-2FFAE299D430', 'sequence': {'long': 305}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'037D338A-E3D4-55BB-9F95-2FFAE299D430','305','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706865353352328','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'037D338A-E3D4-55BB-9F95-2FFAE299D430','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'037D338A-E3D4-55BB-9F95-2FFAE299D430','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'037D338A-E3D4-55BB-9F95-2FFAE299D430','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'D3F11983-FFD7-8A58-97FF-D38E388A1453', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'D3F11983-FFD7-8A58-97FF-D38E388A1453','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D3F11983-FFD7-8A58-97FF-D38E388A1453','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D3F11983-FFD7-8A58-97FF-D38E388A1453','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '64119B90-2AAA-5FBC-ABD6-351BE47CF26E', 'sequence': {'long': 306}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': {'string': '/lib/libjail.so.1'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'64119B90-2AAA-5FBC-ABD6-351BE47CF26E','306','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','/lib/libjail.so.1','1522706865353352328','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'64119B90-2AAA-5FBC-ABD6-351BE47CF26E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'64119B90-2AAA-5FBC-ABD6-351BE47CF26E','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'64119B90-2AAA-5FBC-ABD6-351BE47CF26E','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A7A0DED3-7A87-5AD8-8F1B-2DCAFBB1FF94', 'sequence': {'long': 307}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A7A0DED3-7A87-5AD8-8F1B-2DCAFBB1FF94','307','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706865353352328','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A7A0DED3-7A87-5AD8-8F1B-2DCAFBB1FF94','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A7A0DED3-7A87-5AD8-8F1B-2DCAFBB1FF94','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A7A0DED3-7A87-5AD8-8F1B-2DCAFBB1FF94','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '659A10B0-5C22-5B17-B162-D099DA58A3F8', 'sequence': {'long': 308}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'659A10B0-5C22-5B17-B162-D099DA58A3F8','308','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706865353352328','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'659A10B0-5C22-5B17-B162-D099DA58A3F8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'659A10B0-5C22-5B17-B162-D099DA58A3F8','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'659A10B0-5C22-5B17-B162-D099DA58A3F8','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9954D4E3-EFF3-529B-8FFF-352184B91684', 'sequence': {'long': 309}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15527936}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9954D4E3-EFF3-529B-8FFF-352184B91684','309','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706865353352328','aue_mmap','15527936','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9954D4E3-EFF3-529B-8FFF-352184B91684','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9954D4E3-EFF3-529B-8FFF-352184B91684','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9954D4E3-EFF3-529B-8FFF-352184B91684','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C8951581-3F03-59E0-AC57-68E4C14FB4F0', 'sequence': {'long': 310}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15527936}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C8951581-3F03-59E0-AC57-68E4C14FB4F0','310','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706865353352328','aue_mmap','15527936','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C8951581-3F03-59E0-AC57-68E4C14FB4F0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C8951581-3F03-59E0-AC57-68E4C14FB4F0','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C8951581-3F03-59E0-AC57-68E4C14FB4F0','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9A0E2AD1-2705-571E-8A3A-6831CE2A7466', 'sequence': {'long': 311}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17641472}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9A0E2AD1-2705-571E-8A3A-6831CE2A7466','311','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706865353352328','aue_mmap','17641472','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9A0E2AD1-2705-571E-8A3A-6831CE2A7466','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9A0E2AD1-2705-571E-8A3A-6831CE2A7466','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9A0E2AD1-2705-571E-8A3A-6831CE2A7466','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '68B56C80-9C7D-5B70-AEB0-CC1D27890C21', 'sequence': {'long': 312}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17641472}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'68B56C80-9C7D-5B70-AEB0-CC1D27890C21','312','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706865353352328','aue_mmap','17641472','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'68B56C80-9C7D-5B70-AEB0-CC1D27890C21','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'68B56C80-9C7D-5B70-AEB0-CC1D27890C21','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'68B56C80-9C7D-5B70-AEB0-CC1D27890C21','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D60E6CC7-CF76-5536-AD7A-F51098A69CF7', 'sequence': {'long': 313}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D60E6CC7-CF76-5536-AD7A-F51098A69CF7','313','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706865353352328','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D60E6CC7-CF76-5536-AD7A-F51098A69CF7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D60E6CC7-CF76-5536-AD7A-F51098A69CF7','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D60E6CC7-CF76-5536-AD7A-F51098A69CF7','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4F399630-1271-5CDE-9147-12970486D6DB', 'sequence': {'long': 314}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4F399630-1271-5CDE-9147-12970486D6DB','314','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706865353352328','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4F399630-1271-5CDE-9147-12970486D6DB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4F399630-1271-5CDE-9147-12970486D6DB','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4F399630-1271-5CDE-9147-12970486D6DB','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E517BB2D-828B-5C2B-8611-4780D0597EB8', 'sequence': {'long': 315}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865353352328, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E517BB2D-828B-5C2B-8611-4780D0597EB8','315','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865353352328','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E517BB2D-828B-5C2B-8611-4780D0597EB8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E517BB2D-828B-5C2B-8611-4780D0597EB8','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E517BB2D-828B-5C2B-8611-4780D0597EB8','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B2064B0E-FC13-52FE-91F5-9EB50F361898', 'sequence': {'long': 316}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B2064B0E-FC13-52FE-91F5-9EB50F361898','316','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865363360639','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B2064B0E-FC13-52FE-91F5-9EB50F361898','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B2064B0E-FC13-52FE-91F5-9EB50F361898','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B2064B0E-FC13-52FE-91F5-9EB50F361898','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F539ED93-0D50-51CF-8C05-3BE0F41AF941', 'sequence': {'long': 317}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17645568}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F539ED93-0D50-51CF-8C05-3BE0F41AF941','317','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865363360639','aue_mmap','17645568','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F539ED93-0D50-51CF-8C05-3BE0F41AF941','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F539ED93-0D50-51CF-8C05-3BE0F41AF941','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F539ED93-0D50-51CF-8C05-3BE0F41AF941','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '62BF75D6-1A3D-567D-95F7-549411DC7BA1', 'sequence': {'long': 318}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17645568}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'62BF75D6-1A3D-567D-95F7-549411DC7BA1','318','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865363360639','aue_mmap','17645568','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'62BF75D6-1A3D-567D-95F7-549411DC7BA1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'62BF75D6-1A3D-567D-95F7-549411DC7BA1','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'62BF75D6-1A3D-567D-95F7-549411DC7BA1','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E66269E4-35D0-5EBA-B5EB-17581261D37D', 'sequence': {'long': 319}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 21532672}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E66269E4-35D0-5EBA-B5EB-17581261D37D','319','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865363360639','aue_mmap','21532672','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E66269E4-35D0-5EBA-B5EB-17581261D37D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E66269E4-35D0-5EBA-B5EB-17581261D37D','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E66269E4-35D0-5EBA-B5EB-17581261D37D','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3B7253BE-7CAB-5229-B21A-1DC2C8527A59', 'sequence': {'long': 320}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 21532672}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3B7253BE-7CAB-5229-B21A-1DC2C8527A59','320','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865363360639','aue_mmap','21532672','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3B7253BE-7CAB-5229-B21A-1DC2C8527A59','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3B7253BE-7CAB-5229-B21A-1DC2C8527A59','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3B7253BE-7CAB-5229-B21A-1DC2C8527A59','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '92570164-0E21-5653-A3D1-CF534D464E04', 'sequence': {'long': 321}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'92570164-0E21-5653-A3D1-CF534D464E04','321','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865363360639','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'92570164-0E21-5653-A3D1-CF534D464E04','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'92570164-0E21-5653-A3D1-CF534D464E04','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'92570164-0E21-5653-A3D1-CF534D464E04','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7DE152E4-A2E6-5588-B3C3-AB20DC23B73A', 'sequence': {'long': 322}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': {'string': '/lib/libelf.so.2'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7DE152E4-A2E6-5588-B3C3-AB20DC23B73A','322','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','/lib/libelf.so.2','1522706865363360639','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7DE152E4-A2E6-5588-B3C3-AB20DC23B73A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7DE152E4-A2E6-5588-B3C3-AB20DC23B73A','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7DE152E4-A2E6-5588-B3C3-AB20DC23B73A','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CCCF7C6F-B813-554E-BCAF-FB4AF263BC44', 'sequence': {'long': 323}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'CCCF7C6F-B813-554E-BCAF-FB4AF263BC44','323','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706865363360639','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CCCF7C6F-B813-554E-BCAF-FB4AF263BC44','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CCCF7C6F-B813-554E-BCAF-FB4AF263BC44','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CCCF7C6F-B813-554E-BCAF-FB4AF263BC44','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E37B63F4-B0BD-5B96-9C21-00BDEBA78464', 'sequence': {'long': 324}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E37B63F4-B0BD-5B96-9C21-00BDEBA78464','324','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706865363360639','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E37B63F4-B0BD-5B96-9C21-00BDEBA78464','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E37B63F4-B0BD-5B96-9C21-00BDEBA78464','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E37B63F4-B0BD-5B96-9C21-00BDEBA78464','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '58F80D2C-ACF5-5651-BCEE-3D2335AD5384', 'sequence': {'long': 325}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23846912}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'58F80D2C-ACF5-5651-BCEE-3D2335AD5384','325','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706865363360639','aue_mmap','23846912','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'58F80D2C-ACF5-5651-BCEE-3D2335AD5384','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'58F80D2C-ACF5-5651-BCEE-3D2335AD5384','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'58F80D2C-ACF5-5651-BCEE-3D2335AD5384','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2784C8BD-6822-5DC3-950C-724BA20BA357', 'sequence': {'long': 326}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23846912}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2784C8BD-6822-5DC3-950C-724BA20BA357','326','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706865363360639','aue_mmap','23846912','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2784C8BD-6822-5DC3-950C-724BA20BA357','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2784C8BD-6822-5DC3-950C-724BA20BA357','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2784C8BD-6822-5DC3-950C-724BA20BA357','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6AA2D730-68CC-59ED-A856-3C197ADA408D', 'sequence': {'long': 327}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 26038272}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6AA2D730-68CC-59ED-A856-3C197ADA408D','327','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706865363360639','aue_mmap','26038272','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6AA2D730-68CC-59ED-A856-3C197ADA408D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6AA2D730-68CC-59ED-A856-3C197ADA408D','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6AA2D730-68CC-59ED-A856-3C197ADA408D','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '88D5603F-2028-57A2-8292-57A78956EE18', 'sequence': {'long': 328}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 26038272}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'88D5603F-2028-57A2-8292-57A78956EE18','328','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706865363360639','aue_mmap','26038272','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'88D5603F-2028-57A2-8292-57A78956EE18','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'88D5603F-2028-57A2-8292-57A78956EE18','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'88D5603F-2028-57A2-8292-57A78956EE18','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C34D4CA1-E6A7-5B4D-8090-11C1EB615B1E', 'sequence': {'long': 329}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C34D4CA1-E6A7-5B4D-8090-11C1EB615B1E','329','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706865363360639','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C34D4CA1-E6A7-5B4D-8090-11C1EB615B1E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C34D4CA1-E6A7-5B4D-8090-11C1EB615B1E','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C34D4CA1-E6A7-5B4D-8090-11C1EB615B1E','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D3DB052-F546-582D-BBC3-178399156C60', 'sequence': {'long': 330}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D3DB052-F546-582D-BBC3-178399156C60','330','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706865363360639','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D3DB052-F546-582D-BBC3-178399156C60','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D3DB052-F546-582D-BBC3-178399156C60','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7D3DB052-F546-582D-BBC3-178399156C60','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '18BCA5E3-52BC-57C6-9DA8-3E9CB0089638', 'sequence': {'long': 331}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'18BCA5E3-52BC-57C6-9DA8-3E9CB0089638','331','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706865363360639','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'18BCA5E3-52BC-57C6-9DA8-3E9CB0089638','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'18BCA5E3-52BC-57C6-9DA8-3E9CB0089638','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'18BCA5E3-52BC-57C6-9DA8-3E9CB0089638','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5E21E3EA-4508-5375-9BCB-46D7871DD248', 'sequence': {'long': 332}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5E21E3EA-4508-5375-9BCB-46D7871DD248','332','EVENT_MMAP','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706865363360639','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5E21E3EA-4508-5375-9BCB-46D7871DD248','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5E21E3EA-4508-5375-9BCB-46D7871DD248','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5E21E3EA-4508-5375-9BCB-46D7871DD248','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F9C849D9-AE76-5F91-9316-42BCF20C45DE', 'sequence': {'long': 333}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F9C849D9-AE76-5F91-9316-42BCF20C45DE','333','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706865363360639','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F9C849D9-AE76-5F91-9316-42BCF20C45DE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F9C849D9-AE76-5F91-9316-42BCF20C45DE','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F9C849D9-AE76-5F91-9316-42BCF20C45DE','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'BCDBE64D-1703-005A-8317-44DD6A00589D', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'BCDBE64D-1703-005A-8317-44DD6A00589D','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BCDBE64D-1703-005A-8317-44DD6A00589D','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BCDBE64D-1703-005A-8317-44DD6A00589D','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1189A712-0B81-51E6-B9B4-3C78F87BFBD0', 'sequence': {'long': 334}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1189A712-0B81-51E6-B9B4-3C78F87BFBD0','334','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706865363360639','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1189A712-0B81-51E6-B9B4-3C78F87BFBD0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1189A712-0B81-51E6-B9B4-3C78F87BFBD0','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1189A712-0B81-51E6-B9B4-3C78F87BFBD0','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9F4FF969-DFA9-59BE-BC42-0581EE1FD0BB', 'sequence': {'long': 335}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 272}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/nsswitch.conf', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9F4FF969-DFA9-59BE-BC42-0581EE1FD0BB','335','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706865363360639','aue_read','272','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/nsswitch.conf','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9F4FF969-DFA9-59BE-BC42-0581EE1FD0BB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9F4FF969-DFA9-59BE-BC42-0581EE1FD0BB','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9F4FF969-DFA9-59BE-BC42-0581EE1FD0BB','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CA15E744-B0FF-5F3A-AD30-5C90200240E8', 'sequence': {'long': 336}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865363360639, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/nsswitch.conf', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CA15E744-B0FF-5F3A-AD30-5C90200240E8','336','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706865363360639','aue_read','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/nsswitch.conf','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CA15E744-B0FF-5F3A-AD30-5C90200240E8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CA15E744-B0FF-5F3A-AD30-5C90200240E8','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CA15E744-B0FF-5F3A-AD30-5C90200240E8','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4BE902A5-C66A-53F8-8B6E-F6DD3108A386', 'sequence': {'long': 337}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4BE902A5-C66A-53F8-8B6E-F6DD3108A386','337','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','1522706865373352739','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4BE902A5-C66A-53F8-8B6E-F6DD3108A386','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4BE902A5-C66A-53F8-8B6E-F6DD3108A386','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4BE902A5-C66A-53F8-8B6E-F6DD3108A386','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FDBD9576-4275-5A22-B3EF-88718DA36BE8', 'sequence': {'long': 338}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FDBD9576-4275-5A22-B3EF-88718DA36BE8','338','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865373352739','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FDBD9576-4275-5A22-B3EF-88718DA36BE8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FDBD9576-4275-5A22-B3EF-88718DA36BE8','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FDBD9576-4275-5A22-B3EF-88718DA36BE8','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7B0CBBB9-327C-5DC4-84E3-F824F92D5DDC', 'sequence': {'long': 339}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7B0CBBB9-327C-5DC4-84E3-F824F92D5DDC','339','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865373352739','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7B0CBBB9-327C-5DC4-84E3-F824F92D5DDC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7B0CBBB9-327C-5DC4-84E3-F824F92D5DDC','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7B0CBBB9-327C-5DC4-84E3-F824F92D5DDC','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4F31EC04-FAF5-5D23-88AC-2F2D6871CA7B', 'sequence': {'long': 340}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4F31EC04-FAF5-5D23-88AC-2F2D6871CA7B','340','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865373352739','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4F31EC04-FAF5-5D23-88AC-2F2D6871CA7B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4F31EC04-FAF5-5D23-88AC-2F2D6871CA7B','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4F31EC04-FAF5-5D23-88AC-2F2D6871CA7B','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5ED681EA-7819-55E7-86E4-792866FF6322', 'sequence': {'long': 341}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5ED681EA-7819-55E7-86E4-792866FF6322','341','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865373352739','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5ED681EA-7819-55E7-86E4-792866FF6322','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5ED681EA-7819-55E7-86E4-792866FF6322','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5ED681EA-7819-55E7-86E4-792866FF6322','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1E0A8CE5-5767-5856-AC14-C9350BA09C02', 'sequence': {'long': 342}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1E0A8CE5-5767-5856-AC14-C9350BA09C02','342','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865373352739','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1E0A8CE5-5767-5856-AC14-C9350BA09C02','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1E0A8CE5-5767-5856-AC14-C9350BA09C02','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1E0A8CE5-5767-5856-AC14-C9350BA09C02','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C57F8A96-B41B-5AF9-B43F-574733982EA0', 'sequence': {'long': 343}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C57F8A96-B41B-5AF9-B43F-574733982EA0','343','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865373352739','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C57F8A96-B41B-5AF9-B43F-574733982EA0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C57F8A96-B41B-5AF9-B43F-574733982EA0','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C57F8A96-B41B-5AF9-B43F-574733982EA0','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4FDF3155-928F-5BBE-ACB9-7A307C890D0C', 'sequence': {'long': 344}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4FDF3155-928F-5BBE-ACB9-7A307C890D0C','344','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865373352739','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4FDF3155-928F-5BBE-ACB9-7A307C890D0C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4FDF3155-928F-5BBE-ACB9-7A307C890D0C','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4FDF3155-928F-5BBE-ACB9-7A307C890D0C','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '678281C8-42AD-5BA6-8367-1EA0A0E96B99', 'sequence': {'long': 345}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'678281C8-42AD-5BA6-8367-1EA0A0E96B99','345','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865373352739','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'678281C8-42AD-5BA6-8367-1EA0A0E96B99','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'678281C8-42AD-5BA6-8367-1EA0A0E96B99','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'678281C8-42AD-5BA6-8367-1EA0A0E96B99','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '97BC26B6-A091-5906-9DE8-5605C2F7CFC6', 'sequence': {'long': 346}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'97BC26B6-A091-5906-9DE8-5605C2F7CFC6','346','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865373352739','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'97BC26B6-A091-5906-9DE8-5605C2F7CFC6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'97BC26B6-A091-5906-9DE8-5605C2F7CFC6','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'97BC26B6-A091-5906-9DE8-5605C2F7CFC6','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E9F8C6E0-086B-520B-97C0-7D06CD52665D', 'sequence': {'long': 347}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E9F8C6E0-086B-520B-97C0-7D06CD52665D','347','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865373352739','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E9F8C6E0-086B-520B-97C0-7D06CD52665D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E9F8C6E0-086B-520B-97C0-7D06CD52665D','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E9F8C6E0-086B-520B-97C0-7D06CD52665D','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '1633500B-D34B-8058-8BD3-ABB7D880915E', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'1633500B-D34B-8058-8BD3-ABB7D880915E','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1633500B-D34B-8058-8BD3-ABB7D880915E','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1633500B-D34B-8058-8BD3-ABB7D880915E','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2F482113-038A-5B95-A178-60D9927FDB02', 'sequence': {'long': 348}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '1633500B-D34B-8058-8BD3-ABB7D880915E'}, 'predicateObjectPath': {'string': '/dev/null'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '4', 'return_value': '4', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2F482113-038A-5B95-A178-60D9927FDB02','348','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','1633500B-D34B-8058-8BD3-ABB7D880915E','/dev/null','1522706865373352739','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','4','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2F482113-038A-5B95-A178-60D9927FDB02','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2F482113-038A-5B95-A178-60D9927FDB02','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2F482113-038A-5B95-A178-60D9927FDB02','1633500B-D34B-8058-8BD3-ABB7D880915E','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EEA0EB2B-B4AF-5EE6-8990-6DD7EDAEC96E', 'sequence': {'long': 349}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '1633500B-D34B-8058-8BD3-ABB7D880915E'}, 'predicateObjectPath': {'string': '/dev/null'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '5', 'return_value': '5', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EEA0EB2B-B4AF-5EE6-8990-6DD7EDAEC96E','349','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','1633500B-D34B-8058-8BD3-ABB7D880915E','/dev/null','1522706865373352739','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','5','5','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EEA0EB2B-B4AF-5EE6-8990-6DD7EDAEC96E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EEA0EB2B-B4AF-5EE6-8990-6DD7EDAEC96E','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EEA0EB2B-B4AF-5EE6-8990-6DD7EDAEC96E','1633500B-D34B-8058-8BD3-ABB7D880915E','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'D5D2F4F4-4EC5-6456-854E-5E2A46640650','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D5D2F4F4-4EC5-6456-854E-5E2A46640650','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D5D2F4F4-4EC5-6456-854E-5E2A46640650','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8B3E4D8F-7B50-5FDF-A328-033A89DF3D26', 'sequence': {'long': 350}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '6', 'return_value': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8B3E4D8F-7B50-5FDF-A328-033A89DF3D26','350','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706865373352739','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','6','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8B3E4D8F-7B50-5FDF-A328-033A89DF3D26','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8B3E4D8F-7B50-5FDF-A328-033A89DF3D26','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8B3E4D8F-7B50-5FDF-A328-033A89DF3D26','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '77C6D09D-5EB7-5904-A23E-F332EFBFD45F', 'sequence': {'long': 351}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'77C6D09D-5EB7-5904-A23E-F332EFBFD45F','351','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706865373352739','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'77C6D09D-5EB7-5904-A23E-F332EFBFD45F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'77C6D09D-5EB7-5904-A23E-F332EFBFD45F','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'77C6D09D-5EB7-5904-A23E-F332EFBFD45F','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DAF16A68-14BB-56D8-B28B-B95B4C6C250E', 'sequence': {'long': 352}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DAF16A68-14BB-56D8-B28B-B95B4C6C250E','352','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706865373352739','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DAF16A68-14BB-56D8-B28B-B95B4C6C250E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DAF16A68-14BB-56D8-B28B-B95B4C6C250E','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DAF16A68-14BB-56D8-B28B-B95B4C6C250E','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '24CAD862-F1EB-5ABB-B886-7B3C3489B03A', 'sequence': {'long': 353}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'24CAD862-F1EB-5ABB-B886-7B3C3489B03A','353','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706865373352739','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'24CAD862-F1EB-5ABB-B886-7B3C3489B03A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'24CAD862-F1EB-5ABB-B886-7B3C3489B03A','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'24CAD862-F1EB-5ABB-B886-7B3C3489B03A','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2E286798-071C-5614-9ADC-87865F17C059', 'sequence': {'long': 354}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2E286798-071C-5614-9ADC-87865F17C059','354','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','1522706865373352739','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2E286798-071C-5614-9ADC-87865F17C059','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2E286798-071C-5614-9ADC-87865F17C059','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2E286798-071C-5614-9ADC-87865F17C059','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7EA74F48-9D44-5A1C-99A3-1A2E94C601B8', 'sequence': {'long': 355}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/UTC'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865373352739, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '6', 'return_value': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7EA74F48-9D44-5A1C-99A3-1A2E94C601B8','355','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','/usr/share/zoneinfo/UTC','1522706865373352739','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','6','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7EA74F48-9D44-5A1C-99A3-1A2E94C601B8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7EA74F48-9D44-5A1C-99A3-1A2E94C601B8','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7EA74F48-9D44-5A1C-99A3-1A2E94C601B8','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9F371392-9E9C-5C38-A5B0-F8A01CE9D407', 'sequence': {'long': 356}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/UTC'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 118}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/zoneinfo/UTC', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9F371392-9E9C-5C38-A5B0-F8A01CE9D407','356','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','/usr/share/zoneinfo/UTC','1522706865383352629','aue_read','118','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/zoneinfo/UTC','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9F371392-9E9C-5C38-A5B0-F8A01CE9D407','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9F371392-9E9C-5C38-A5B0-F8A01CE9D407','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9F371392-9E9C-5C38-A5B0-F8A01CE9D407','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D382FE86-38B1-59D8-8B86-687B3E6870BC', 'sequence': {'long': 357}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D382FE86-38B1-59D8-8B86-687B3E6870BC','357','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','1522706865383352629','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D382FE86-38B1-59D8-8B86-687B3E6870BC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D382FE86-38B1-59D8-8B86-687B3E6870BC','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D382FE86-38B1-59D8-8B86-687B3E6870BC','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '104A8C35-2200-3156-8022-4129E631EA52', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'104A8C35-2200-3156-8022-4129E631EA52','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'104A8C35-2200-3156-8022-4129E631EA52','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'104A8C35-2200-3156-8022-4129E631EA52','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '38825FAC-6D27-5F08-9BEB-F7AD2C7C7A05', 'sequence': {'long': 358}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/posixrules'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '2C00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '6', 'return_value': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'38825FAC-6D27-5F08-9BEB-F7AD2C7C7A05','358','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','/usr/share/zoneinfo/posixrules','1522706865383352629','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','2C00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','6','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'38825FAC-6D27-5F08-9BEB-F7AD2C7C7A05','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'38825FAC-6D27-5F08-9BEB-F7AD2C7C7A05','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'38825FAC-6D27-5F08-9BEB-F7AD2C7C7A05','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9942C0DA-DB74-56DF-8484-F247246CF64F', 'sequence': {'long': 359}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/posixrules'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 3519}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/zoneinfo/posixrules', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9942C0DA-DB74-56DF-8484-F247246CF64F','359','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','/usr/share/zoneinfo/posixrules','1522706865383352629','aue_read','3519','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/zoneinfo/posixrules','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9942C0DA-DB74-56DF-8484-F247246CF64F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9942C0DA-DB74-56DF-8484-F247246CF64F','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9942C0DA-DB74-56DF-8484-F247246CF64F','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '189729A7-72E6-58A3-8E6B-51EA25C102C7', 'sequence': {'long': 360}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'189729A7-72E6-58A3-8E6B-51EA25C102C7','360','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','1522706865383352629','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'189729A7-72E6-58A3-8E6B-51EA25C102C7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'189729A7-72E6-58A3-8E6B-51EA25C102C7','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'189729A7-72E6-58A3-8E6B-51EA25C102C7','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1628AE5D-FE0C-514A-994F-117BF9F3E5DC', 'sequence': {'long': 361}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1628AE5D-FE0C-514A-994F-117BF9F3E5DC','361','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','1522706865383352629','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1628AE5D-FE0C-514A-994F-117BF9F3E5DC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1628AE5D-FE0C-514A-994F-117BF9F3E5DC','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1628AE5D-FE0C-514A-994F-117BF9F3E5DC','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8C2A1C57-174A-5959-B2E1-20901407CF7B', 'sequence': {'long': 362}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8C2A1C57-174A-5959-B2E1-20901407CF7B','362','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8C2A1C57-174A-5959-B2E1-20901407CF7B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8C2A1C57-174A-5959-B2E1-20901407CF7B','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8C2A1C57-174A-5959-B2E1-20901407CF7B','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6AD08ACF-873A-5F1B-9E87-F4B6E0208DAB', 'sequence': {'long': 363}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6AD08ACF-873A-5F1B-9E87-F4B6E0208DAB','363','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6AD08ACF-873A-5F1B-9E87-F4B6E0208DAB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6AD08ACF-873A-5F1B-9E87-F4B6E0208DAB','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6AD08ACF-873A-5F1B-9E87-F4B6E0208DAB','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1CDCB46F-DF36-5108-BD30-65D67EFA4268', 'sequence': {'long': 364}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1CDCB46F-DF36-5108-BD30-65D67EFA4268','364','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1CDCB46F-DF36-5108-BD30-65D67EFA4268','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1CDCB46F-DF36-5108-BD30-65D67EFA4268','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1CDCB46F-DF36-5108-BD30-65D67EFA4268','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5CA2D28F-5F33-58F3-8227-25085E93DF5A', 'sequence': {'long': 365}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5CA2D28F-5F33-58F3-8227-25085E93DF5A','365','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5CA2D28F-5F33-58F3-8227-25085E93DF5A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5CA2D28F-5F33-58F3-8227-25085E93DF5A','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5CA2D28F-5F33-58F3-8227-25085E93DF5A','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E557D4F6-CD58-5E3B-A468-CEBA10C4D505', 'sequence': {'long': 366}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E557D4F6-CD58-5E3B-A468-CEBA10C4D505','366','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E557D4F6-CD58-5E3B-A468-CEBA10C4D505','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E557D4F6-CD58-5E3B-A468-CEBA10C4D505','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E557D4F6-CD58-5E3B-A468-CEBA10C4D505','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BCD9561F-98A4-5BB2-822B-2CDBBFCB7543', 'sequence': {'long': 367}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BCD9561F-98A4-5BB2-822B-2CDBBFCB7543','367','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BCD9561F-98A4-5BB2-822B-2CDBBFCB7543','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BCD9561F-98A4-5BB2-822B-2CDBBFCB7543','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BCD9561F-98A4-5BB2-822B-2CDBBFCB7543','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2C20FF6C-D0DE-54E8-9922-A3AC69921B5A', 'sequence': {'long': 368}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2C20FF6C-D0DE-54E8-9922-A3AC69921B5A','368','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2C20FF6C-D0DE-54E8-9922-A3AC69921B5A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2C20FF6C-D0DE-54E8-9922-A3AC69921B5A','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2C20FF6C-D0DE-54E8-9922-A3AC69921B5A','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3214CAC1-31DC-5F5B-BC08-9B7E86D5EE37', 'sequence': {'long': 369}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3214CAC1-31DC-5F5B-BC08-9B7E86D5EE37','369','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3214CAC1-31DC-5F5B-BC08-9B7E86D5EE37','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3214CAC1-31DC-5F5B-BC08-9B7E86D5EE37','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3214CAC1-31DC-5F5B-BC08-9B7E86D5EE37','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1F23C3F9-943B-5472-BD9E-F8AFC9F33065', 'sequence': {'long': 370}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1F23C3F9-943B-5472-BD9E-F8AFC9F33065','370','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1F23C3F9-943B-5472-BD9E-F8AFC9F33065','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1F23C3F9-943B-5472-BD9E-F8AFC9F33065','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1F23C3F9-943B-5472-BD9E-F8AFC9F33065','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '56AA7AB3-71E6-546B-A30A-5F139474DD4B', 'sequence': {'long': 371}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'56AA7AB3-71E6-546B-A30A-5F139474DD4B','371','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'56AA7AB3-71E6-546B-A30A-5F139474DD4B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'56AA7AB3-71E6-546B-A30A-5F139474DD4B','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'56AA7AB3-71E6-546B-A30A-5F139474DD4B','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C4E7C1E1-6B5F-5F18-BF2B-C6EE10BE5D4E', 'sequence': {'long': 372}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C4E7C1E1-6B5F-5F18-BF2B-C6EE10BE5D4E','372','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','1522706865383352629','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C4E7C1E1-6B5F-5F18-BF2B-C6EE10BE5D4E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C4E7C1E1-6B5F-5F18-BF2B-C6EE10BE5D4E','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C4E7C1E1-6B5F-5F18-BF2B-C6EE10BE5D4E','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '23D2525F-C24C-5A72-B726-886F8E49586D', 'sequence': {'long': 373}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'23D2525F-C24C-5A72-B726-886F8E49586D','373','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'23D2525F-C24C-5A72-B726-886F8E49586D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'23D2525F-C24C-5A72-B726-886F8E49586D','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'23D2525F-C24C-5A72-B726-886F8E49586D','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7DF2FDA4-E55A-5C8C-901F-240CD5A2DDA9', 'sequence': {'long': 374}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7DF2FDA4-E55A-5C8C-901F-240CD5A2DDA9','374','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7DF2FDA4-E55A-5C8C-901F-240CD5A2DDA9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7DF2FDA4-E55A-5C8C-901F-240CD5A2DDA9','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7DF2FDA4-E55A-5C8C-901F-240CD5A2DDA9','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B97404EB-B542-502E-B68B-4B1DA2345372', 'sequence': {'long': 375}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B97404EB-B542-502E-B68B-4B1DA2345372','375','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B97404EB-B542-502E-B68B-4B1DA2345372','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B97404EB-B542-502E-B68B-4B1DA2345372','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B97404EB-B542-502E-B68B-4B1DA2345372','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0D90B720-C241-5188-9108-AB35A9EFC230', 'sequence': {'long': 376}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0D90B720-C241-5188-9108-AB35A9EFC230','376','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0D90B720-C241-5188-9108-AB35A9EFC230','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0D90B720-C241-5188-9108-AB35A9EFC230','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0D90B720-C241-5188-9108-AB35A9EFC230','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '757014EE-967A-5A72-B79C-1467EC74219A', 'sequence': {'long': 377}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'757014EE-967A-5A72-B79C-1467EC74219A','377','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'757014EE-967A-5A72-B79C-1467EC74219A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'757014EE-967A-5A72-B79C-1467EC74219A','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'757014EE-967A-5A72-B79C-1467EC74219A','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F8CA5849-2FEE-5684-B453-239E244E090B', 'sequence': {'long': 378}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F8CA5849-2FEE-5684-B453-239E244E090B','378','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F8CA5849-2FEE-5684-B453-239E244E090B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F8CA5849-2FEE-5684-B453-239E244E090B','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F8CA5849-2FEE-5684-B453-239E244E090B','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D3643A45-EFD0-5D06-B16D-CD01601D3696', 'sequence': {'long': 379}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D3643A45-EFD0-5D06-B16D-CD01601D3696','379','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D3643A45-EFD0-5D06-B16D-CD01601D3696','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D3643A45-EFD0-5D06-B16D-CD01601D3696','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D3643A45-EFD0-5D06-B16D-CD01601D3696','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AC76F6B9-F8B2-58E3-9183-373EBE312837', 'sequence': {'long': 380}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AC76F6B9-F8B2-58E3-9183-373EBE312837','380','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AC76F6B9-F8B2-58E3-9183-373EBE312837','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AC76F6B9-F8B2-58E3-9183-373EBE312837','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AC76F6B9-F8B2-58E3-9183-373EBE312837','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '03590CF3-2D9F-57FB-8286-7354B16FF9E9', 'sequence': {'long': 381}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'03590CF3-2D9F-57FB-8286-7354B16FF9E9','381','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'03590CF3-2D9F-57FB-8286-7354B16FF9E9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'03590CF3-2D9F-57FB-8286-7354B16FF9E9','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'03590CF3-2D9F-57FB-8286-7354B16FF9E9','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F1C026A5-A346-5475-9662-4BBE05E54D7C', 'sequence': {'long': 382}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F1C026A5-A346-5475-9662-4BBE05E54D7C','382','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F1C026A5-A346-5475-9662-4BBE05E54D7C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F1C026A5-A346-5475-9662-4BBE05E54D7C','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F1C026A5-A346-5475-9662-4BBE05E54D7C','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '56D20F9A-1216-5195-8984-932D4963C300', 'sequence': {'long': 383}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'56D20F9A-1216-5195-8984-932D4963C300','383','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','1522706865383352629','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'56D20F9A-1216-5195-8984-932D4963C300','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'56D20F9A-1216-5195-8984-932D4963C300','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'56D20F9A-1216-5195-8984-932D4963C300','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '055A3666-F2D2-56CA-9142-1DB7E0486C76', 'sequence': {'long': 384}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865383352629, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'055A3666-F2D2-56CA-9142-1DB7E0486C76','384','EVENT_OPEN','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865383352629','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'055A3666-F2D2-56CA-9142-1DB7E0486C76','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'055A3666-F2D2-56CA-9142-1DB7E0486C76','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'055A3666-F2D2-56CA-9142-1DB7E0486C76','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '076DEC75-0483-5BF4-8845-9E3D39523759', 'sequence': {'long': 385}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'076DEC75-0483-5BF4-8845-9E3D39523759','385','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865393353710','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'076DEC75-0483-5BF4-8845-9E3D39523759','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'076DEC75-0483-5BF4-8845-9E3D39523759','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'076DEC75-0483-5BF4-8845-9E3D39523759','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1D103866-FB2F-500C-9512-087EB042847F', 'sequence': {'long': 386}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1D103866-FB2F-500C-9512-087EB042847F','386','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865393353710','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1D103866-FB2F-500C-9512-087EB042847F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1D103866-FB2F-500C-9512-087EB042847F','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1D103866-FB2F-500C-9512-087EB042847F','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '606DD5BD-5EC8-5067-9879-86CA47B91A9B', 'sequence': {'long': 387}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'606DD5BD-5EC8-5067-9879-86CA47B91A9B','387','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865393353710','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'606DD5BD-5EC8-5067-9879-86CA47B91A9B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'606DD5BD-5EC8-5067-9879-86CA47B91A9B','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'606DD5BD-5EC8-5067-9879-86CA47B91A9B','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '129694C4-8E52-5002-B560-42EE55DDFF14', 'sequence': {'long': 388}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'129694C4-8E52-5002-B560-42EE55DDFF14','388','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865393353710','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'129694C4-8E52-5002-B560-42EE55DDFF14','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'129694C4-8E52-5002-B560-42EE55DDFF14','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'129694C4-8E52-5002-B560-42EE55DDFF14','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2B0397D6-C408-5CF8-BAF9-E8A6ED70F750', 'sequence': {'long': 389}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2B0397D6-C408-5CF8-BAF9-E8A6ED70F750','389','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865393353710','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2B0397D6-C408-5CF8-BAF9-E8A6ED70F750','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2B0397D6-C408-5CF8-BAF9-E8A6ED70F750','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2B0397D6-C408-5CF8-BAF9-E8A6ED70F750','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E6378286-50D3-5C6B-A786-44C6F852B56D', 'sequence': {'long': 390}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E6378286-50D3-5C6B-A786-44C6F852B56D','390','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865393353710','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E6378286-50D3-5C6B-A786-44C6F852B56D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E6378286-50D3-5C6B-A786-44C6F852B56D','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E6378286-50D3-5C6B-A786-44C6F852B56D','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E1939A4F-0F10-5CCC-B454-1C5F11CA9986', 'sequence': {'long': 391}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E1939A4F-0F10-5CCC-B454-1C5F11CA9986','391','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865393353710','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E1939A4F-0F10-5CCC-B454-1C5F11CA9986','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E1939A4F-0F10-5CCC-B454-1C5F11CA9986','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E1939A4F-0F10-5CCC-B454-1C5F11CA9986','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5D418AF0-3AA4-570D-A2C8-5BDA9B8BB3E0', 'sequence': {'long': 392}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5D418AF0-3AA4-570D-A2C8-5BDA9B8BB3E0','392','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865393353710','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5D418AF0-3AA4-570D-A2C8-5BDA9B8BB3E0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5D418AF0-3AA4-570D-A2C8-5BDA9B8BB3E0','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5D418AF0-3AA4-570D-A2C8-5BDA9B8BB3E0','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '154EE652-97C5-5A3E-AB6B-BD7720404A8D', 'sequence': {'long': 393}, 'type': 'EVENT_READ', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'154EE652-97C5-5A3E-AB6B-BD7720404A8D','393','EVENT_READ','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706865393353710','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'154EE652-97C5-5A3E-AB6B-BD7720404A8D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'154EE652-97C5-5A3E-AB6B-BD7720404A8D','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'154EE652-97C5-5A3E-AB6B-BD7720404A8D','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3FBD9B86-B79D-5D81-953C-DB598B7FF5D1', 'sequence': {'long': 394}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3FBD9B86-B79D-5D81-953C-DB598B7FF5D1','394','EVENT_CLOSE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','1522706865393353710','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3FBD9B86-B79D-5D81-953C-DB598B7FF5D1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3FBD9B86-B79D-5D81-953C-DB598B7FF5D1','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3FBD9B86-B79D-5D81-953C-DB598B7FF5D1','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '71B135EE-10B2-5DEF-9448-E67459BDC658', 'sequence': {'long': 395}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1649}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '1', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'71B135EE-10B2-5DEF-9448-E67459BDC658','395','EVENT_WRITE','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1','<unknown>','1522706865393353710','aue_write','1649','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','1','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'71B135EE-10B2-5DEF-9448-E67459BDC658','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'71B135EE-10B2-5DEF-9448-E67459BDC658','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'71B135EE-10B2-5DEF-9448-E67459BDC658','43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E82D996A-2C2A-579C-AAFD-085562064639', 'sequence': {'long': 396}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1649}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '0', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E82D996A-2C2A-579C-AAFD-085562064639','396','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1','<unknown>','1522706865393353710','aue_read','1649','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','0','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E82D996A-2C2A-579C-AAFD-085562064639','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E82D996A-2C2A-579C-AAFD-085562064639','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E82D996A-2C2A-579C-AAFD-085562064639','43C4E3CF-B655-5D90-8F1F-EFB3E7D27AA1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4A7D66E6-0977-598D-B2BE-4CBDEBBD7CAD', 'sequence': {'long': 397}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100214}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F195B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4A7D66E6-0977-598D-B2BE-4CBDEBBD7CAD','397','EVENT_EXIT','100214','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','1522706865393353710','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4A7D66E6-0977-598D-B2BE-4CBDEBBD7CAD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4A7D66E6-0977-598D-B2BE-4CBDEBBD7CAD','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4A7D66E6-0977-598D-B2BE-4CBDEBBD7CAD','458F195B-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C697F5FA-6CBF-5DE7-82F7-DE10014A1501', 'sequence': {'long': 398}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FADB56EB-6919-8A51-9969-955CD18AFFC9'}, 'predicateObjectPath': {'string': 'top_procs.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 810}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'top_procs.txt', 'fd': '1', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C697F5FA-6CBF-5DE7-82F7-DE10014A1501','398','EVENT_WRITE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','FADB56EB-6919-8A51-9969-955CD18AFFC9','top_procs.txt','1522706865393353710','aue_write','810','83c8ed1f-5045-dbcd-b39f-918f0df4f851','top_procs.txt','1','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C697F5FA-6CBF-5DE7-82F7-DE10014A1501','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C697F5FA-6CBF-5DE7-82F7-DE10014A1501','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C697F5FA-6CBF-5DE7-82F7-DE10014A1501','FADB56EB-6919-8A51-9969-955CD18AFFC9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9AF0408A-AD2A-5944-A2B0-9BEF0EEE5918', 'sequence': {'long': 399}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9AF0408A-AD2A-5944-A2B0-9BEF0EEE5918','399','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','1522706865393353710','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9AF0408A-AD2A-5944-A2B0-9BEF0EEE5918','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9AF0408A-AD2A-5944-A2B0-9BEF0EEE5918','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9AF0408A-AD2A-5944-A2B0-9BEF0EEE5918','458F5AC3-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2806, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706865393353710, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2806','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706865393353710','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7E07AB3B-2B50-5813-8CFE-C04320D301CA', 'sequence': {'long': 400}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2806', 'exec': 'bash', 'arg_pid': '2806', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'7E07AB3B-2B50-5813-8CFE-C04320D301CA','400','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','1522706865393353710','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2806','bash','2806','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7E07AB3B-2B50-5813-8CFE-C04320D301CA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7E07AB3B-2B50-5813-8CFE-C04320D301CA','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7E07AB3B-2B50-5813-8CFE-C04320D301CA','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FFCF9832-913B-57D1-AD86-57D3C39CC603', 'sequence': {'long': 401}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FFCF9832-913B-57D1-AD86-57D3C39CC603','401','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706865393353710','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FFCF9832-913B-57D1-AD86-57D3C39CC603','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FFCF9832-913B-57D1-AD86-57D3C39CC603','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FFCF9832-913B-57D1-AD86-57D3C39CC603','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D1D4BA48-D87E-5C77-87AB-3DA8B0B3116E', 'sequence': {'long': 402}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C836AA2-BB54-3A58-94BB-1E5D583A637E'}, 'predicateObjectPath': {'string': '/bin/sleep'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'sleep 1', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D1D4BA48-D87E-5C77-87AB-3DA8B0B3116E','402','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','6C836AA2-BB54-3A58-94BB-1E5D583A637E','/bin/sleep','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706865393353710','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','sleep 1','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D1D4BA48-D87E-5C77-87AB-3DA8B0B3116E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D1D4BA48-D87E-5C77-87AB-3DA8B0B3116E','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D1D4BA48-D87E-5C77-87AB-3DA8B0B3116E','6C836AA2-BB54-3A58-94BB-1E5D583A637E','affects'),(nextval('edge_number_seq'),'D1D4BA48-D87E-5C77-87AB-3DA8B0B3116E','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1C5F9308-6B44-52D7-95F5-26F6A4CD5923', 'sequence': {'long': 403}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1C5F9308-6B44-52D7-95F5-26F6A4CD5923','403','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706865393353710','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1C5F9308-6B44-52D7-95F5-26F6A4CD5923','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1C5F9308-6B44-52D7-95F5-26F6A4CD5923','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1C5F9308-6B44-52D7-95F5-26F6A4CD5923','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D12B2058-BB41-588A-8B01-E09D3CC881BE', 'sequence': {'long': 404}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D12B2058-BB41-588A-8B01-E09D3CC881BE','404','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706865393353710','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D12B2058-BB41-588A-8B01-E09D3CC881BE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D12B2058-BB41-588A-8B01-E09D3CC881BE','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D12B2058-BB41-588A-8B01-E09D3CC881BE','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '50C9B0F1-6C3B-5766-AB47-FAC48A695FE6', 'sequence': {'long': 405}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'50C9B0F1-6C3B-5766-AB47-FAC48A695FE6','405','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706865393353710','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'50C9B0F1-6C3B-5766-AB47-FAC48A695FE6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'50C9B0F1-6C3B-5766-AB47-FAC48A695FE6','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'50C9B0F1-6C3B-5766-AB47-FAC48A695FE6','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1572062B-606F-576C-B9A2-8FFAA03DEACA', 'sequence': {'long': 406}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1572062B-606F-576C-B9A2-8FFAA03DEACA','406','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706865393353710','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1572062B-606F-576C-B9A2-8FFAA03DEACA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1572062B-606F-576C-B9A2-8FFAA03DEACA','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1572062B-606F-576C-B9A2-8FFAA03DEACA','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '42C98105-1E0E-5CC2-9AB4-33521C19F37A', 'sequence': {'long': 407}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865393353710, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'42C98105-1E0E-5CC2-9AB4-33521C19F37A','407','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706865393353710','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'42C98105-1E0E-5CC2-9AB4-33521C19F37A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'42C98105-1E0E-5CC2-9AB4-33521C19F37A','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'42C98105-1E0E-5CC2-9AB4-33521C19F37A','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D4B8BE21-A98B-55B3-AD5C-EC88E10251F2', 'sequence': {'long': 408}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D4B8BE21-A98B-55B3-AD5C-EC88E10251F2','408','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706865403356510','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D4B8BE21-A98B-55B3-AD5C-EC88E10251F2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D4B8BE21-A98B-55B3-AD5C-EC88E10251F2','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D4B8BE21-A98B-55B3-AD5C-EC88E10251F2','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B486914A-4514-5982-B1C9-B3D5641C39EA', 'sequence': {'long': 409}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B486914A-4514-5982-B1C9-B3D5641C39EA','409','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706865403356510','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B486914A-4514-5982-B1C9-B3D5641C39EA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B486914A-4514-5982-B1C9-B3D5641C39EA','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B486914A-4514-5982-B1C9-B3D5641C39EA','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AC95F251-3040-541F-83B9-25E0856F741C', 'sequence': {'long': 410}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AC95F251-3040-541F-83B9-25E0856F741C','410','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706865403356510','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AC95F251-3040-541F-83B9-25E0856F741C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AC95F251-3040-541F-83B9-25E0856F741C','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AC95F251-3040-541F-83B9-25E0856F741C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C8E95AB0-270E-5416-92BC-5A0042C6CEC9', 'sequence': {'long': 411}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C8E95AB0-270E-5416-92BC-5A0042C6CEC9','411','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865403356510','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C8E95AB0-270E-5416-92BC-5A0042C6CEC9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C8E95AB0-270E-5416-92BC-5A0042C6CEC9','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C8E95AB0-270E-5416-92BC-5A0042C6CEC9','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '21BDA33C-5EB1-5173-A359-FB40CCC3B28B', 'sequence': {'long': 412}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'21BDA33C-5EB1-5173-A359-FB40CCC3B28B','412','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865403356510','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'21BDA33C-5EB1-5173-A359-FB40CCC3B28B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'21BDA33C-5EB1-5173-A359-FB40CCC3B28B','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'21BDA33C-5EB1-5173-A359-FB40CCC3B28B','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A3B88007-B21F-5B0A-8327-359A327F9C9B', 'sequence': {'long': 413}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A3B88007-B21F-5B0A-8327-359A327F9C9B','413','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865403356510','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A3B88007-B21F-5B0A-8327-359A327F9C9B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A3B88007-B21F-5B0A-8327-359A327F9C9B','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A3B88007-B21F-5B0A-8327-359A327F9C9B','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FCEFC426-0291-5A0C-A0AE-7BCB3B7CFDA5', 'sequence': {'long': 414}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'FCEFC426-0291-5A0C-A0AE-7BCB3B7CFDA5','414','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865403356510','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FCEFC426-0291-5A0C-A0AE-7BCB3B7CFDA5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FCEFC426-0291-5A0C-A0AE-7BCB3B7CFDA5','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FCEFC426-0291-5A0C-A0AE-7BCB3B7CFDA5','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '78AE140D-433D-54E1-AA74-E05EF9E2252B', 'sequence': {'long': 415}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'78AE140D-433D-54E1-AA74-E05EF9E2252B','415','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865403356510','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'78AE140D-433D-54E1-AA74-E05EF9E2252B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'78AE140D-433D-54E1-AA74-E05EF9E2252B','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'78AE140D-433D-54E1-AA74-E05EF9E2252B','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C0301F97-4829-503C-8E9E-E8092A94608F', 'sequence': {'long': 416}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C0301F97-4829-503C-8E9E-E8092A94608F','416','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865403356510','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C0301F97-4829-503C-8E9E-E8092A94608F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C0301F97-4829-503C-8E9E-E8092A94608F','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C0301F97-4829-503C-8E9E-E8092A94608F','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '29A0C0A4-5313-5FBB-AA1D-CDCF460BB6DD', 'sequence': {'long': 417}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'29A0C0A4-5313-5FBB-AA1D-CDCF460BB6DD','417','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706865403356510','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'29A0C0A4-5313-5FBB-AA1D-CDCF460BB6DD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'29A0C0A4-5313-5FBB-AA1D-CDCF460BB6DD','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'29A0C0A4-5313-5FBB-AA1D-CDCF460BB6DD','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '73174D7D-E906-5577-B3E3-7F1FDE5E695D', 'sequence': {'long': 418}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'73174D7D-E906-5577-B3E3-7F1FDE5E695D','418','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706865403356510','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'73174D7D-E906-5577-B3E3-7F1FDE5E695D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'73174D7D-E906-5577-B3E3-7F1FDE5E695D','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'73174D7D-E906-5577-B3E3-7F1FDE5E695D','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5BA35632-CACF-547B-B5D8-4CBB1CBC065A', 'sequence': {'long': 419}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5BA35632-CACF-547B-B5D8-4CBB1CBC065A','419','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706865403356510','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5BA35632-CACF-547B-B5D8-4CBB1CBC065A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5BA35632-CACF-547B-B5D8-4CBB1CBC065A','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5BA35632-CACF-547B-B5D8-4CBB1CBC065A','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '52960553-146F-566D-AE70-7252847121ED', 'sequence': {'long': 420}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'52960553-146F-566D-AE70-7252847121ED','420','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706865403356510','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'52960553-146F-566D-AE70-7252847121ED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'52960553-146F-566D-AE70-7252847121ED','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'52960553-146F-566D-AE70-7252847121ED','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CC16DA37-380C-5B59-8FE9-7CD4E9AAF68B', 'sequence': {'long': 421}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865403356510, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CC16DA37-380C-5B59-8FE9-7CD4E9AAF68B','421','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706865403356510','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CC16DA37-380C-5B59-8FE9-7CD4E9AAF68B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CC16DA37-380C-5B59-8FE9-7CD4E9AAF68B','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CC16DA37-380C-5B59-8FE9-7CD4E9AAF68B','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4FFE02DC-9ADC-5A15-830F-3AF0B57EC0EF', 'sequence': {'long': 422}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '453F9E58-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865813365115, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4FFE02DC-9ADC-5A15-830F-3AF0B57EC0EF','422','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','453F9E58-36C2-11E8-BF66-D9AA8AFF4A69','1522706865813365115','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4FFE02DC-9ADC-5A15-830F-3AF0B57EC0EF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4FFE02DC-9ADC-5A15-830F-3AF0B57EC0EF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4FFE02DC-9ADC-5A15-830F-3AF0B57EC0EF','453F9E58-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3162DAFB-1CE8-5D15-9653-682A40A82E00', 'sequence': {'long': 423}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '453F9F03-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865813365115, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3162DAFB-1CE8-5D15-9653-682A40A82E00','423','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','453F9F03-36C2-11E8-BF66-D9AA8AFF4A69','1522706865813365115','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3162DAFB-1CE8-5D15-9653-682A40A82E00','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3162DAFB-1CE8-5D15-9653-682A40A82E00','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3162DAFB-1CE8-5D15-9653-682A40A82E00','453F9F03-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '45D83503-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'45D83503-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'45D83503-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'45D83503-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '45D833E9-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'45D833E9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'45D833E9-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'45D833E9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BA5EEA71-12AA-59BA-9B3D-7CF57582939D', 'sequence': {'long': 424}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '45D833E9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '45D83503-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706865813365115, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BA5EEA71-12AA-59BA-9B3D-7CF57582939D','424','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','45D833E9-36C2-11E8-BF66-D9AA8AFF4A69','45D83503-36C2-11E8-BF66-D9AA8AFF4A69','1522706865813365115','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BA5EEA71-12AA-59BA-9B3D-7CF57582939D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BA5EEA71-12AA-59BA-9B3D-7CF57582939D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BA5EEA71-12AA-59BA-9B3D-7CF57582939D','45D833E9-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'BA5EEA71-12AA-59BA-9B3D-7CF57582939D','45D83503-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2633AAAB-5EF5-50EE-B0EE-A4D00E98E144', 'sequence': {'long': 425}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865813365115, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2633AAAB-5EF5-50EE-B0EE-A4D00E98E144','425','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706865813365115','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2633AAAB-5EF5-50EE-B0EE-A4D00E98E144','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2633AAAB-5EF5-50EE-B0EE-A4D00E98E144','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '23155E3E-8BB8-5852-8319-733BAECCA7EF', 'sequence': {'long': 426}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865813365115, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'23155E3E-8BB8-5852-8319-733BAECCA7EF','426','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706865813365115','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'23155E3E-8BB8-5852-8319-733BAECCA7EF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'23155E3E-8BB8-5852-8319-733BAECCA7EF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '90FDE88A-3653-56DB-BF56-35BDB17CCAB5', 'sequence': {'long': 427}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865813365115, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'90FDE88A-3653-56DB-BF56-35BDB17CCAB5','427','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706865813365115','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'90FDE88A-3653-56DB-BF56-35BDB17CCAB5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'90FDE88A-3653-56DB-BF56-35BDB17CCAB5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A4213C3C-47D2-5B21-BBBC-3231374133E8', 'sequence': {'long': 428}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706865813365115, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A4213C3C-47D2-5B21-BBBC-3231374133E8','428','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706865813365115','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A4213C3C-47D2-5B21-BBBC-3231374133E8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A4213C3C-47D2-5B21-BBBC-3231374133E8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B2580D9E-6ED9-5BAA-AD4D-A814383B888B', 'sequence': {'long': 429}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4598CB89-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B2580D9E-6ED9-5BAA-AD4D-A814383B888B','429','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','1522706866413351857','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B2580D9E-6ED9-5BAA-AD4D-A814383B888B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B2580D9E-6ED9-5BAA-AD4D-A814383B888B','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B2580D9E-6ED9-5BAA-AD4D-A814383B888B','4598CB89-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2807, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706866413351857, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'4633B892-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2807','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706866413351857','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4633B892-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4633B892-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'4633B892-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'4633B892-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5E5C3AC8-6BE0-5B0A-AB36-9FC190A097A7', 'sequence': {'long': 430}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2807', 'exec': 'bash', 'arg_pid': '2807', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'5E5C3AC8-6BE0-5B0A-AB36-9FC190A097A7','430','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','1522706866413351857','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2807','bash','2807','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5E5C3AC8-6BE0-5B0A-AB36-9FC190A097A7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5E5C3AC8-6BE0-5B0A-AB36-9FC190A097A7','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5E5C3AC8-6BE0-5B0A-AB36-9FC190A097A7','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '856AF2D6-7535-5E5F-9980-4ECAAF2D3A41', 'sequence': {'long': 431}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'856AF2D6-7535-5E5F-9980-4ECAAF2D3A41','431','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706866413351857','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'856AF2D6-7535-5E5F-9980-4ECAAF2D3A41','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'856AF2D6-7535-5E5F-9980-4ECAAF2D3A41','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'856AF2D6-7535-5E5F-9980-4ECAAF2D3A41','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '0A5174D8-80FB-4258-BB80-C79A98427D6A', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'0A5174D8-80FB-4258-BB80-C79A98427D6A','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0A5174D8-80FB-4258-BB80-C79A98427D6A','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0A5174D8-80FB-4258-BB80-C79A98427D6A','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2DD4546B-7665-5F9E-A453-D8EA4B057BB1', 'sequence': {'long': 432}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0A5174D8-80FB-4258-BB80-C79A98427D6A'}, 'predicateObjectPath': {'string': '/bin/date'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'date', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2DD4546B-7665-5F9E-A453-D8EA4B057BB1','432','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','0A5174D8-80FB-4258-BB80-C79A98427D6A','/bin/date','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706866413351857','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','date','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2DD4546B-7665-5F9E-A453-D8EA4B057BB1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2DD4546B-7665-5F9E-A453-D8EA4B057BB1','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2DD4546B-7665-5F9E-A453-D8EA4B057BB1','0A5174D8-80FB-4258-BB80-C79A98427D6A','affects'),(nextval('edge_number_seq'),'2DD4546B-7665-5F9E-A453-D8EA4B057BB1','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9D6F61DC-00C0-5208-800D-F2EC968C704B', 'sequence': {'long': 433}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9D6F61DC-00C0-5208-800D-F2EC968C704B','433','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706866413351857','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9D6F61DC-00C0-5208-800D-F2EC968C704B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9D6F61DC-00C0-5208-800D-F2EC968C704B','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9D6F61DC-00C0-5208-800D-F2EC968C704B','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6C095F24-F167-5E26-8944-97C7C8E0EC8F', 'sequence': {'long': 434}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6C095F24-F167-5E26-8944-97C7C8E0EC8F','434','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706866413351857','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6C095F24-F167-5E26-8944-97C7C8E0EC8F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6C095F24-F167-5E26-8944-97C7C8E0EC8F','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6C095F24-F167-5E26-8944-97C7C8E0EC8F','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B296D9AF-D61D-5F8C-ABBF-7FE9C8EDD035', 'sequence': {'long': 435}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B296D9AF-D61D-5F8C-ABBF-7FE9C8EDD035','435','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706866413351857','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B296D9AF-D61D-5F8C-ABBF-7FE9C8EDD035','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B296D9AF-D61D-5F8C-ABBF-7FE9C8EDD035','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B296D9AF-D61D-5F8C-ABBF-7FE9C8EDD035','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2DB8CC89-7924-5AEE-92FB-7551F65EF02B', 'sequence': {'long': 436}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2DB8CC89-7924-5AEE-92FB-7551F65EF02B','436','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706866413351857','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2DB8CC89-7924-5AEE-92FB-7551F65EF02B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2DB8CC89-7924-5AEE-92FB-7551F65EF02B','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2DB8CC89-7924-5AEE-92FB-7551F65EF02B','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2EA5C83B-0C95-5977-9D66-21DAA4972A67', 'sequence': {'long': 437}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2EA5C83B-0C95-5977-9D66-21DAA4972A67','437','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706866413351857','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2EA5C83B-0C95-5977-9D66-21DAA4972A67','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2EA5C83B-0C95-5977-9D66-21DAA4972A67','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2EA5C83B-0C95-5977-9D66-21DAA4972A67','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0865A6C9-13D1-57E7-A54D-82666061ADC3', 'sequence': {'long': 438}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0865A6C9-13D1-57E7-A54D-82666061ADC3','438','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706866413351857','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0865A6C9-13D1-57E7-A54D-82666061ADC3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0865A6C9-13D1-57E7-A54D-82666061ADC3','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0865A6C9-13D1-57E7-A54D-82666061ADC3','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5C9428EC-858A-5259-A5BC-33B582F0E2ED', 'sequence': {'long': 439}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5C9428EC-858A-5259-A5BC-33B582F0E2ED','439','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706866413351857','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5C9428EC-858A-5259-A5BC-33B582F0E2ED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5C9428EC-858A-5259-A5BC-33B582F0E2ED','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5C9428EC-858A-5259-A5BC-33B582F0E2ED','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9D4AD1AD-BECB-5A2C-A1F8-38A422D3DB19', 'sequence': {'long': 440}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9D4AD1AD-BECB-5A2C-A1F8-38A422D3DB19','440','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706866413351857','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9D4AD1AD-BECB-5A2C-A1F8-38A422D3DB19','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9D4AD1AD-BECB-5A2C-A1F8-38A422D3DB19','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9D4AD1AD-BECB-5A2C-A1F8-38A422D3DB19','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '78CFEA13-C203-592A-AD6F-B48CAF400D2A', 'sequence': {'long': 441}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6578176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'78CFEA13-C203-592A-AD6F-B48CAF400D2A','441','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866413351857','aue_mmap','6578176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'78CFEA13-C203-592A-AD6F-B48CAF400D2A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'78CFEA13-C203-592A-AD6F-B48CAF400D2A','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'78CFEA13-C203-592A-AD6F-B48CAF400D2A','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E1E2E9E5-7404-5E68-A0A4-8033E6E55175', 'sequence': {'long': 442}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6578176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E1E2E9E5-7404-5E68-A0A4-8033E6E55175','442','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866413351857','aue_mmap','6578176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E1E2E9E5-7404-5E68-A0A4-8033E6E55175','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E1E2E9E5-7404-5E68-A0A4-8033E6E55175','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E1E2E9E5-7404-5E68-A0A4-8033E6E55175','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3C064A16-A8CC-564F-9F5E-5FD2C5CC0981', 'sequence': {'long': 443}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8552448}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3C064A16-A8CC-564F-9F5E-5FD2C5CC0981','443','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866413351857','aue_mmap','8552448','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3C064A16-A8CC-564F-9F5E-5FD2C5CC0981','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3C064A16-A8CC-564F-9F5E-5FD2C5CC0981','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3C064A16-A8CC-564F-9F5E-5FD2C5CC0981','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '19A3D8A4-EC20-53F4-AFB7-1326BA2348C1', 'sequence': {'long': 444}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8552448}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'19A3D8A4-EC20-53F4-AFB7-1326BA2348C1','444','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866413351857','aue_mmap','8552448','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'19A3D8A4-EC20-53F4-AFB7-1326BA2348C1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'19A3D8A4-EC20-53F4-AFB7-1326BA2348C1','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'19A3D8A4-EC20-53F4-AFB7-1326BA2348C1','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ACCBE331-7AE0-5B19-B627-F1949802C46F', 'sequence': {'long': 445}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12439552}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'ACCBE331-7AE0-5B19-B627-F1949802C46F','445','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866413351857','aue_mmap','12439552','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ACCBE331-7AE0-5B19-B627-F1949802C46F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ACCBE331-7AE0-5B19-B627-F1949802C46F','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ACCBE331-7AE0-5B19-B627-F1949802C46F','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B6DB4722-636C-5018-95E5-10DFCA8F607F', 'sequence': {'long': 446}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12439552}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B6DB4722-636C-5018-95E5-10DFCA8F607F','446','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866413351857','aue_mmap','12439552','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B6DB4722-636C-5018-95E5-10DFCA8F607F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B6DB4722-636C-5018-95E5-10DFCA8F607F','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B6DB4722-636C-5018-95E5-10DFCA8F607F','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F87399F6-DBFA-5F16-8A27-C96C395E7E1D', 'sequence': {'long': 447}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F87399F6-DBFA-5F16-8A27-C96C395E7E1D','447','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866413351857','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F87399F6-DBFA-5F16-8A27-C96C395E7E1D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F87399F6-DBFA-5F16-8A27-C96C395E7E1D','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F87399F6-DBFA-5F16-8A27-C96C395E7E1D','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9BCEEB19-454B-54EE-B6A2-0B36DAEBE2D2', 'sequence': {'long': 448}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9BCEEB19-454B-54EE-B6A2-0B36DAEBE2D2','448','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706866413351857','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9BCEEB19-454B-54EE-B6A2-0B36DAEBE2D2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9BCEEB19-454B-54EE-B6A2-0B36DAEBE2D2','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9BCEEB19-454B-54EE-B6A2-0B36DAEBE2D2','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C649FCD8-D638-5509-84D3-4FF91D3790BB', 'sequence': {'long': 449}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6578176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C649FCD8-D638-5509-84D3-4FF91D3790BB','449','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706866413351857','aue_mmap','6578176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','date','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C649FCD8-D638-5509-84D3-4FF91D3790BB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C649FCD8-D638-5509-84D3-4FF91D3790BB','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C649FCD8-D638-5509-84D3-4FF91D3790BB','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '17AC1342-009E-53A9-890E-638855872BD8', 'sequence': {'long': 450}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866413351857, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6578176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'17AC1342-009E-53A9-890E-638855872BD8','450','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706866413351857','aue_mmap','6578176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','date','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'17AC1342-009E-53A9-890E-638855872BD8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'17AC1342-009E-53A9-890E-638855872BD8','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'17AC1342-009E-53A9-890E-638855872BD8','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4042A554-E6BB-5E98-9840-C5D323DC9573', 'sequence': {'long': 451}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4042A554-E6BB-5E98-9840-C5D323DC9573','451','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706866423354167','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4042A554-E6BB-5E98-9840-C5D323DC9573','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4042A554-E6BB-5E98-9840-C5D323DC9573','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4042A554-E6BB-5E98-9840-C5D323DC9573','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ECB0624D-5700-5707-B879-C8D7D356DB49', 'sequence': {'long': 452}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/UTC'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ECB0624D-5700-5707-B879-C8D7D356DB49','452','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','/usr/share/zoneinfo/UTC','1522706866423354167','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ECB0624D-5700-5707-B879-C8D7D356DB49','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ECB0624D-5700-5707-B879-C8D7D356DB49','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ECB0624D-5700-5707-B879-C8D7D356DB49','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4BD82CD3-12DB-5B9C-9CD5-24B4218972C4', 'sequence': {'long': 453}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/UTC'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 118}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/zoneinfo/UTC', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4BD82CD3-12DB-5B9C-9CD5-24B4218972C4','453','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','/usr/share/zoneinfo/UTC','1522706866423354167','aue_read','118','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/zoneinfo/UTC','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4BD82CD3-12DB-5B9C-9CD5-24B4218972C4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4BD82CD3-12DB-5B9C-9CD5-24B4218972C4','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4BD82CD3-12DB-5B9C-9CD5-24B4218972C4','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9923BBA5-AB15-5F08-A06A-73C1CB1EADCA', 'sequence': {'long': 454}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9923BBA5-AB15-5F08-A06A-73C1CB1EADCA','454','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','1522706866423354167','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9923BBA5-AB15-5F08-A06A-73C1CB1EADCA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9923BBA5-AB15-5F08-A06A-73C1CB1EADCA','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9923BBA5-AB15-5F08-A06A-73C1CB1EADCA','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F62FCCB5-53BB-5B50-A07F-D90E8BB43381', 'sequence': {'long': 455}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/posixrules'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '2C00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F62FCCB5-53BB-5B50-A07F-D90E8BB43381','455','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','/usr/share/zoneinfo/posixrules','1522706866423354167','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','2C00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F62FCCB5-53BB-5B50-A07F-D90E8BB43381','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F62FCCB5-53BB-5B50-A07F-D90E8BB43381','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F62FCCB5-53BB-5B50-A07F-D90E8BB43381','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '54C525CF-DF91-5BA7-9BB1-FC9A17FA2B7F', 'sequence': {'long': 456}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/posixrules'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 3519}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/zoneinfo/posixrules', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'54C525CF-DF91-5BA7-9BB1-FC9A17FA2B7F','456','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','/usr/share/zoneinfo/posixrules','1522706866423354167','aue_read','3519','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/zoneinfo/posixrules','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54C525CF-DF91-5BA7-9BB1-FC9A17FA2B7F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54C525CF-DF91-5BA7-9BB1-FC9A17FA2B7F','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'54C525CF-DF91-5BA7-9BB1-FC9A17FA2B7F','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C85C1D47-B068-53A0-A6D5-7112BAFD22B3', 'sequence': {'long': 457}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C85C1D47-B068-53A0-A6D5-7112BAFD22B3','457','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','1522706866423354167','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C85C1D47-B068-53A0-A6D5-7112BAFD22B3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C85C1D47-B068-53A0-A6D5-7112BAFD22B3','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C85C1D47-B068-53A0-A6D5-7112BAFD22B3','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '0245C10A-DC39-5352-B9DC-21665253BC2F', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'0245C10A-DC39-5352-B9DC-21665253BC2F','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0245C10A-DC39-5352-B9DC-21665253BC2F','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0245C10A-DC39-5352-B9DC-21665253BC2F','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '21B6AAD3-5EDD-598B-9A2A-1638377F1471', 'sequence': {'long': 458}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0245C10A-DC39-5352-B9DC-21665253BC2F'}, 'predicateObjectPath': {'string': '/data/gather_stats_uma.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 29}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/data/gather_stats_uma.txt', 'fd': '1', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'21B6AAD3-5EDD-598B-9A2A-1638377F1471','458','EVENT_WRITE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','0245C10A-DC39-5352-B9DC-21665253BC2F','/data/gather_stats_uma.txt','1522706866423354167','aue_write','29','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/data/gather_stats_uma.txt','1','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'21B6AAD3-5EDD-598B-9A2A-1638377F1471','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'21B6AAD3-5EDD-598B-9A2A-1638377F1471','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'21B6AAD3-5EDD-598B-9A2A-1638377F1471','0245C10A-DC39-5352-B9DC-21665253BC2F','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '746FC4D7-F93A-5450-92FF-3B8F4684F204', 'sequence': {'long': 459}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4633B892-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'746FC4D7-F93A-5450-92FF-3B8F4684F204','459','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','1522706866423354167','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'746FC4D7-F93A-5450-92FF-3B8F4684F204','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'746FC4D7-F93A-5450-92FF-3B8F4684F204','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'746FC4D7-F93A-5450-92FF-3B8F4684F204','4633B892-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2808, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706866423354167, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2808','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706866423354167','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C9B53C8A-F62A-503D-A061-EB13B2038180', 'sequence': {'long': 460}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2808', 'exec': 'bash', 'arg_pid': '2808', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'C9B53C8A-F62A-503D-A061-EB13B2038180','460','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','1522706866423354167','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2808','bash','2808','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C9B53C8A-F62A-503D-A061-EB13B2038180','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C9B53C8A-F62A-503D-A061-EB13B2038180','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C9B53C8A-F62A-503D-A061-EB13B2038180','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A5E5AE03-299B-52DF-AD50-EE72F3D06FC5', 'sequence': {'long': 461}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A5E5AE03-299B-52DF-AD50-EE72F3D06FC5','461','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706866423354167','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A5E5AE03-299B-52DF-AD50-EE72F3D06FC5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A5E5AE03-299B-52DF-AD50-EE72F3D06FC5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A5E5AE03-299B-52DF-AD50-EE72F3D06FC5','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '76899EA5-9D25-4352-A59D-8CB74243F4C0', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'76899EA5-9D25-4352-A59D-8CB74243F4C0','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'76899EA5-9D25-4352-A59D-8CB74243F4C0','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'76899EA5-9D25-4352-A59D-8CB74243F4C0','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DCE7C377-C66D-5D34-845C-5DE6DD59E3EC', 'sequence': {'long': 462}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76899EA5-9D25-4352-A59D-8CB74243F4C0'}, 'predicateObjectPath': {'string': '/usr/local/sbin/lsof'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'lsof -a -c python3.6 -i TCP', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DCE7C377-C66D-5D34-845C-5DE6DD59E3EC','462','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','76899EA5-9D25-4352-A59D-8CB74243F4C0','/usr/local/sbin/lsof','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706866423354167','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','lsof -a -c python3.6 -i TCP','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DCE7C377-C66D-5D34-845C-5DE6DD59E3EC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DCE7C377-C66D-5D34-845C-5DE6DD59E3EC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DCE7C377-C66D-5D34-845C-5DE6DD59E3EC','76899EA5-9D25-4352-A59D-8CB74243F4C0','affects'),(nextval('edge_number_seq'),'DCE7C377-C66D-5D34-845C-5DE6DD59E3EC','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '45588282-088A-5B6B-9130-25135C3ECB1F', 'sequence': {'long': 463}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'45588282-088A-5B6B-9130-25135C3ECB1F','463','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706866423354167','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'45588282-088A-5B6B-9130-25135C3ECB1F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'45588282-088A-5B6B-9130-25135C3ECB1F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'45588282-088A-5B6B-9130-25135C3ECB1F','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EFA81EF0-5A45-5C21-9284-B21C726ADA0C', 'sequence': {'long': 464}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EFA81EF0-5A45-5C21-9284-B21C726ADA0C','464','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706866423354167','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EFA81EF0-5A45-5C21-9284-B21C726ADA0C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EFA81EF0-5A45-5C21-9284-B21C726ADA0C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EFA81EF0-5A45-5C21-9284-B21C726ADA0C','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A6E402D5-1B5E-5EFA-9524-7F20CB22F036', 'sequence': {'long': 465}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A6E402D5-1B5E-5EFA-9524-7F20CB22F036','465','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706866423354167','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A6E402D5-1B5E-5EFA-9524-7F20CB22F036','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A6E402D5-1B5E-5EFA-9524-7F20CB22F036','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A6E402D5-1B5E-5EFA-9524-7F20CB22F036','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '01999F33-287B-5859-888C-DCEE08EEBA3F', 'sequence': {'long': 466}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'01999F33-287B-5859-888C-DCEE08EEBA3F','466','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706866423354167','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'01999F33-287B-5859-888C-DCEE08EEBA3F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'01999F33-287B-5859-888C-DCEE08EEBA3F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'01999F33-287B-5859-888C-DCEE08EEBA3F','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9BD60AE1-AA80-5E30-9E88-2EF12FCDEC72', 'sequence': {'long': 467}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9BD60AE1-AA80-5E30-9E88-2EF12FCDEC72','467','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706866423354167','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9BD60AE1-AA80-5E30-9E88-2EF12FCDEC72','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9BD60AE1-AA80-5E30-9E88-2EF12FCDEC72','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9BD60AE1-AA80-5E30-9E88-2EF12FCDEC72','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8AA3304C-F45F-5248-90A6-37FCBB5366DF', 'sequence': {'long': 468}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8AA3304C-F45F-5248-90A6-37FCBB5366DF','468','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706866423354167','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8AA3304C-F45F-5248-90A6-37FCBB5366DF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8AA3304C-F45F-5248-90A6-37FCBB5366DF','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8AA3304C-F45F-5248-90A6-37FCBB5366DF','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D5A0A929-C9EF-5744-B88E-60ED9F5329B0', 'sequence': {'long': 469}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D5A0A929-C9EF-5744-B88E-60ED9F5329B0','469','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706866423354167','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D5A0A929-C9EF-5744-B88E-60ED9F5329B0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D5A0A929-C9EF-5744-B88E-60ED9F5329B0','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D5A0A929-C9EF-5744-B88E-60ED9F5329B0','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B732BE23-4F06-57E9-84E6-CC276107B772', 'sequence': {'long': 470}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': {'string': '/lib/libkvm.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B732BE23-4F06-57E9-84E6-CC276107B772','470','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','/lib/libkvm.so.7','1522706866423354167','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B732BE23-4F06-57E9-84E6-CC276107B772','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B732BE23-4F06-57E9-84E6-CC276107B772','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B732BE23-4F06-57E9-84E6-CC276107B772','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '610A4A5B-1887-53EE-91FE-FC92146C1B3B', 'sequence': {'long': 471}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'610A4A5B-1887-53EE-91FE-FC92146C1B3B','471','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706866423354167','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'610A4A5B-1887-53EE-91FE-FC92146C1B3B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'610A4A5B-1887-53EE-91FE-FC92146C1B3B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'610A4A5B-1887-53EE-91FE-FC92146C1B3B','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C270FE8D-28A0-5816-B59B-39B91A68C93A', 'sequence': {'long': 472}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866423354167, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C270FE8D-28A0-5816-B59B-39B91A68C93A','472','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706866423354167','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C270FE8D-28A0-5816-B59B-39B91A68C93A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C270FE8D-28A0-5816-B59B-39B91A68C93A','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C270FE8D-28A0-5816-B59B-39B91A68C93A','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B4BA575F-0881-5F6C-B587-7AB9D5D6174C', 'sequence': {'long': 473}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8667136}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B4BA575F-0881-5F6C-B587-7AB9D5D6174C','473','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706866433355357','aue_mmap','8667136','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B4BA575F-0881-5F6C-B587-7AB9D5D6174C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B4BA575F-0881-5F6C-B587-7AB9D5D6174C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B4BA575F-0881-5F6C-B587-7AB9D5D6174C','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '69D8F76F-C19C-5086-87DA-12E3C4749C78', 'sequence': {'long': 474}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8667136}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'69D8F76F-C19C-5086-87DA-12E3C4749C78','474','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706866433355357','aue_mmap','8667136','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'69D8F76F-C19C-5086-87DA-12E3C4749C78','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'69D8F76F-C19C-5086-87DA-12E3C4749C78','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'69D8F76F-C19C-5086-87DA-12E3C4749C78','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '52369FF3-41AF-59AB-AEF5-C09299EDCF7E', 'sequence': {'long': 475}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10825728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'52369FF3-41AF-59AB-AEF5-C09299EDCF7E','475','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706866433355357','aue_mmap','10825728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'52369FF3-41AF-59AB-AEF5-C09299EDCF7E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'52369FF3-41AF-59AB-AEF5-C09299EDCF7E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'52369FF3-41AF-59AB-AEF5-C09299EDCF7E','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '478007C2-0C6F-563D-8053-44A62CA2F2E0', 'sequence': {'long': 476}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10825728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'478007C2-0C6F-563D-8053-44A62CA2F2E0','476','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706866433355357','aue_mmap','10825728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'478007C2-0C6F-563D-8053-44A62CA2F2E0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'478007C2-0C6F-563D-8053-44A62CA2F2E0','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'478007C2-0C6F-563D-8053-44A62CA2F2E0','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6482B527-5914-5EAF-85D2-5BCCE59C2DE7', 'sequence': {'long': 477}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6482B527-5914-5EAF-85D2-5BCCE59C2DE7','477','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706866433355357','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6482B527-5914-5EAF-85D2-5BCCE59C2DE7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6482B527-5914-5EAF-85D2-5BCCE59C2DE7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6482B527-5914-5EAF-85D2-5BCCE59C2DE7','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6B1F3E81-D2B6-588D-84B7-F97C557BEBC9', 'sequence': {'long': 478}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6B1F3E81-D2B6-588D-84B7-F97C557BEBC9','478','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706866433355357','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6B1F3E81-D2B6-588D-84B7-F97C557BEBC9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6B1F3E81-D2B6-588D-84B7-F97C557BEBC9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6B1F3E81-D2B6-588D-84B7-F97C557BEBC9','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EADDF752-D28B-5C2D-A4B4-0D26690C10C8', 'sequence': {'long': 479}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EADDF752-D28B-5C2D-A4B4-0D26690C10C8','479','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866433355357','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EADDF752-D28B-5C2D-A4B4-0D26690C10C8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EADDF752-D28B-5C2D-A4B4-0D26690C10C8','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EADDF752-D28B-5C2D-A4B4-0D26690C10C8','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B1F9690F-F5A5-56E5-AC72-5137F7B00BAD', 'sequence': {'long': 480}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B1F9690F-F5A5-56E5-AC72-5137F7B00BAD','480','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866433355357','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B1F9690F-F5A5-56E5-AC72-5137F7B00BAD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B1F9690F-F5A5-56E5-AC72-5137F7B00BAD','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B1F9690F-F5A5-56E5-AC72-5137F7B00BAD','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '51887E61-B1B5-5EEA-B832-390020DC39DD', 'sequence': {'long': 481}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10829824}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'51887E61-B1B5-5EEA-B832-390020DC39DD','481','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866433355357','aue_mmap','10829824','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'51887E61-B1B5-5EEA-B832-390020DC39DD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'51887E61-B1B5-5EEA-B832-390020DC39DD','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'51887E61-B1B5-5EEA-B832-390020DC39DD','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4D952C86-CC25-5976-A5A1-69CE8912CB3B', 'sequence': {'long': 482}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10829824}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'4D952C86-CC25-5976-A5A1-69CE8912CB3B','482','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866433355357','aue_mmap','10829824','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4D952C86-CC25-5976-A5A1-69CE8912CB3B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4D952C86-CC25-5976-A5A1-69CE8912CB3B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4D952C86-CC25-5976-A5A1-69CE8912CB3B','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1C218B4C-CD2E-58DC-ABBE-DED2A9B37333', 'sequence': {'long': 483}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14716928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1C218B4C-CD2E-58DC-ABBE-DED2A9B37333','483','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866433355357','aue_mmap','14716928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1C218B4C-CD2E-58DC-ABBE-DED2A9B37333','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1C218B4C-CD2E-58DC-ABBE-DED2A9B37333','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1C218B4C-CD2E-58DC-ABBE-DED2A9B37333','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EA059646-351F-56EB-96E3-6614D678416C', 'sequence': {'long': 484}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14716928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EA059646-351F-56EB-96E3-6614D678416C','484','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866433355357','aue_mmap','14716928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EA059646-351F-56EB-96E3-6614D678416C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EA059646-351F-56EB-96E3-6614D678416C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EA059646-351F-56EB-96E3-6614D678416C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5150750D-3F36-5111-B716-896D09127BE7', 'sequence': {'long': 485}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5150750D-3F36-5111-B716-896D09127BE7','485','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866433355357','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5150750D-3F36-5111-B716-896D09127BE7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5150750D-3F36-5111-B716-896D09127BE7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5150750D-3F36-5111-B716-896D09127BE7','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BD13FBF9-9CF7-5C7F-BCE2-21218577DA21', 'sequence': {'long': 486}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': {'string': '/lib/libelf.so.2'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BD13FBF9-9CF7-5C7F-BCE2-21218577DA21','486','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','/lib/libelf.so.2','1522706866433355357','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BD13FBF9-9CF7-5C7F-BCE2-21218577DA21','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BD13FBF9-9CF7-5C7F-BCE2-21218577DA21','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BD13FBF9-9CF7-5C7F-BCE2-21218577DA21','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A122D371-9145-5EA0-B278-FFA4DEC9CD86', 'sequence': {'long': 487}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A122D371-9145-5EA0-B278-FFA4DEC9CD86','487','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706866433355357','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A122D371-9145-5EA0-B278-FFA4DEC9CD86','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A122D371-9145-5EA0-B278-FFA4DEC9CD86','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A122D371-9145-5EA0-B278-FFA4DEC9CD86','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '83231D56-6A13-51CE-ADEB-08590BD98483', 'sequence': {'long': 488}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'83231D56-6A13-51CE-ADEB-08590BD98483','488','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706866433355357','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'83231D56-6A13-51CE-ADEB-08590BD98483','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'83231D56-6A13-51CE-ADEB-08590BD98483','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'83231D56-6A13-51CE-ADEB-08590BD98483','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C82B3FEC-A596-5AF0-B2BB-288EFA8E97A9', 'sequence': {'long': 489}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17031168}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C82B3FEC-A596-5AF0-B2BB-288EFA8E97A9','489','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706866433355357','aue_mmap','17031168','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C82B3FEC-A596-5AF0-B2BB-288EFA8E97A9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C82B3FEC-A596-5AF0-B2BB-288EFA8E97A9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C82B3FEC-A596-5AF0-B2BB-288EFA8E97A9','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E88B6392-73A1-5540-A918-78F4FDEB7A17', 'sequence': {'long': 490}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17031168}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E88B6392-73A1-5540-A918-78F4FDEB7A17','490','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706866433355357','aue_mmap','17031168','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E88B6392-73A1-5540-A918-78F4FDEB7A17','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E88B6392-73A1-5540-A918-78F4FDEB7A17','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E88B6392-73A1-5540-A918-78F4FDEB7A17','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E510E4E6-0DC1-5D3F-B2DF-C807AFB176E8', 'sequence': {'long': 491}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19222528}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E510E4E6-0DC1-5D3F-B2DF-C807AFB176E8','491','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706866433355357','aue_mmap','19222528','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E510E4E6-0DC1-5D3F-B2DF-C807AFB176E8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E510E4E6-0DC1-5D3F-B2DF-C807AFB176E8','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E510E4E6-0DC1-5D3F-B2DF-C807AFB176E8','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D5BE79E6-0F01-5B0A-B0A8-E7FA04E33E14', 'sequence': {'long': 492}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19222528}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D5BE79E6-0F01-5B0A-B0A8-E7FA04E33E14','492','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706866433355357','aue_mmap','19222528','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D5BE79E6-0F01-5B0A-B0A8-E7FA04E33E14','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D5BE79E6-0F01-5B0A-B0A8-E7FA04E33E14','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D5BE79E6-0F01-5B0A-B0A8-E7FA04E33E14','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E18EC113-E708-530F-859C-70DBB82D9B4F', 'sequence': {'long': 493}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E18EC113-E708-530F-859C-70DBB82D9B4F','493','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706866433355357','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E18EC113-E708-530F-859C-70DBB82D9B4F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E18EC113-E708-530F-859C-70DBB82D9B4F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E18EC113-E708-530F-859C-70DBB82D9B4F','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5D5CE704-73F3-5140-8968-BCC4E6980697', 'sequence': {'long': 494}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5D5CE704-73F3-5140-8968-BCC4E6980697','494','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706866433355357','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5D5CE704-73F3-5140-8968-BCC4E6980697','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5D5CE704-73F3-5140-8968-BCC4E6980697','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5D5CE704-73F3-5140-8968-BCC4E6980697','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '84308914-368D-5D54-9054-49A008D0D5F5', 'sequence': {'long': 495}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'84308914-368D-5D54-9054-49A008D0D5F5','495','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706866433355357','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'84308914-368D-5D54-9054-49A008D0D5F5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'84308914-368D-5D54-9054-49A008D0D5F5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'84308914-368D-5D54-9054-49A008D0D5F5','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F20D60DA-44DD-539D-8CC2-DFD5B3E249AF', 'sequence': {'long': 496}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F20D60DA-44DD-539D-8CC2-DFD5B3E249AF','496','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706866433355357','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F20D60DA-44DD-539D-8CC2-DFD5B3E249AF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F20D60DA-44DD-539D-8CC2-DFD5B3E249AF','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F20D60DA-44DD-539D-8CC2-DFD5B3E249AF','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7E59B09F-4F1E-5E96-9162-A3D409F3E617', 'sequence': {'long': 497}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7E59B09F-4F1E-5E96-9162-A3D409F3E617','497','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706866433355357','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7E59B09F-4F1E-5E96-9162-A3D409F3E617','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7E59B09F-4F1E-5E96-9162-A3D409F3E617','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7E59B09F-4F1E-5E96-9162-A3D409F3E617','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '429E9F3B-10A5-55D0-B49B-C422DD10EAA0', 'sequence': {'long': 498}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '1633500B-D34B-8058-8BD3-ABB7D880915E'}, 'predicateObjectPath': {'string': '/dev/null'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866433355357, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '02'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'429E9F3B-10A5-55D0-B49B-C422DD10EAA0','498','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','1633500B-D34B-8058-8BD3-ABB7D880915E','/dev/null','1522706866433355357','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','02','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'429E9F3B-10A5-55D0-B49B-C422DD10EAA0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'429E9F3B-10A5-55D0-B49B-C422DD10EAA0','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'429E9F3B-10A5-55D0-B49B-C422DD10EAA0','1633500B-D34B-8058-8BD3-ABB7D880915E','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '435FA16D-C9FA-5A06-A2A9-A3F7E1C5E2E4', 'sequence': {'long': 499}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '1633500B-D34B-8058-8BD3-ABB7D880915E'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'435FA16D-C9FA-5A06-A2A9-A3F7E1C5E2E4','499','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','1633500B-D34B-8058-8BD3-ABB7D880915E','1522706866443356908','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'435FA16D-C9FA-5A06-A2A9-A3F7E1C5E2E4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'435FA16D-C9FA-5A06-A2A9-A3F7E1C5E2E4','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'435FA16D-C9FA-5A06-A2A9-A3F7E1C5E2E4','1633500B-D34B-8058-8BD3-ABB7D880915E','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C427E685-25E6-54E1-BABA-0176F67F8678', 'sequence': {'long': 500}, 'type': 'EVENT_MODIFY_PROCESS', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_umask'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '18', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C427E685-25E6-54E1-BABA-0176F67F8678','500','EVENT_MODIFY_PROCESS','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','1522706866443356908','aue_umask','83c8ed1f-5045-dbcd-b39f-918f0df4f851','18','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C427E685-25E6-54E1-BABA-0176F67F8678','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C427E685-25E6-54E1-BABA-0176F67F8678','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C427E685-25E6-54E1-BABA-0176F67F8678','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'EDC9C006-38C1-1659-8138-925D3916B899', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'EDC9C006-38C1-1659-8138-925D3916B899','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EDC9C006-38C1-1659-8138-925D3916B899','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EDC9C006-38C1-1659-8138-925D3916B899','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '54C12129-9F1B-5B7D-A18B-E6CAEDE4F60F', 'sequence': {'long': 501}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'EDC9C006-38C1-1659-8138-925D3916B899'}, 'predicateObjectPath': {'string': '/dev/mem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'54C12129-9F1B-5B7D-A18B-E6CAEDE4F60F','501','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','EDC9C006-38C1-1659-8138-925D3916B899','/dev/mem','1522706866443356908','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54C12129-9F1B-5B7D-A18B-E6CAEDE4F60F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54C12129-9F1B-5B7D-A18B-E6CAEDE4F60F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'54C12129-9F1B-5B7D-A18B-E6CAEDE4F60F','EDC9C006-38C1-1659-8138-925D3916B899','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '0C51AAE3-0594-4A51-9405-4FC4214A0041', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'0C51AAE3-0594-4A51-9405-4FC4214A0041','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C51AAE3-0594-4A51-9405-4FC4214A0041','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C51AAE3-0594-4A51-9405-4FC4214A0041','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F9C15ACA-D047-5088-AE3F-A1EDF0077D50', 'sequence': {'long': 502}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '4', 'return_value': '4', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F9C15ACA-D047-5088-AE3F-A1EDF0077D50','502','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866443356908','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','4','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F9C15ACA-D047-5088-AE3F-A1EDF0077D50','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F9C15ACA-D047-5088-AE3F-A1EDF0077D50','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F9C15ACA-D047-5088-AE3F-A1EDF0077D50','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3AE321BC-C80F-5052-91A7-E4B9934098B7', 'sequence': {'long': 503}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3AE321BC-C80F-5052-91A7-E4B9934098B7','503','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866443356908','aue_read','4','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3AE321BC-C80F-5052-91A7-E4B9934098B7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3AE321BC-C80F-5052-91A7-E4B9934098B7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3AE321BC-C80F-5052-91A7-E4B9934098B7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '70EBD6C2-F336-56D7-BE43-24EFEDAC1E23', 'sequence': {'long': 504}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1360}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'70EBD6C2-F336-56D7-BE43-24EFEDAC1E23','504','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866443356908','aue_read','1360','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'70EBD6C2-F336-56D7-BE43-24EFEDAC1E23','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'70EBD6C2-F336-56D7-BE43-24EFEDAC1E23','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'70EBD6C2-F336-56D7-BE43-24EFEDAC1E23','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E34BC1DD-E0E7-5D5C-9FEA-23C3D56B4F12', 'sequence': {'long': 505}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79353168}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E34BC1DD-E0E7-5D5C-9FEA-23C3D56B4F12','505','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866443356908','aue_lseek','79353168','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E34BC1DD-E0E7-5D5C-9FEA-23C3D56B4F12','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E34BC1DD-E0E7-5D5C-9FEA-23C3D56B4F12','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E34BC1DD-E0E7-5D5C-9FEA-23C3D56B4F12','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '81656B23-27A5-53A3-A1A3-873A6AD05C71', 'sequence': {'long': 506}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1360}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'81656B23-27A5-53A3-A1A3-873A6AD05C71','506','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866443356908','aue_read','1360','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'81656B23-27A5-53A3-A1A3-873A6AD05C71','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'81656B23-27A5-53A3-A1A3-873A6AD05C71','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'81656B23-27A5-53A3-A1A3-873A6AD05C71','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '65676F84-9927-5A2D-A034-680B8DBD6583', 'sequence': {'long': 507}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 224}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'65676F84-9927-5A2D-A034-680B8DBD6583','507','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866443356908','aue_read','224','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'65676F84-9927-5A2D-A034-680B8DBD6583','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'65676F84-9927-5A2D-A034-680B8DBD6583','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'65676F84-9927-5A2D-A034-680B8DBD6583','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '20D1E042-DABF-5C55-BD3B-A3DB3777365D', 'sequence': {'long': 508}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2192}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'20D1E042-DABF-5C55-BD3B-A3DB3777365D','508','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866443356908','aue_read','2192','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'20D1E042-DABF-5C55-BD3B-A3DB3777365D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'20D1E042-DABF-5C55-BD3B-A3DB3777365D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'20D1E042-DABF-5C55-BD3B-A3DB3777365D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AB815EC9-9313-51D0-8B98-8508D38C03E5', 'sequence': {'long': 509}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 50417920}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AB815EC9-9313-51D0-8B98-8508D38C03E5','509','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866443356908','aue_lseek','50417920','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AB815EC9-9313-51D0-8B98-8508D38C03E5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AB815EC9-9313-51D0-8B98-8508D38C03E5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AB815EC9-9313-51D0-8B98-8508D38C03E5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5132B2C8-C5EA-58C8-8F00-6FF2A2BEAE80', 'sequence': {'long': 510}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 48}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5132B2C8-C5EA-58C8-8F00-6FF2A2BEAE80','510','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866443356908','aue_read','48','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5132B2C8-C5EA-58C8-8F00-6FF2A2BEAE80','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5132B2C8-C5EA-58C8-8F00-6FF2A2BEAE80','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5132B2C8-C5EA-58C8-8F00-6FF2A2BEAE80','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FACC2865-684C-56F4-8BBC-E30BBA97A1AC', 'sequence': {'long': 511}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FACC2865-684C-56F4-8BBC-E30BBA97A1AC','511','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866443356908','aue_read','4','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FACC2865-684C-56F4-8BBC-E30BBA97A1AC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FACC2865-684C-56F4-8BBC-E30BBA97A1AC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FACC2865-684C-56F4-8BBC-E30BBA97A1AC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '963A3F22-8C52-5C7F-899C-A0A9B51E15D2', 'sequence': {'long': 512}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2048}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'963A3F22-8C52-5C7F-899C-A0A9B51E15D2','512','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866443356908','aue_read','2048','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'963A3F22-8C52-5C7F-899C-A0A9B51E15D2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'963A3F22-8C52-5C7F-899C-A0A9B51E15D2','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'963A3F22-8C52-5C7F-899C-A0A9B51E15D2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DA0EAE40-8C2B-55C6-BC85-CD9A1858B25F', 'sequence': {'long': 513}, 'type': 'EVENT_CHANGE_PRINCIPAL', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_setgid'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'gid'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03E9'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'arg_gid': '1001', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_arg_gid,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DA0EAE40-8C2B-55C6-BC85-CD9A1858B25F','513','EVENT_CHANGE_PRINCIPAL','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','1522706866443356908','aue_setgid','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','gid','03E9','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','1001','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DA0EAE40-8C2B-55C6-BC85-CD9A1858B25F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DA0EAE40-8C2B-55C6-BC85-CD9A1858B25F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DA0EAE40-8C2B-55C6-BC85-CD9A1858B25F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '440B8FE1-0097-508C-8ED0-C38BF32EE76F', 'sequence': {'long': 514}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '5', 'return_value': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'440B8FE1-0097-508C-8ED0-C38BF32EE76F','514','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706866443356908','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','5','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'440B8FE1-0097-508C-8ED0-C38BF32EE76F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'440B8FE1-0097-508C-8ED0-C38BF32EE76F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'440B8FE1-0097-508C-8ED0-C38BF32EE76F','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '119C2787-1D9A-5265-8B8B-96834DB8B20C', 'sequence': {'long': 515}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 272}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/nsswitch.conf', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'119C2787-1D9A-5265-8B8B-96834DB8B20C','515','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706866443356908','aue_read','272','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/nsswitch.conf','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'119C2787-1D9A-5265-8B8B-96834DB8B20C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'119C2787-1D9A-5265-8B8B-96834DB8B20C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'119C2787-1D9A-5265-8B8B-96834DB8B20C','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DB0B1D07-EE14-557E-AC7C-B281701DB41B', 'sequence': {'long': 516}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/nsswitch.conf', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DB0B1D07-EE14-557E-AC7C-B281701DB41B','516','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706866443356908','aue_read','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/nsswitch.conf','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DB0B1D07-EE14-557E-AC7C-B281701DB41B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DB0B1D07-EE14-557E-AC7C-B281701DB41B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DB0B1D07-EE14-557E-AC7C-B281701DB41B','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '333F358A-8120-5D45-A45D-F5F31F089FEE', 'sequence': {'long': 517}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866443356908, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'333F358A-8120-5D45-A45D-F5F31F089FEE','517','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','1522706866443356908','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'333F358A-8120-5D45-A45D-F5F31F089FEE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'333F358A-8120-5D45-A45D-F5F31F089FEE','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'333F358A-8120-5D45-A45D-F5F31F089FEE','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D36C3387-A8CA-573D-958A-CA8844F8D87F', 'sequence': {'long': 518}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '5', 'return_value': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D36C3387-A8CA-573D-958A-CA8844F8D87F','518','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706866453351298','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','5','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D36C3387-A8CA-573D-958A-CA8844F8D87F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D36C3387-A8CA-573D-958A-CA8844F8D87F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D36C3387-A8CA-573D-958A-CA8844F8D87F','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C59350AA-F19C-5595-8D6D-79B4CAC0107F', 'sequence': {'long': 519}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C59350AA-F19C-5595-8D6D-79B4CAC0107F','519','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706866453351298','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C59350AA-F19C-5595-8D6D-79B4CAC0107F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C59350AA-F19C-5595-8D6D-79B4CAC0107F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C59350AA-F19C-5595-8D6D-79B4CAC0107F','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C0DAF1D8-E873-59E0-9A87-928DFB0CC9BC', 'sequence': {'long': 520}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C0DAF1D8-E873-59E0-9A87-928DFB0CC9BC','520','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706866453351298','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C0DAF1D8-E873-59E0-9A87-928DFB0CC9BC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C0DAF1D8-E873-59E0-9A87-928DFB0CC9BC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C0DAF1D8-E873-59E0-9A87-928DFB0CC9BC','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '11DA9A10-C1A8-55E8-99CB-D06474C9F938', 'sequence': {'long': 521}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'11DA9A10-C1A8-55E8-99CB-D06474C9F938','521','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706866453351298','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'11DA9A10-C1A8-55E8-99CB-D06474C9F938','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'11DA9A10-C1A8-55E8-99CB-D06474C9F938','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'11DA9A10-C1A8-55E8-99CB-D06474C9F938','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0FB8D61B-6CFE-5056-AACD-53865FF8AEBC', 'sequence': {'long': 522}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0FB8D61B-6CFE-5056-AACD-53865FF8AEBC','522','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706866453351298','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0FB8D61B-6CFE-5056-AACD-53865FF8AEBC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0FB8D61B-6CFE-5056-AACD-53865FF8AEBC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0FB8D61B-6CFE-5056-AACD-53865FF8AEBC','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1BE89C1B-27D0-5AF6-9923-6D0A07CC529F', 'sequence': {'long': 523}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1BE89C1B-27D0-5AF6-9923-6D0A07CC529F','523','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706866453351298','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1BE89C1B-27D0-5AF6-9923-6D0A07CC529F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1BE89C1B-27D0-5AF6-9923-6D0A07CC529F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1BE89C1B-27D0-5AF6-9923-6D0A07CC529F','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E48FB89B-5309-5919-BDB8-2AC742C3F903', 'sequence': {'long': 524}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E48FB89B-5309-5919-BDB8-2AC742C3F903','524','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706866453351298','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E48FB89B-5309-5919-BDB8-2AC742C3F903','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E48FB89B-5309-5919-BDB8-2AC742C3F903','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E48FB89B-5309-5919-BDB8-2AC742C3F903','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '36F2B56A-F711-5FE1-A354-2369AB71682D', 'sequence': {'long': 525}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'36F2B56A-F711-5FE1-A354-2369AB71682D','525','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706866453351298','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'36F2B56A-F711-5FE1-A354-2369AB71682D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'36F2B56A-F711-5FE1-A354-2369AB71682D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'36F2B56A-F711-5FE1-A354-2369AB71682D','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8997B96B-8786-5063-B736-45AC5EB9D375', 'sequence': {'long': 526}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8997B96B-8786-5063-B736-45AC5EB9D375','526','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706866453351298','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8997B96B-8786-5063-B736-45AC5EB9D375','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8997B96B-8786-5063-B736-45AC5EB9D375','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8997B96B-8786-5063-B736-45AC5EB9D375','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '21587E5A-57F9-5AD7-9A40-3E0A62B37831', 'sequence': {'long': 527}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'21587E5A-57F9-5AD7-9A40-3E0A62B37831','527','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706866453351298','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'21587E5A-57F9-5AD7-9A40-3E0A62B37831','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'21587E5A-57F9-5AD7-9A40-3E0A62B37831','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'21587E5A-57F9-5AD7-9A40-3E0A62B37831','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9A19D577-C728-51E0-A5F2-B8ADB08164E6', 'sequence': {'long': 528}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9A19D577-C728-51E0-A5F2-B8ADB08164E6','528','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','1522706866453351298','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9A19D577-C728-51E0-A5F2-B8ADB08164E6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9A19D577-C728-51E0-A5F2-B8ADB08164E6','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9A19D577-C728-51E0-A5F2-B8ADB08164E6','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '154CD1C2-8134-685D-B481-18BC1D680643', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'154CD1C2-8134-685D-B481-18BC1D680643','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'154CD1C2-8134-685D-B481-18BC1D680643','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'154CD1C2-8134-685D-B481-18BC1D680643','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '02C0DDD4-AA81-5228-871A-981F8CBF2EE7', 'sequence': {'long': 529}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '154CD1C2-8134-685D-B481-18BC1D680643'}, 'predicateObjectPath': {'string': '/home/darpa/.lsof_ta1-cadets'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '5', 'return_value': '5', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'02C0DDD4-AA81-5228-871A-981F8CBF2EE7','529','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','154CD1C2-8134-685D-B481-18BC1D680643','/home/darpa/.lsof_ta1-cadets','1522706866453351298','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','5','5','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'02C0DDD4-AA81-5228-871A-981F8CBF2EE7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'02C0DDD4-AA81-5228-871A-981F8CBF2EE7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'02C0DDD4-AA81-5228-871A-981F8CBF2EE7','154CD1C2-8134-685D-B481-18BC1D680643','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0226D551-2CC5-5249-9E73-96FB20EB1F62', 'sequence': {'long': 530}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0226D551-2CC5-5249-9E73-96FB20EB1F62','530','EVENT_FCNTL','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','1522706866453351298','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0226D551-2CC5-5249-9E73-96FB20EB1F62','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0226D551-2CC5-5249-9E73-96FB20EB1F62','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1183F938-83E1-568F-A753-1FB479A2D81C', 'sequence': {'long': 531}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '154CD1C2-8134-685D-B481-18BC1D680643'}, 'predicateObjectPath': {'string': '/home/darpa/.lsof_ta1-cadets'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1532}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/home/darpa/.lsof_ta1-cadets', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1183F938-83E1-568F-A753-1FB479A2D81C','531','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','154CD1C2-8134-685D-B481-18BC1D680643','/home/darpa/.lsof_ta1-cadets','1522706866453351298','aue_read','1532','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/home/darpa/.lsof_ta1-cadets','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1183F938-83E1-568F-A753-1FB479A2D81C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1183F938-83E1-568F-A753-1FB479A2D81C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1183F938-83E1-568F-A753-1FB479A2D81C','154CD1C2-8134-685D-B481-18BC1D680643','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CE92B722-8D46-5D1A-8D56-D2E5C8F42A5D', 'sequence': {'long': 532}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '154CD1C2-8134-685D-B481-18BC1D680643'}, 'predicateObjectPath': {'string': '/home/darpa/.lsof_ta1-cadets'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/home/darpa/.lsof_ta1-cadets', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CE92B722-8D46-5D1A-8D56-D2E5C8F42A5D','532','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','154CD1C2-8134-685D-B481-18BC1D680643','/home/darpa/.lsof_ta1-cadets','1522706866453351298','aue_read','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/home/darpa/.lsof_ta1-cadets','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CE92B722-8D46-5D1A-8D56-D2E5C8F42A5D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CE92B722-8D46-5D1A-8D56-D2E5C8F42A5D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CE92B722-8D46-5D1A-8D56-D2E5C8F42A5D','154CD1C2-8134-685D-B481-18BC1D680643','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FD8BC36A-CFC8-5DF4-8B8D-AAC985952751', 'sequence': {'long': 533}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '154CD1C2-8134-685D-B481-18BC1D680643'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FD8BC36A-CFC8-5DF4-8B8D-AAC985952751','533','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','154CD1C2-8134-685D-B481-18BC1D680643','1522706866453351298','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FD8BC36A-CFC8-5DF4-8B8D-AAC985952751','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FD8BC36A-CFC8-5DF4-8B8D-AAC985952751','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FD8BC36A-CFC8-5DF4-8B8D-AAC985952751','154CD1C2-8134-685D-B481-18BC1D680643','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3DA9F955-4858-5F71-BFC0-7EDC3BE6FB61', 'sequence': {'long': 534}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82801744}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3DA9F955-4858-5F71-BFC0-7EDC3BE6FB61','534','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866453351298','aue_lseek','82801744','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3DA9F955-4858-5F71-BFC0-7EDC3BE6FB61','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3DA9F955-4858-5F71-BFC0-7EDC3BE6FB61','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3DA9F955-4858-5F71-BFC0-7EDC3BE6FB61','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D7BAB769-D1B9-54C0-9F8D-7D793653C3FB', 'sequence': {'long': 535}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D7BAB769-D1B9-54C0-9F8D-7D793653C3FB','535','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866453351298','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D7BAB769-D1B9-54C0-9F8D-7D793653C3FB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D7BAB769-D1B9-54C0-9F8D-7D793653C3FB','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D7BAB769-D1B9-54C0-9F8D-7D793653C3FB','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0A7B3DF6-0E40-5475-AC19-0EF4AF05C71E', 'sequence': {'long': 536}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0A7B3DF6-0E40-5475-AC19-0EF4AF05C71E','536','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866453351298','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0A7B3DF6-0E40-5475-AC19-0EF4AF05C71E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0A7B3DF6-0E40-5475-AC19-0EF4AF05C71E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0A7B3DF6-0E40-5475-AC19-0EF4AF05C71E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7FB568AC-3FB7-530E-BF9D-0C0B4C70224E', 'sequence': {'long': 537}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 187847760}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7FB568AC-3FB7-530E-BF9D-0C0B4C70224E','537','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866453351298','aue_lseek','187847760','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7FB568AC-3FB7-530E-BF9D-0C0B4C70224E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7FB568AC-3FB7-530E-BF9D-0C0B4C70224E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7FB568AC-3FB7-530E-BF9D-0C0B4C70224E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8CCA3BE2-BCEF-5810-8277-235CB890BBC7', 'sequence': {'long': 538}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8CCA3BE2-BCEF-5810-8277-235CB890BBC7','538','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866453351298','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8CCA3BE2-BCEF-5810-8277-235CB890BBC7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8CCA3BE2-BCEF-5810-8277-235CB890BBC7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8CCA3BE2-BCEF-5810-8277-235CB890BBC7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '53FA31FE-2201-52FA-8507-7C7E66E56549', 'sequence': {'long': 539}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 187847888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'53FA31FE-2201-52FA-8507-7C7E66E56549','539','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866453351298','aue_lseek','187847888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'53FA31FE-2201-52FA-8507-7C7E66E56549','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'53FA31FE-2201-52FA-8507-7C7E66E56549','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'53FA31FE-2201-52FA-8507-7C7E66E56549','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9B2B7B34-D98C-5BFE-A029-62A6653DF084', 'sequence': {'long': 540}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9B2B7B34-D98C-5BFE-A029-62A6653DF084','540','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866453351298','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9B2B7B34-D98C-5BFE-A029-62A6653DF084','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9B2B7B34-D98C-5BFE-A029-62A6653DF084','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9B2B7B34-D98C-5BFE-A029-62A6653DF084','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9CE6147E-F768-5F11-9710-47E714F0EFD6', 'sequence': {'long': 541}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81520800}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9CE6147E-F768-5F11-9710-47E714F0EFD6','541','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866453351298','aue_lseek','81520800','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9CE6147E-F768-5F11-9710-47E714F0EFD6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9CE6147E-F768-5F11-9710-47E714F0EFD6','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9CE6147E-F768-5F11-9710-47E714F0EFD6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5D8399A6-8035-5A9F-BF75-202BE2A709C5', 'sequence': {'long': 542}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5D8399A6-8035-5A9F-BF75-202BE2A709C5','542','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866453351298','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5D8399A6-8035-5A9F-BF75-202BE2A709C5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5D8399A6-8035-5A9F-BF75-202BE2A709C5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5D8399A6-8035-5A9F-BF75-202BE2A709C5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CD23CDC1-998C-5CB4-866A-5E6E35FC3D5A', 'sequence': {'long': 543}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CD23CDC1-998C-5CB4-866A-5E6E35FC3D5A','543','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866453351298','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CD23CDC1-998C-5CB4-866A-5E6E35FC3D5A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CD23CDC1-998C-5CB4-866A-5E6E35FC3D5A','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CD23CDC1-998C-5CB4-866A-5E6E35FC3D5A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A48C4CA8-C247-538D-B89E-D56BDDB57027', 'sequence': {'long': 544}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 188678144}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A48C4CA8-C247-538D-B89E-D56BDDB57027','544','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866453351298','aue_lseek','188678144','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A48C4CA8-C247-538D-B89E-D56BDDB57027','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A48C4CA8-C247-538D-B89E-D56BDDB57027','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A48C4CA8-C247-538D-B89E-D56BDDB57027','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E3D17D0B-AF3B-5C19-84F1-C3504AC28F15', 'sequence': {'long': 545}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866453351298, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E3D17D0B-AF3B-5C19-84F1-C3504AC28F15','545','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866453351298','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E3D17D0B-AF3B-5C19-84F1-C3504AC28F15','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E3D17D0B-AF3B-5C19-84F1-C3504AC28F15','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E3D17D0B-AF3B-5C19-84F1-C3504AC28F15','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5C92B7E4-5633-5CF0-8A8B-0E4DC9D0DE53', 'sequence': {'long': 546}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5C92B7E4-5633-5CF0-8A8B-0E4DC9D0DE53','546','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5C92B7E4-5633-5CF0-8A8B-0E4DC9D0DE53','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5C92B7E4-5633-5CF0-8A8B-0E4DC9D0DE53','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5C92B7E4-5633-5CF0-8A8B-0E4DC9D0DE53','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AE589D45-B442-54F5-9922-5D766E799364', 'sequence': {'long': 547}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AE589D45-B442-54F5-9922-5D766E799364','547','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AE589D45-B442-54F5-9922-5D766E799364','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AE589D45-B442-54F5-9922-5D766E799364','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AE589D45-B442-54F5-9922-5D766E799364','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '67B8430A-43F4-50A9-8F05-C5B222089DE8', 'sequence': {'long': 548}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'67B8430A-43F4-50A9-8F05-C5B222089DE8','548','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'67B8430A-43F4-50A9-8F05-C5B222089DE8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'67B8430A-43F4-50A9-8F05-C5B222089DE8','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'67B8430A-43F4-50A9-8F05-C5B222089DE8','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D21619EA-5822-56A2-9EB6-ABCA27D5FEB1', 'sequence': {'long': 549}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80410784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D21619EA-5822-56A2-9EB6-ABCA27D5FEB1','549','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866463352938','aue_lseek','80410784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D21619EA-5822-56A2-9EB6-ABCA27D5FEB1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D21619EA-5822-56A2-9EB6-ABCA27D5FEB1','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D21619EA-5822-56A2-9EB6-ABCA27D5FEB1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '977FB05A-7CBE-5EB3-942E-7C5C689E7BA7', 'sequence': {'long': 550}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'977FB05A-7CBE-5EB3-942E-7C5C689E7BA7','550','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'977FB05A-7CBE-5EB3-942E-7C5C689E7BA7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'977FB05A-7CBE-5EB3-942E-7C5C689E7BA7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'977FB05A-7CBE-5EB3-942E-7C5C689E7BA7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '83DFC5F2-2157-535F-AF70-4C4E2A153A64', 'sequence': {'long': 551}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'83DFC5F2-2157-535F-AF70-4C4E2A153A64','551','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'83DFC5F2-2157-535F-AF70-4C4E2A153A64','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'83DFC5F2-2157-535F-AF70-4C4E2A153A64','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'83DFC5F2-2157-535F-AF70-4C4E2A153A64','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DFE72A14-0461-59DF-AAA1-F8B198F845BE', 'sequence': {'long': 552}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82744400}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DFE72A14-0461-59DF-AAA1-F8B198F845BE','552','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866463352938','aue_lseek','82744400','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DFE72A14-0461-59DF-AAA1-F8B198F845BE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DFE72A14-0461-59DF-AAA1-F8B198F845BE','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DFE72A14-0461-59DF-AAA1-F8B198F845BE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '84337089-845B-53FC-B25D-7BA66B028358', 'sequence': {'long': 553}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'84337089-845B-53FC-B25D-7BA66B028358','553','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'84337089-845B-53FC-B25D-7BA66B028358','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'84337089-845B-53FC-B25D-7BA66B028358','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'84337089-845B-53FC-B25D-7BA66B028358','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7C8B3CFC-3E5B-55FD-9067-63E4556ABBFE', 'sequence': {'long': 554}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7C8B3CFC-3E5B-55FD-9067-63E4556ABBFE','554','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7C8B3CFC-3E5B-55FD-9067-63E4556ABBFE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7C8B3CFC-3E5B-55FD-9067-63E4556ABBFE','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7C8B3CFC-3E5B-55FD-9067-63E4556ABBFE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F27F1906-C2EE-543A-A8A6-66468E055BE1', 'sequence': {'long': 555}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F27F1906-C2EE-543A-A8A6-66468E055BE1','555','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F27F1906-C2EE-543A-A8A6-66468E055BE1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F27F1906-C2EE-543A-A8A6-66468E055BE1','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F27F1906-C2EE-543A-A8A6-66468E055BE1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F1572133-60E5-5FCB-ACE4-6407388A72C4', 'sequence': {'long': 556}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F1572133-60E5-5FCB-ACE4-6407388A72C4','556','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F1572133-60E5-5FCB-ACE4-6407388A72C4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F1572133-60E5-5FCB-ACE4-6407388A72C4','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F1572133-60E5-5FCB-ACE4-6407388A72C4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '05531654-01FB-5E2B-955C-B817DAE35646', 'sequence': {'long': 557}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'05531654-01FB-5E2B-955C-B817DAE35646','557','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'05531654-01FB-5E2B-955C-B817DAE35646','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'05531654-01FB-5E2B-955C-B817DAE35646','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'05531654-01FB-5E2B-955C-B817DAE35646','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3CAA4DE-50F1-50CE-A41C-2457815CEAAC', 'sequence': {'long': 558}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3CAA4DE-50F1-50CE-A41C-2457815CEAAC','558','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3CAA4DE-50F1-50CE-A41C-2457815CEAAC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3CAA4DE-50F1-50CE-A41C-2457815CEAAC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B3CAA4DE-50F1-50CE-A41C-2457815CEAAC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D7B0F5C9-4EAF-5EDD-A6A9-0D5F88B937F9', 'sequence': {'long': 559}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83089568}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D7B0F5C9-4EAF-5EDD-A6A9-0D5F88B937F9','559','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866463352938','aue_lseek','83089568','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D7B0F5C9-4EAF-5EDD-A6A9-0D5F88B937F9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D7B0F5C9-4EAF-5EDD-A6A9-0D5F88B937F9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D7B0F5C9-4EAF-5EDD-A6A9-0D5F88B937F9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '27D0B420-6081-5351-A0EB-50A9CA9FA4EB', 'sequence': {'long': 560}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'27D0B420-6081-5351-A0EB-50A9CA9FA4EB','560','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'27D0B420-6081-5351-A0EB-50A9CA9FA4EB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'27D0B420-6081-5351-A0EB-50A9CA9FA4EB','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'27D0B420-6081-5351-A0EB-50A9CA9FA4EB','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '609CA960-ED0A-5888-AAF3-F534A20C7955', 'sequence': {'long': 561}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83089696}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'609CA960-ED0A-5888-AAF3-F534A20C7955','561','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866463352938','aue_lseek','83089696','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'609CA960-ED0A-5888-AAF3-F534A20C7955','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'609CA960-ED0A-5888-AAF3-F534A20C7955','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'609CA960-ED0A-5888-AAF3-F534A20C7955','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '557D8327-2F4F-517C-B68E-244925467612', 'sequence': {'long': 562}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'557D8327-2F4F-517C-B68E-244925467612','562','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'557D8327-2F4F-517C-B68E-244925467612','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'557D8327-2F4F-517C-B68E-244925467612','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'557D8327-2F4F-517C-B68E-244925467612','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3142FD15-9FCF-5A54-B70B-EB3170847C5D', 'sequence': {'long': 563}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82187344}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3142FD15-9FCF-5A54-B70B-EB3170847C5D','563','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866463352938','aue_lseek','82187344','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3142FD15-9FCF-5A54-B70B-EB3170847C5D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3142FD15-9FCF-5A54-B70B-EB3170847C5D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3142FD15-9FCF-5A54-B70B-EB3170847C5D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B8BD98E6-BCB7-5D7C-A5A2-625750E87492', 'sequence': {'long': 564}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B8BD98E6-BCB7-5D7C-A5A2-625750E87492','564','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B8BD98E6-BCB7-5D7C-A5A2-625750E87492','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B8BD98E6-BCB7-5D7C-A5A2-625750E87492','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B8BD98E6-BCB7-5D7C-A5A2-625750E87492','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0EB107EF-0C0B-56F6-84A8-BF040AA1D3D5', 'sequence': {'long': 565}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0EB107EF-0C0B-56F6-84A8-BF040AA1D3D5','565','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0EB107EF-0C0B-56F6-84A8-BF040AA1D3D5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0EB107EF-0C0B-56F6-84A8-BF040AA1D3D5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0EB107EF-0C0B-56F6-84A8-BF040AA1D3D5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6975383A-62EA-5959-86EF-8AA12BDFAA10', 'sequence': {'long': 566}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80382112}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6975383A-62EA-5959-86EF-8AA12BDFAA10','566','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866463352938','aue_lseek','80382112','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6975383A-62EA-5959-86EF-8AA12BDFAA10','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6975383A-62EA-5959-86EF-8AA12BDFAA10','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6975383A-62EA-5959-86EF-8AA12BDFAA10','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8D555210-4F6B-59F7-B79E-E1FD64FF1A4A', 'sequence': {'long': 567}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8D555210-4F6B-59F7-B79E-E1FD64FF1A4A','567','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8D555210-4F6B-59F7-B79E-E1FD64FF1A4A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8D555210-4F6B-59F7-B79E-E1FD64FF1A4A','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8D555210-4F6B-59F7-B79E-E1FD64FF1A4A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CFCD7753-DC3C-54E7-972C-10366D644408', 'sequence': {'long': 568}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80382240}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CFCD7753-DC3C-54E7-972C-10366D644408','568','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866463352938','aue_lseek','80382240','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CFCD7753-DC3C-54E7-972C-10366D644408','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CFCD7753-DC3C-54E7-972C-10366D644408','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CFCD7753-DC3C-54E7-972C-10366D644408','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0CD64D17-FE42-55F1-B9F3-4CA2B1E8B882', 'sequence': {'long': 569}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0CD64D17-FE42-55F1-B9F3-4CA2B1E8B882','569','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0CD64D17-FE42-55F1-B9F3-4CA2B1E8B882','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0CD64D17-FE42-55F1-B9F3-4CA2B1E8B882','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0CD64D17-FE42-55F1-B9F3-4CA2B1E8B882','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '97C9F651-FDD2-5081-99DD-8FDCDFA3A05C', 'sequence': {'long': 570}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82743296}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'97C9F651-FDD2-5081-99DD-8FDCDFA3A05C','570','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866463352938','aue_lseek','82743296','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'97C9F651-FDD2-5081-99DD-8FDCDFA3A05C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'97C9F651-FDD2-5081-99DD-8FDCDFA3A05C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'97C9F651-FDD2-5081-99DD-8FDCDFA3A05C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F762DD00-CE54-5B10-97B0-EC9327760155', 'sequence': {'long': 571}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F762DD00-CE54-5B10-97B0-EC9327760155','571','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F762DD00-CE54-5B10-97B0-EC9327760155','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F762DD00-CE54-5B10-97B0-EC9327760155','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F762DD00-CE54-5B10-97B0-EC9327760155','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E08BEE9B-6730-5D95-9826-C3CA4CDCE045', 'sequence': {'long': 572}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82743424}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E08BEE9B-6730-5D95-9826-C3CA4CDCE045','572','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866463352938','aue_lseek','82743424','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E08BEE9B-6730-5D95-9826-C3CA4CDCE045','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E08BEE9B-6730-5D95-9826-C3CA4CDCE045','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E08BEE9B-6730-5D95-9826-C3CA4CDCE045','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EFC70D1F-1F40-50AE-A0DD-FC6B815D9334', 'sequence': {'long': 573}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EFC70D1F-1F40-50AE-A0DD-FC6B815D9334','573','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EFC70D1F-1F40-50AE-A0DD-FC6B815D9334','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EFC70D1F-1F40-50AE-A0DD-FC6B815D9334','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EFC70D1F-1F40-50AE-A0DD-FC6B815D9334','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '16580D6D-3868-5E21-83EB-D3E657B22AAB', 'sequence': {'long': 574}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82747392}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'16580D6D-3868-5E21-83EB-D3E657B22AAB','574','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866463352938','aue_lseek','82747392','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'16580D6D-3868-5E21-83EB-D3E657B22AAB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'16580D6D-3868-5E21-83EB-D3E657B22AAB','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'16580D6D-3868-5E21-83EB-D3E657B22AAB','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '072D183C-B978-5C25-B274-C5E41E8B0302', 'sequence': {'long': 575}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866463352938, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'072D183C-B978-5C25-B274-C5E41E8B0302','575','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866463352938','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'072D183C-B978-5C25-B274-C5E41E8B0302','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'072D183C-B978-5C25-B274-C5E41E8B0302','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'072D183C-B978-5C25-B274-C5E41E8B0302','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '184A57B7-7801-5251-94DE-03A372B30FCC', 'sequence': {'long': 576}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82747520}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'184A57B7-7801-5251-94DE-03A372B30FCC','576','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','82747520','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'184A57B7-7801-5251-94DE-03A372B30FCC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'184A57B7-7801-5251-94DE-03A372B30FCC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'184A57B7-7801-5251-94DE-03A372B30FCC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F3B600F6-EC1C-5BFD-A548-A93E1FACE530', 'sequence': {'long': 577}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F3B600F6-EC1C-5BFD-A548-A93E1FACE530','577','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F3B600F6-EC1C-5BFD-A548-A93E1FACE530','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F3B600F6-EC1C-5BFD-A548-A93E1FACE530','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F3B600F6-EC1C-5BFD-A548-A93E1FACE530','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B32D0AC9-7BEF-57B5-90C0-9E3D36CC2BDD', 'sequence': {'long': 578}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B32D0AC9-7BEF-57B5-90C0-9E3D36CC2BDD','578','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B32D0AC9-7BEF-57B5-90C0-9E3D36CC2BDD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B32D0AC9-7BEF-57B5-90C0-9E3D36CC2BDD','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B32D0AC9-7BEF-57B5-90C0-9E3D36CC2BDD','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '47A411E5-134D-5D99-9139-599202AE9ACC', 'sequence': {'long': 579}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'47A411E5-134D-5D99-9139-599202AE9ACC','579','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'47A411E5-134D-5D99-9139-599202AE9ACC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'47A411E5-134D-5D99-9139-599202AE9ACC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'47A411E5-134D-5D99-9139-599202AE9ACC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2D590AD5-0C88-5D94-89B4-35B32834C7EF', 'sequence': {'long': 580}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 197694544}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2D590AD5-0C88-5D94-89B4-35B32834C7EF','580','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','197694544','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2D590AD5-0C88-5D94-89B4-35B32834C7EF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2D590AD5-0C88-5D94-89B4-35B32834C7EF','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2D590AD5-0C88-5D94-89B4-35B32834C7EF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '343E06A3-ACBC-5EC5-A6D7-F98449D2A72C', 'sequence': {'long': 581}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'343E06A3-ACBC-5EC5-A6D7-F98449D2A72C','581','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'343E06A3-ACBC-5EC5-A6D7-F98449D2A72C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'343E06A3-ACBC-5EC5-A6D7-F98449D2A72C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'343E06A3-ACBC-5EC5-A6D7-F98449D2A72C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1848B7D2-B29B-5AFE-998C-59F75C32BFC0', 'sequence': {'long': 582}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 197694672}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1848B7D2-B29B-5AFE-998C-59F75C32BFC0','582','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','197694672','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1848B7D2-B29B-5AFE-998C-59F75C32BFC0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1848B7D2-B29B-5AFE-998C-59F75C32BFC0','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1848B7D2-B29B-5AFE-998C-59F75C32BFC0','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C1094D99-93AC-5937-8E32-B87EE47AAB77', 'sequence': {'long': 583}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C1094D99-93AC-5937-8E32-B87EE47AAB77','583','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C1094D99-93AC-5937-8E32-B87EE47AAB77','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C1094D99-93AC-5937-8E32-B87EE47AAB77','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C1094D99-93AC-5937-8E32-B87EE47AAB77','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AAEA5425-AC28-5EDA-B640-4484648EFB47', 'sequence': {'long': 584}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82842704}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AAEA5425-AC28-5EDA-B640-4484648EFB47','584','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','82842704','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AAEA5425-AC28-5EDA-B640-4484648EFB47','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AAEA5425-AC28-5EDA-B640-4484648EFB47','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AAEA5425-AC28-5EDA-B640-4484648EFB47','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '04BB762A-012A-5800-BE64-1874BE3F023D', 'sequence': {'long': 585}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'04BB762A-012A-5800-BE64-1874BE3F023D','585','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'04BB762A-012A-5800-BE64-1874BE3F023D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'04BB762A-012A-5800-BE64-1874BE3F023D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'04BB762A-012A-5800-BE64-1874BE3F023D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '77812E40-F345-5115-844E-6582F6A18ED6', 'sequence': {'long': 586}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82842832}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'77812E40-F345-5115-844E-6582F6A18ED6','586','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','82842832','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'77812E40-F345-5115-844E-6582F6A18ED6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'77812E40-F345-5115-844E-6582F6A18ED6','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'77812E40-F345-5115-844E-6582F6A18ED6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '12DCFEA9-568B-54D3-A284-8CA7DA419251', 'sequence': {'long': 587}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'12DCFEA9-568B-54D3-A284-8CA7DA419251','587','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'12DCFEA9-568B-54D3-A284-8CA7DA419251','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'12DCFEA9-568B-54D3-A284-8CA7DA419251','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'12DCFEA9-568B-54D3-A284-8CA7DA419251','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C83C8776-C17D-5B52-B3FE-021011D8261E', 'sequence': {'long': 588}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C83C8776-C17D-5B52-B3FE-021011D8261E','588','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C83C8776-C17D-5B52-B3FE-021011D8261E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C83C8776-C17D-5B52-B3FE-021011D8261E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C83C8776-C17D-5B52-B3FE-021011D8261E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '92722D78-E4EC-581E-AD63-406D09936E41', 'sequence': {'long': 589}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'92722D78-E4EC-581E-AD63-406D09936E41','589','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'92722D78-E4EC-581E-AD63-406D09936E41','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'92722D78-E4EC-581E-AD63-406D09936E41','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'92722D78-E4EC-581E-AD63-406D09936E41','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ED07C555-B7ED-5B8F-8480-F0CEB6B6A8E9', 'sequence': {'long': 590}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82580560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ED07C555-B7ED-5B8F-8480-F0CEB6B6A8E9','590','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','82580560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ED07C555-B7ED-5B8F-8480-F0CEB6B6A8E9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ED07C555-B7ED-5B8F-8480-F0CEB6B6A8E9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ED07C555-B7ED-5B8F-8480-F0CEB6B6A8E9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5569F8E0-F78F-5FB9-BC9B-F82770DD061B', 'sequence': {'long': 591}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5569F8E0-F78F-5FB9-BC9B-F82770DD061B','591','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5569F8E0-F78F-5FB9-BC9B-F82770DD061B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5569F8E0-F78F-5FB9-BC9B-F82770DD061B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5569F8E0-F78F-5FB9-BC9B-F82770DD061B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '290AE6DF-A144-51E8-A6A3-2184BEFCDB08', 'sequence': {'long': 592}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'290AE6DF-A144-51E8-A6A3-2184BEFCDB08','592','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'290AE6DF-A144-51E8-A6A3-2184BEFCDB08','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'290AE6DF-A144-51E8-A6A3-2184BEFCDB08','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'290AE6DF-A144-51E8-A6A3-2184BEFCDB08','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EF928CE0-68F9-560D-BE0B-C4E0FC5F95CA', 'sequence': {'long': 593}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80381008}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EF928CE0-68F9-560D-BE0B-C4E0FC5F95CA','593','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','80381008','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EF928CE0-68F9-560D-BE0B-C4E0FC5F95CA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EF928CE0-68F9-560D-BE0B-C4E0FC5F95CA','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EF928CE0-68F9-560D-BE0B-C4E0FC5F95CA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8658DF9D-E9A7-509D-87AE-0D67271555A6', 'sequence': {'long': 594}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8658DF9D-E9A7-509D-87AE-0D67271555A6','594','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8658DF9D-E9A7-509D-87AE-0D67271555A6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8658DF9D-E9A7-509D-87AE-0D67271555A6','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8658DF9D-E9A7-509D-87AE-0D67271555A6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D206ED3E-3DA6-58D5-A76A-A3FBE80167E0', 'sequence': {'long': 595}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80381136}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D206ED3E-3DA6-58D5-A76A-A3FBE80167E0','595','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','80381136','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D206ED3E-3DA6-58D5-A76A-A3FBE80167E0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D206ED3E-3DA6-58D5-A76A-A3FBE80167E0','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D206ED3E-3DA6-58D5-A76A-A3FBE80167E0','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '76DF501E-830D-54CB-8A85-2AB365F9B81E', 'sequence': {'long': 596}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'76DF501E-830D-54CB-8A85-2AB365F9B81E','596','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'76DF501E-830D-54CB-8A85-2AB365F9B81E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'76DF501E-830D-54CB-8A85-2AB365F9B81E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'76DF501E-830D-54CB-8A85-2AB365F9B81E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A9511472-8FAC-5422-B0C2-9D3F60287728', 'sequence': {'long': 597}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80386208}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A9511472-8FAC-5422-B0C2-9D3F60287728','597','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','80386208','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A9511472-8FAC-5422-B0C2-9D3F60287728','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A9511472-8FAC-5422-B0C2-9D3F60287728','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A9511472-8FAC-5422-B0C2-9D3F60287728','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A2316DE3-F217-5EEB-A0F6-A9612F5980D7', 'sequence': {'long': 598}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A2316DE3-F217-5EEB-A0F6-A9612F5980D7','598','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A2316DE3-F217-5EEB-A0F6-A9612F5980D7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A2316DE3-F217-5EEB-A0F6-A9612F5980D7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A2316DE3-F217-5EEB-A0F6-A9612F5980D7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CC643F7A-D535-539F-98D2-2949F25AE11B', 'sequence': {'long': 599}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80386336}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CC643F7A-D535-539F-98D2-2949F25AE11B','599','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','80386336','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CC643F7A-D535-539F-98D2-2949F25AE11B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CC643F7A-D535-539F-98D2-2949F25AE11B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CC643F7A-D535-539F-98D2-2949F25AE11B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AD5F9D02-43D7-5DD6-AC05-A2192A36803D', 'sequence': {'long': 600}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AD5F9D02-43D7-5DD6-AC05-A2192A36803D','600','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AD5F9D02-43D7-5DD6-AC05-A2192A36803D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AD5F9D02-43D7-5DD6-AC05-A2192A36803D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AD5F9D02-43D7-5DD6-AC05-A2192A36803D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '07CC11D7-D0CC-5E54-AF01-22CDBBBD88A1', 'sequence': {'long': 601}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82186240}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'07CC11D7-D0CC-5E54-AF01-22CDBBBD88A1','601','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','82186240','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'07CC11D7-D0CC-5E54-AF01-22CDBBBD88A1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'07CC11D7-D0CC-5E54-AF01-22CDBBBD88A1','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'07CC11D7-D0CC-5E54-AF01-22CDBBBD88A1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E78F461A-982A-561C-931C-5C83EFB1B6D0', 'sequence': {'long': 602}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E78F461A-982A-561C-931C-5C83EFB1B6D0','602','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E78F461A-982A-561C-931C-5C83EFB1B6D0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E78F461A-982A-561C-931C-5C83EFB1B6D0','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E78F461A-982A-561C-931C-5C83EFB1B6D0','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '168E2CA6-914A-528B-B7F0-083532DA6F50', 'sequence': {'long': 603}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82186368}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'168E2CA6-914A-528B-B7F0-083532DA6F50','603','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','82186368','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'168E2CA6-914A-528B-B7F0-083532DA6F50','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'168E2CA6-914A-528B-B7F0-083532DA6F50','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'168E2CA6-914A-528B-B7F0-083532DA6F50','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '08C28B50-852C-5575-9FEE-55E6C094CFA4', 'sequence': {'long': 604}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'08C28B50-852C-5575-9FEE-55E6C094CFA4','604','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'08C28B50-852C-5575-9FEE-55E6C094CFA4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'08C28B50-852C-5575-9FEE-55E6C094CFA4','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'08C28B50-852C-5575-9FEE-55E6C094CFA4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3355B17-4F06-58AD-B236-9404F8CEF705', 'sequence': {'long': 605}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81959072}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3355B17-4F06-58AD-B236-9404F8CEF705','605','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866473353909','aue_lseek','81959072','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3355B17-4F06-58AD-B236-9404F8CEF705','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3355B17-4F06-58AD-B236-9404F8CEF705','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B3355B17-4F06-58AD-B236-9404F8CEF705','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4C59D106-D608-501A-AB99-F8834CB4DA88', 'sequence': {'long': 606}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866473353909, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4C59D106-D608-501A-AB99-F8834CB4DA88','606','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866473353909','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4C59D106-D608-501A-AB99-F8834CB4DA88','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4C59D106-D608-501A-AB99-F8834CB4DA88','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4C59D106-D608-501A-AB99-F8834CB4DA88','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CC04DC4A-0111-5302-BC2C-25DD636E3396', 'sequence': {'long': 607}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CC04DC4A-0111-5302-BC2C-25DD636E3396','607','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CC04DC4A-0111-5302-BC2C-25DD636E3396','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CC04DC4A-0111-5302-BC2C-25DD636E3396','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CC04DC4A-0111-5302-BC2C-25DD636E3396','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '98308DD2-DB50-53BD-A568-834F2D1DDE24', 'sequence': {'long': 608}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83085472}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'98308DD2-DB50-53BD-A568-834F2D1DDE24','608','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','83085472','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'98308DD2-DB50-53BD-A568-834F2D1DDE24','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'98308DD2-DB50-53BD-A568-834F2D1DDE24','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'98308DD2-DB50-53BD-A568-834F2D1DDE24','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FDC1FB33-0706-510F-9F04-E303FC4A25DE', 'sequence': {'long': 609}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FDC1FB33-0706-510F-9F04-E303FC4A25DE','609','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FDC1FB33-0706-510F-9F04-E303FC4A25DE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FDC1FB33-0706-510F-9F04-E303FC4A25DE','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FDC1FB33-0706-510F-9F04-E303FC4A25DE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '365569D5-33F7-52FC-8F57-92854BF1EFF3', 'sequence': {'long': 610}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'365569D5-33F7-52FC-8F57-92854BF1EFF3','610','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'365569D5-33F7-52FC-8F57-92854BF1EFF3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'365569D5-33F7-52FC-8F57-92854BF1EFF3','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'365569D5-33F7-52FC-8F57-92854BF1EFF3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F1B8ACFB-E917-5E30-8596-B82CC6E8CD01', 'sequence': {'long': 611}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81526784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F1B8ACFB-E917-5E30-8596-B82CC6E8CD01','611','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','81526784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F1B8ACFB-E917-5E30-8596-B82CC6E8CD01','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F1B8ACFB-E917-5E30-8596-B82CC6E8CD01','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F1B8ACFB-E917-5E30-8596-B82CC6E8CD01','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '85444AFF-B2D0-5919-966D-649514E9BF64', 'sequence': {'long': 612}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'85444AFF-B2D0-5919-966D-649514E9BF64','612','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'85444AFF-B2D0-5919-966D-649514E9BF64','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'85444AFF-B2D0-5919-966D-649514E9BF64','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'85444AFF-B2D0-5919-966D-649514E9BF64','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D259FE16-156C-5A05-ACBE-3B836511EA17', 'sequence': {'long': 613}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81526912}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D259FE16-156C-5A05-ACBE-3B836511EA17','613','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','81526912','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D259FE16-156C-5A05-ACBE-3B836511EA17','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D259FE16-156C-5A05-ACBE-3B836511EA17','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D259FE16-156C-5A05-ACBE-3B836511EA17','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BA9F66FB-67C5-58D2-861F-0FED040119B3', 'sequence': {'long': 614}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BA9F66FB-67C5-58D2-861F-0FED040119B3','614','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BA9F66FB-67C5-58D2-861F-0FED040119B3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BA9F66FB-67C5-58D2-861F-0FED040119B3','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BA9F66FB-67C5-58D2-861F-0FED040119B3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EA0246C1-322E-55D3-8EF9-CB34DDFFC84A', 'sequence': {'long': 615}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83091456}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EA0246C1-322E-55D3-8EF9-CB34DDFFC84A','615','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','83091456','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EA0246C1-322E-55D3-8EF9-CB34DDFFC84A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EA0246C1-322E-55D3-8EF9-CB34DDFFC84A','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EA0246C1-322E-55D3-8EF9-CB34DDFFC84A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7635546F-0260-5F4A-8811-32707F178F62', 'sequence': {'long': 616}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7635546F-0260-5F4A-8811-32707F178F62','616','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7635546F-0260-5F4A-8811-32707F178F62','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7635546F-0260-5F4A-8811-32707F178F62','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7635546F-0260-5F4A-8811-32707F178F62','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8A61270F-E7C6-5EC4-9D8B-FAE594D65E36', 'sequence': {'long': 617}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83091584}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8A61270F-E7C6-5EC4-9D8B-FAE594D65E36','617','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','83091584','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8A61270F-E7C6-5EC4-9D8B-FAE594D65E36','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8A61270F-E7C6-5EC4-9D8B-FAE594D65E36','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8A61270F-E7C6-5EC4-9D8B-FAE594D65E36','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '76087147-50D0-5442-87D3-FE92B2496D73', 'sequence': {'long': 618}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'76087147-50D0-5442-87D3-FE92B2496D73','618','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'76087147-50D0-5442-87D3-FE92B2496D73','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'76087147-50D0-5442-87D3-FE92B2496D73','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'76087147-50D0-5442-87D3-FE92B2496D73','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1D0D5906-7D1F-5BEF-B500-E1791A68AB11', 'sequence': {'long': 619}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82749600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1D0D5906-7D1F-5BEF-B500-E1791A68AB11','619','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','82749600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1D0D5906-7D1F-5BEF-B500-E1791A68AB11','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1D0D5906-7D1F-5BEF-B500-E1791A68AB11','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1D0D5906-7D1F-5BEF-B500-E1791A68AB11','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '49577C7B-0989-501A-BCFA-DD3DDE5A4FA7', 'sequence': {'long': 620}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'49577C7B-0989-501A-BCFA-DD3DDE5A4FA7','620','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'49577C7B-0989-501A-BCFA-DD3DDE5A4FA7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'49577C7B-0989-501A-BCFA-DD3DDE5A4FA7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'49577C7B-0989-501A-BCFA-DD3DDE5A4FA7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9D0C506F-E13F-55B1-BA38-B4C1405E9F79', 'sequence': {'long': 621}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82749728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9D0C506F-E13F-55B1-BA38-B4C1405E9F79','621','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','82749728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9D0C506F-E13F-55B1-BA38-B4C1405E9F79','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9D0C506F-E13F-55B1-BA38-B4C1405E9F79','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9D0C506F-E13F-55B1-BA38-B4C1405E9F79','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '904BC7E8-6A63-51C7-9CD4-A135667B1990', 'sequence': {'long': 622}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'904BC7E8-6A63-51C7-9CD4-A135667B1990','622','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'904BC7E8-6A63-51C7-9CD4-A135667B1990','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'904BC7E8-6A63-51C7-9CD4-A135667B1990','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'904BC7E8-6A63-51C7-9CD4-A135667B1990','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AFC4EFE3-736C-5D5D-8CA2-D661798B74D2', 'sequence': {'long': 623}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82182144}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AFC4EFE3-736C-5D5D-8CA2-D661798B74D2','623','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','82182144','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AFC4EFE3-736C-5D5D-8CA2-D661798B74D2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AFC4EFE3-736C-5D5D-8CA2-D661798B74D2','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AFC4EFE3-736C-5D5D-8CA2-D661798B74D2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DD6D9CD4-72B1-5BF3-A3C2-FC2A8FE7BB7D', 'sequence': {'long': 624}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DD6D9CD4-72B1-5BF3-A3C2-FC2A8FE7BB7D','624','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DD6D9CD4-72B1-5BF3-A3C2-FC2A8FE7BB7D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DD6D9CD4-72B1-5BF3-A3C2-FC2A8FE7BB7D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DD6D9CD4-72B1-5BF3-A3C2-FC2A8FE7BB7D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '642869F6-8BCE-5353-A11C-D999764E0112', 'sequence': {'long': 625}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82182272}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'642869F6-8BCE-5353-A11C-D999764E0112','625','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','82182272','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'642869F6-8BCE-5353-A11C-D999764E0112','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'642869F6-8BCE-5353-A11C-D999764E0112','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'642869F6-8BCE-5353-A11C-D999764E0112','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4D9C6562-A026-58A8-B791-E70864D87F0F', 'sequence': {'long': 626}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4D9C6562-A026-58A8-B791-E70864D87F0F','626','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4D9C6562-A026-58A8-B791-E70864D87F0F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4D9C6562-A026-58A8-B791-E70864D87F0F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4D9C6562-A026-58A8-B791-E70864D87F0F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ACC642DC-0248-595A-9BCC-44D2728311E7', 'sequence': {'long': 627}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81574048}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ACC642DC-0248-595A-9BCC-44D2728311E7','627','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','81574048','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ACC642DC-0248-595A-9BCC-44D2728311E7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ACC642DC-0248-595A-9BCC-44D2728311E7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ACC642DC-0248-595A-9BCC-44D2728311E7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3FEAE3D9-71D5-5CA2-A14F-1BD80808B6AF', 'sequence': {'long': 628}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3FEAE3D9-71D5-5CA2-A14F-1BD80808B6AF','628','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3FEAE3D9-71D5-5CA2-A14F-1BD80808B6AF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3FEAE3D9-71D5-5CA2-A14F-1BD80808B6AF','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3FEAE3D9-71D5-5CA2-A14F-1BD80808B6AF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '21B2AB4E-2589-5E8B-A5DF-C6CD5E3F5BD6', 'sequence': {'long': 629}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81574176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'21B2AB4E-2589-5E8B-A5DF-C6CD5E3F5BD6','629','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','81574176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'21B2AB4E-2589-5E8B-A5DF-C6CD5E3F5BD6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'21B2AB4E-2589-5E8B-A5DF-C6CD5E3F5BD6','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'21B2AB4E-2589-5E8B-A5DF-C6CD5E3F5BD6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7ED4CECE-E5E6-525F-8552-719266DC1FA6', 'sequence': {'long': 630}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7ED4CECE-E5E6-525F-8552-719266DC1FA6','630','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7ED4CECE-E5E6-525F-8552-719266DC1FA6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7ED4CECE-E5E6-525F-8552-719266DC1FA6','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7ED4CECE-E5E6-525F-8552-719266DC1FA6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '17391CB6-3A80-54F2-A16B-6FA15027F60D', 'sequence': {'long': 631}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81523792}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'17391CB6-3A80-54F2-A16B-6FA15027F60D','631','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','81523792','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'17391CB6-3A80-54F2-A16B-6FA15027F60D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'17391CB6-3A80-54F2-A16B-6FA15027F60D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'17391CB6-3A80-54F2-A16B-6FA15027F60D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B101B904-225A-5856-92DF-E3A6DCB84115', 'sequence': {'long': 632}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B101B904-225A-5856-92DF-E3A6DCB84115','632','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B101B904-225A-5856-92DF-E3A6DCB84115','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B101B904-225A-5856-92DF-E3A6DCB84115','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B101B904-225A-5856-92DF-E3A6DCB84115','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '19FC6FE2-CC18-5335-94BB-3478667946BF', 'sequence': {'long': 633}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81523920}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'19FC6FE2-CC18-5335-94BB-3478667946BF','633','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','81523920','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'19FC6FE2-CC18-5335-94BB-3478667946BF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'19FC6FE2-CC18-5335-94BB-3478667946BF','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'19FC6FE2-CC18-5335-94BB-3478667946BF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E6B17F0A-355C-544A-ACE4-3A5911A2A743', 'sequence': {'long': 634}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E6B17F0A-355C-544A-ACE4-3A5911A2A743','634','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E6B17F0A-355C-544A-ACE4-3A5911A2A743','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E6B17F0A-355C-544A-ACE4-3A5911A2A743','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E6B17F0A-355C-544A-ACE4-3A5911A2A743','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ACDDCE6C-9058-5117-8C8C-4A11877EA0FF', 'sequence': {'long': 635}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83083264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ACDDCE6C-9058-5117-8C8C-4A11877EA0FF','635','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866483351449','aue_lseek','83083264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ACDDCE6C-9058-5117-8C8C-4A11877EA0FF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ACDDCE6C-9058-5117-8C8C-4A11877EA0FF','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ACDDCE6C-9058-5117-8C8C-4A11877EA0FF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9D275711-A1E6-5399-97D3-FF66045B8E6D', 'sequence': {'long': 636}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866483351449, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9D275711-A1E6-5399-97D3-FF66045B8E6D','636','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866483351449','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9D275711-A1E6-5399-97D3-FF66045B8E6D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9D275711-A1E6-5399-97D3-FF66045B8E6D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9D275711-A1E6-5399-97D3-FF66045B8E6D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '50632743-29C0-5500-844D-78D73635D82E', 'sequence': {'long': 637}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83083392}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'50632743-29C0-5500-844D-78D73635D82E','637','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','83083392','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'50632743-29C0-5500-844D-78D73635D82E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'50632743-29C0-5500-844D-78D73635D82E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'50632743-29C0-5500-844D-78D73635D82E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '01787B19-4C69-5824-9EC0-C0283C6BCC48', 'sequence': {'long': 638}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'01787B19-4C69-5824-9EC0-C0283C6BCC48','638','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'01787B19-4C69-5824-9EC0-C0283C6BCC48','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'01787B19-4C69-5824-9EC0-C0283C6BCC48','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'01787B19-4C69-5824-9EC0-C0283C6BCC48','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '56BC16AD-7512-5429-8D91-2657E9619087', 'sequence': {'long': 639}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80384000}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'56BC16AD-7512-5429-8D91-2657E9619087','639','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','80384000','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'56BC16AD-7512-5429-8D91-2657E9619087','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'56BC16AD-7512-5429-8D91-2657E9619087','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'56BC16AD-7512-5429-8D91-2657E9619087','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B56CC5E2-1B9C-5454-9C13-E4123E8A8218', 'sequence': {'long': 640}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B56CC5E2-1B9C-5454-9C13-E4123E8A8218','640','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B56CC5E2-1B9C-5454-9C13-E4123E8A8218','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B56CC5E2-1B9C-5454-9C13-E4123E8A8218','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B56CC5E2-1B9C-5454-9C13-E4123E8A8218','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4B6BB7F4-5E26-57CC-95B2-1EFE6696B43C', 'sequence': {'long': 641}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80384128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4B6BB7F4-5E26-57CC-95B2-1EFE6696B43C','641','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','80384128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4B6BB7F4-5E26-57CC-95B2-1EFE6696B43C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4B6BB7F4-5E26-57CC-95B2-1EFE6696B43C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4B6BB7F4-5E26-57CC-95B2-1EFE6696B43C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C2A20683-F8CC-50DD-947D-F1C1B6CA6E17', 'sequence': {'long': 642}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C2A20683-F8CC-50DD-947D-F1C1B6CA6E17','642','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C2A20683-F8CC-50DD-947D-F1C1B6CA6E17','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C2A20683-F8CC-50DD-947D-F1C1B6CA6E17','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C2A20683-F8CC-50DD-947D-F1C1B6CA6E17','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DBFBC444-66CA-57F4-B696-67F10587B674', 'sequence': {'long': 643}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82839712}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DBFBC444-66CA-57F4-B696-67F10587B674','643','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','82839712','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DBFBC444-66CA-57F4-B696-67F10587B674','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DBFBC444-66CA-57F4-B696-67F10587B674','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DBFBC444-66CA-57F4-B696-67F10587B674','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7AFD2378-9399-500A-A6A8-D38E96F2C54B', 'sequence': {'long': 644}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7AFD2378-9399-500A-A6A8-D38E96F2C54B','644','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7AFD2378-9399-500A-A6A8-D38E96F2C54B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7AFD2378-9399-500A-A6A8-D38E96F2C54B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7AFD2378-9399-500A-A6A8-D38E96F2C54B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BB881256-5DDA-5644-ACB9-CCF8A305312B', 'sequence': {'long': 645}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82839840}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BB881256-5DDA-5644-ACB9-CCF8A305312B','645','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','82839840','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BB881256-5DDA-5644-ACB9-CCF8A305312B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BB881256-5DDA-5644-ACB9-CCF8A305312B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BB881256-5DDA-5644-ACB9-CCF8A305312B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '473239E7-5A25-576A-B4E7-95ACA4831883', 'sequence': {'long': 646}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'473239E7-5A25-576A-B4E7-95ACA4831883','646','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'473239E7-5A25-576A-B4E7-95ACA4831883','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'473239E7-5A25-576A-B4E7-95ACA4831883','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'473239E7-5A25-576A-B4E7-95ACA4831883','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B72D0C77-4D8C-57D1-8194-D2C5C39E4087', 'sequence': {'long': 647}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82841600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B72D0C77-4D8C-57D1-8194-D2C5C39E4087','647','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','82841600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B72D0C77-4D8C-57D1-8194-D2C5C39E4087','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B72D0C77-4D8C-57D1-8194-D2C5C39E4087','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B72D0C77-4D8C-57D1-8194-D2C5C39E4087','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2D38FD71-7C67-5027-8006-AFB19F486F2A', 'sequence': {'long': 648}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2D38FD71-7C67-5027-8006-AFB19F486F2A','648','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2D38FD71-7C67-5027-8006-AFB19F486F2A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2D38FD71-7C67-5027-8006-AFB19F486F2A','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2D38FD71-7C67-5027-8006-AFB19F486F2A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CAA86C24-0B28-5F74-8072-2E41ED3D2D70', 'sequence': {'long': 649}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82841728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CAA86C24-0B28-5F74-8072-2E41ED3D2D70','649','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','82841728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CAA86C24-0B28-5F74-8072-2E41ED3D2D70','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CAA86C24-0B28-5F74-8072-2E41ED3D2D70','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CAA86C24-0B28-5F74-8072-2E41ED3D2D70','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '71B6939B-3FDD-56BF-8D57-B98095088FAE', 'sequence': {'long': 650}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'71B6939B-3FDD-56BF-8D57-B98095088FAE','650','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'71B6939B-3FDD-56BF-8D57-B98095088FAE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'71B6939B-3FDD-56BF-8D57-B98095088FAE','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'71B6939B-3FDD-56BF-8D57-B98095088FAE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6F92A9BE-6E9A-5CA9-B2D0-99A949422078', 'sequence': {'long': 651}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 187846656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6F92A9BE-6E9A-5CA9-B2D0-99A949422078','651','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','187846656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6F92A9BE-6E9A-5CA9-B2D0-99A949422078','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6F92A9BE-6E9A-5CA9-B2D0-99A949422078','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6F92A9BE-6E9A-5CA9-B2D0-99A949422078','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DBA70F9E-1C48-59A9-9934-C8DFC09D37C5', 'sequence': {'long': 652}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DBA70F9E-1C48-59A9-9934-C8DFC09D37C5','652','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DBA70F9E-1C48-59A9-9934-C8DFC09D37C5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DBA70F9E-1C48-59A9-9934-C8DFC09D37C5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DBA70F9E-1C48-59A9-9934-C8DFC09D37C5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1672BFDB-3922-58A4-9F5C-EFCF0798D6E2', 'sequence': {'long': 653}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 187846784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1672BFDB-3922-58A4-9F5C-EFCF0798D6E2','653','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','187846784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1672BFDB-3922-58A4-9F5C-EFCF0798D6E2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1672BFDB-3922-58A4-9F5C-EFCF0798D6E2','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1672BFDB-3922-58A4-9F5C-EFCF0798D6E2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D5F15481-FDD0-5493-A152-FEF0A7B9C242', 'sequence': {'long': 654}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D5F15481-FDD0-5493-A152-FEF0A7B9C242','654','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D5F15481-FDD0-5493-A152-FEF0A7B9C242','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D5F15481-FDD0-5493-A152-FEF0A7B9C242','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D5F15481-FDD0-5493-A152-FEF0A7B9C242','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D104BD3F-C444-57BA-83AF-5C01B414CEB2', 'sequence': {'long': 655}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 188679248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D104BD3F-C444-57BA-83AF-5C01B414CEB2','655','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','188679248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D104BD3F-C444-57BA-83AF-5C01B414CEB2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D104BD3F-C444-57BA-83AF-5C01B414CEB2','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D104BD3F-C444-57BA-83AF-5C01B414CEB2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2716AF67-0543-5E2A-A1D8-649BF4E8B95A', 'sequence': {'long': 656}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2716AF67-0543-5E2A-A1D8-649BF4E8B95A','656','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2716AF67-0543-5E2A-A1D8-649BF4E8B95A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2716AF67-0543-5E2A-A1D8-649BF4E8B95A','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2716AF67-0543-5E2A-A1D8-649BF4E8B95A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8BAB786D-8C6B-5CD2-BF17-D68F0F7C70A5', 'sequence': {'long': 657}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 188679376}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8BAB786D-8C6B-5CD2-BF17-D68F0F7C70A5','657','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','188679376','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8BAB786D-8C6B-5CD2-BF17-D68F0F7C70A5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8BAB786D-8C6B-5CD2-BF17-D68F0F7C70A5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8BAB786D-8C6B-5CD2-BF17-D68F0F7C70A5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0B21ED31-075D-5730-8435-7C5FFBBF54B5', 'sequence': {'long': 658}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0B21ED31-075D-5730-8435-7C5FFBBF54B5','658','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0B21ED31-075D-5730-8435-7C5FFBBF54B5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0B21ED31-075D-5730-8435-7C5FFBBF54B5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0B21ED31-075D-5730-8435-7C5FFBBF54B5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DB84FB2A-C326-5B1E-9F55-CCAF9E9605ED', 'sequence': {'long': 659}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82745504}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DB84FB2A-C326-5B1E-9F55-CCAF9E9605ED','659','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','82745504','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DB84FB2A-C326-5B1E-9F55-CCAF9E9605ED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DB84FB2A-C326-5B1E-9F55-CCAF9E9605ED','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DB84FB2A-C326-5B1E-9F55-CCAF9E9605ED','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FD37079E-F19C-52AC-BD87-EA6A95E990CC', 'sequence': {'long': 660}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FD37079E-F19C-52AC-BD87-EA6A95E990CC','660','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FD37079E-F19C-52AC-BD87-EA6A95E990CC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FD37079E-F19C-52AC-BD87-EA6A95E990CC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FD37079E-F19C-52AC-BD87-EA6A95E990CC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '71AC961B-234C-597C-985E-677363514B42', 'sequence': {'long': 661}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82745632}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'71AC961B-234C-597C-985E-677363514B42','661','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','82745632','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'71AC961B-234C-597C-985E-677363514B42','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'71AC961B-234C-597C-985E-677363514B42','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'71AC961B-234C-597C-985E-677363514B42','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '17F26F76-AABE-5A6B-93C9-6563C1425CEF', 'sequence': {'long': 662}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'17F26F76-AABE-5A6B-93C9-6563C1425CEF','662','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'17F26F76-AABE-5A6B-93C9-6563C1425CEF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'17F26F76-AABE-5A6B-93C9-6563C1425CEF','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'17F26F76-AABE-5A6B-93C9-6563C1425CEF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9700C84D-1CA3-5F8A-909D-CD7FF71307BC', 'sequence': {'long': 663}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82837504}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9700C84D-1CA3-5F8A-909D-CD7FF71307BC','663','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','82837504','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9700C84D-1CA3-5F8A-909D-CD7FF71307BC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9700C84D-1CA3-5F8A-909D-CD7FF71307BC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9700C84D-1CA3-5F8A-909D-CD7FF71307BC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9FAC29C0-147B-50C7-B229-65CEFAAF41CF', 'sequence': {'long': 664}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9FAC29C0-147B-50C7-B229-65CEFAAF41CF','664','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9FAC29C0-147B-50C7-B229-65CEFAAF41CF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9FAC29C0-147B-50C7-B229-65CEFAAF41CF','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9FAC29C0-147B-50C7-B229-65CEFAAF41CF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D1C4849-5AA9-578F-883E-0F46FF6073D6', 'sequence': {'long': 665}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82837632}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D1C4849-5AA9-578F-883E-0F46FF6073D6','665','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866493351900','aue_lseek','82837632','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D1C4849-5AA9-578F-883E-0F46FF6073D6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D1C4849-5AA9-578F-883E-0F46FF6073D6','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7D1C4849-5AA9-578F-883E-0F46FF6073D6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EAF3AB50-A745-5163-B045-E76D6721679C', 'sequence': {'long': 666}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866493351900, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EAF3AB50-A745-5163-B045-E76D6721679C','666','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866493351900','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EAF3AB50-A745-5163-B045-E76D6721679C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EAF3AB50-A745-5163-B045-E76D6721679C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EAF3AB50-A745-5163-B045-E76D6721679C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AAF79437-D69E-579C-B446-50A6F59012C7', 'sequence': {'long': 667}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82843808}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AAF79437-D69E-579C-B446-50A6F59012C7','667','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','82843808','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AAF79437-D69E-579C-B446-50A6F59012C7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AAF79437-D69E-579C-B446-50A6F59012C7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AAF79437-D69E-579C-B446-50A6F59012C7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '964CB85D-9F95-5EA6-BFE5-E48617756BD5', 'sequence': {'long': 668}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'964CB85D-9F95-5EA6-BFE5-E48617756BD5','668','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'964CB85D-9F95-5EA6-BFE5-E48617756BD5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'964CB85D-9F95-5EA6-BFE5-E48617756BD5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'964CB85D-9F95-5EA6-BFE5-E48617756BD5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '08F53BAB-D02D-546F-8C5E-4836ACEDC407', 'sequence': {'long': 669}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82843936}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'08F53BAB-D02D-546F-8C5E-4836ACEDC407','669','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','82843936','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'08F53BAB-D02D-546F-8C5E-4836ACEDC407','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'08F53BAB-D02D-546F-8C5E-4836ACEDC407','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'08F53BAB-D02D-546F-8C5E-4836ACEDC407','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3C464783-B91C-5145-8C93-F93207267E90', 'sequence': {'long': 670}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3C464783-B91C-5145-8C93-F93207267E90','670','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3C464783-B91C-5145-8C93-F93207267E90','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3C464783-B91C-5145-8C93-F93207267E90','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3C464783-B91C-5145-8C93-F93207267E90','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2A4E210D-69D5-52B5-AED4-6B8F54EAC86A', 'sequence': {'long': 671}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81956864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2A4E210D-69D5-52B5-AED4-6B8F54EAC86A','671','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','81956864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2A4E210D-69D5-52B5-AED4-6B8F54EAC86A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2A4E210D-69D5-52B5-AED4-6B8F54EAC86A','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2A4E210D-69D5-52B5-AED4-6B8F54EAC86A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3669808-9591-5D72-9D30-8E67EBEA4E58', 'sequence': {'long': 672}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3669808-9591-5D72-9D30-8E67EBEA4E58','672','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3669808-9591-5D72-9D30-8E67EBEA4E58','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3669808-9591-5D72-9D30-8E67EBEA4E58','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B3669808-9591-5D72-9D30-8E67EBEA4E58','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0BAB5555-F22C-5678-B55D-75614CC4DBA4', 'sequence': {'long': 673}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81956992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0BAB5555-F22C-5678-B55D-75614CC4DBA4','673','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','81956992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0BAB5555-F22C-5678-B55D-75614CC4DBA4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0BAB5555-F22C-5678-B55D-75614CC4DBA4','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0BAB5555-F22C-5678-B55D-75614CC4DBA4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '62E4DE29-EDDB-595D-A14C-3C513C040EB8', 'sequence': {'long': 674}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'62E4DE29-EDDB-595D-A14C-3C513C040EB8','674','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'62E4DE29-EDDB-595D-A14C-3C513C040EB8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'62E4DE29-EDDB-595D-A14C-3C513C040EB8','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'62E4DE29-EDDB-595D-A14C-3C513C040EB8','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7FD42E46-265F-5B32-BFC1-023D871DE283', 'sequence': {'long': 675}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82184352}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7FD42E46-265F-5B32-BFC1-023D871DE283','675','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','82184352','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7FD42E46-265F-5B32-BFC1-023D871DE283','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7FD42E46-265F-5B32-BFC1-023D871DE283','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7FD42E46-265F-5B32-BFC1-023D871DE283','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B2C771BA-A725-59FF-87F6-1C1BB9EB484B', 'sequence': {'long': 676}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B2C771BA-A725-59FF-87F6-1C1BB9EB484B','676','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B2C771BA-A725-59FF-87F6-1C1BB9EB484B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B2C771BA-A725-59FF-87F6-1C1BB9EB484B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B2C771BA-A725-59FF-87F6-1C1BB9EB484B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4E2E492B-5A66-5819-87C7-2B2EB4F061C7', 'sequence': {'long': 677}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 193990656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4E2E492B-5A66-5819-87C7-2B2EB4F061C7','677','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','193990656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4E2E492B-5A66-5819-87C7-2B2EB4F061C7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4E2E492B-5A66-5819-87C7-2B2EB4F061C7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4E2E492B-5A66-5819-87C7-2B2EB4F061C7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '314E5D5F-7C5E-590D-B1EE-2F77706631C9', 'sequence': {'long': 678}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'314E5D5F-7C5E-590D-B1EE-2F77706631C9','678','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'314E5D5F-7C5E-590D-B1EE-2F77706631C9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'314E5D5F-7C5E-590D-B1EE-2F77706631C9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'314E5D5F-7C5E-590D-B1EE-2F77706631C9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '233DBEA1-65AB-5CF1-9D87-0D9560D676C3', 'sequence': {'long': 679}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81018880}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'233DBEA1-65AB-5CF1-9D87-0D9560D676C3','679','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','81018880','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'233DBEA1-65AB-5CF1-9D87-0D9560D676C3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'233DBEA1-65AB-5CF1-9D87-0D9560D676C3','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'233DBEA1-65AB-5CF1-9D87-0D9560D676C3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8C0EDE62-633D-53BF-BADB-AD7F3BD4BC52', 'sequence': {'long': 680}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8C0EDE62-633D-53BF-BADB-AD7F3BD4BC52','680','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8C0EDE62-633D-53BF-BADB-AD7F3BD4BC52','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8C0EDE62-633D-53BF-BADB-AD7F3BD4BC52','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8C0EDE62-633D-53BF-BADB-AD7F3BD4BC52','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0AD8598D-3B5A-5DC8-91D1-109871D75872', 'sequence': {'long': 681}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80375808}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0AD8598D-3B5A-5DC8-91D1-109871D75872','681','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','80375808','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0AD8598D-3B5A-5DC8-91D1-109871D75872','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0AD8598D-3B5A-5DC8-91D1-109871D75872','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0AD8598D-3B5A-5DC8-91D1-109871D75872','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '39B2DEFA-0C6B-50C0-928A-234389EF8DF4', 'sequence': {'long': 682}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'39B2DEFA-0C6B-50C0-928A-234389EF8DF4','682','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'39B2DEFA-0C6B-50C0-928A-234389EF8DF4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'39B2DEFA-0C6B-50C0-928A-234389EF8DF4','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'39B2DEFA-0C6B-50C0-928A-234389EF8DF4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2DCBE5AA-F6FF-5CA6-902A-1EC42C7D3936', 'sequence': {'long': 683}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59823184}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2DCBE5AA-F6FF-5CA6-902A-1EC42C7D3936','683','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','59823184','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2DCBE5AA-F6FF-5CA6-902A-1EC42C7D3936','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2DCBE5AA-F6FF-5CA6-902A-1EC42C7D3936','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2DCBE5AA-F6FF-5CA6-902A-1EC42C7D3936','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '97A1F681-5994-5FAC-97B1-2C00EAF15F02', 'sequence': {'long': 684}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'97A1F681-5994-5FAC-97B1-2C00EAF15F02','684','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'97A1F681-5994-5FAC-97B1-2C00EAF15F02','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'97A1F681-5994-5FAC-97B1-2C00EAF15F02','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'97A1F681-5994-5FAC-97B1-2C00EAF15F02','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B536B762-B779-57B0-937C-034DCA1E19A7', 'sequence': {'long': 685}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59823312}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B536B762-B779-57B0-937C-034DCA1E19A7','685','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','59823312','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B536B762-B779-57B0-937C-034DCA1E19A7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B536B762-B779-57B0-937C-034DCA1E19A7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B536B762-B779-57B0-937C-034DCA1E19A7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '519B9415-8891-5281-812A-C2DDAE826F0E', 'sequence': {'long': 686}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'519B9415-8891-5281-812A-C2DDAE826F0E','686','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'519B9415-8891-5281-812A-C2DDAE826F0E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'519B9415-8891-5281-812A-C2DDAE826F0E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'519B9415-8891-5281-812A-C2DDAE826F0E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CACF651B-0664-560C-BE8F-6F8E7F1F1627', 'sequence': {'long': 687}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82354176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CACF651B-0664-560C-BE8F-6F8E7F1F1627','687','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','82354176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CACF651B-0664-560C-BE8F-6F8E7F1F1627','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CACF651B-0664-560C-BE8F-6F8E7F1F1627','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CACF651B-0664-560C-BE8F-6F8E7F1F1627','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '908CC3FD-4EE9-5D42-9480-7C33AF4668B1', 'sequence': {'long': 688}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'908CC3FD-4EE9-5D42-9480-7C33AF4668B1','688','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'908CC3FD-4EE9-5D42-9480-7C33AF4668B1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'908CC3FD-4EE9-5D42-9480-7C33AF4668B1','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'908CC3FD-4EE9-5D42-9480-7C33AF4668B1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5629C40D-9C2F-59E5-95C5-DF31ABFA3CD2', 'sequence': {'long': 689}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 190091264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5629C40D-9C2F-59E5-95C5-DF31ABFA3CD2','689','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','190091264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5629C40D-9C2F-59E5-95C5-DF31ABFA3CD2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5629C40D-9C2F-59E5-95C5-DF31ABFA3CD2','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5629C40D-9C2F-59E5-95C5-DF31ABFA3CD2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D5AB7DD1-1BA1-5728-A5A1-FE759D1FDEA5', 'sequence': {'long': 690}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D5AB7DD1-1BA1-5728-A5A1-FE759D1FDEA5','690','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D5AB7DD1-1BA1-5728-A5A1-FE759D1FDEA5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D5AB7DD1-1BA1-5728-A5A1-FE759D1FDEA5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D5AB7DD1-1BA1-5728-A5A1-FE759D1FDEA5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1FA056BF-D6B9-5E35-928A-3CFA9FE1C988', 'sequence': {'long': 691}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81960960}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1FA056BF-D6B9-5E35-928A-3CFA9FE1C988','691','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','81960960','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1FA056BF-D6B9-5E35-928A-3CFA9FE1C988','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1FA056BF-D6B9-5E35-928A-3CFA9FE1C988','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1FA056BF-D6B9-5E35-928A-3CFA9FE1C988','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '99ABE2DD-0D58-5F46-A5A0-3BCEA9C0F29F', 'sequence': {'long': 692}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'99ABE2DD-0D58-5F46-A5A0-3BCEA9C0F29F','692','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'99ABE2DD-0D58-5F46-A5A0-3BCEA9C0F29F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'99ABE2DD-0D58-5F46-A5A0-3BCEA9C0F29F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'99ABE2DD-0D58-5F46-A5A0-3BCEA9C0F29F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C91A529A-42A5-5012-BAD6-BEC400639CD6', 'sequence': {'long': 693}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81961088}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C91A529A-42A5-5012-BAD6-BEC400639CD6','693','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','81961088','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C91A529A-42A5-5012-BAD6-BEC400639CD6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C91A529A-42A5-5012-BAD6-BEC400639CD6','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C91A529A-42A5-5012-BAD6-BEC400639CD6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F8F46603-4734-5D85-BF22-F3274E607CB9', 'sequence': {'long': 694}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F8F46603-4734-5D85-BF22-F3274E607CB9','694','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F8F46603-4734-5D85-BF22-F3274E607CB9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F8F46603-4734-5D85-BF22-F3274E607CB9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F8F46603-4734-5D85-BF22-F3274E607CB9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E8C58DAF-4552-55BA-AE22-D7FF1D2BC30E', 'sequence': {'long': 695}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80388096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E8C58DAF-4552-55BA-AE22-D7FF1D2BC30E','695','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866503364600','aue_lseek','80388096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E8C58DAF-4552-55BA-AE22-D7FF1D2BC30E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E8C58DAF-4552-55BA-AE22-D7FF1D2BC30E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E8C58DAF-4552-55BA-AE22-D7FF1D2BC30E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '70AF485A-6316-541F-9C5F-855587417195', 'sequence': {'long': 696}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866503364600, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'70AF485A-6316-541F-9C5F-855587417195','696','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866503364600','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'70AF485A-6316-541F-9C5F-855587417195','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'70AF485A-6316-541F-9C5F-855587417195','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'70AF485A-6316-541F-9C5F-855587417195','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '86D4FD16-DC7E-5C7E-B489-A8B0FF5BCA30', 'sequence': {'long': 697}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80388224}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'86D4FD16-DC7E-5C7E-B489-A8B0FF5BCA30','697','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','80388224','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'86D4FD16-DC7E-5C7E-B489-A8B0FF5BCA30','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'86D4FD16-DC7E-5C7E-B489-A8B0FF5BCA30','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'86D4FD16-DC7E-5C7E-B489-A8B0FF5BCA30','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CC7047B3-30C5-5D03-B5E1-510616B9B069', 'sequence': {'long': 698}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CC7047B3-30C5-5D03-B5E1-510616B9B069','698','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CC7047B3-30C5-5D03-B5E1-510616B9B069','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CC7047B3-30C5-5D03-B5E1-510616B9B069','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CC7047B3-30C5-5D03-B5E1-510616B9B069','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E47788AD-DED0-5EE0-BFB4-4F8D33BBA689', 'sequence': {'long': 699}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81524896}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E47788AD-DED0-5EE0-BFB4-4F8D33BBA689','699','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','81524896','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E47788AD-DED0-5EE0-BFB4-4F8D33BBA689','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E47788AD-DED0-5EE0-BFB4-4F8D33BBA689','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E47788AD-DED0-5EE0-BFB4-4F8D33BBA689','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E87C86A3-7DBD-5975-AC88-C47CF92B92CE', 'sequence': {'long': 700}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E87C86A3-7DBD-5975-AC88-C47CF92B92CE','700','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E87C86A3-7DBD-5975-AC88-C47CF92B92CE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E87C86A3-7DBD-5975-AC88-C47CF92B92CE','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E87C86A3-7DBD-5975-AC88-C47CF92B92CE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A7739E71-02D9-5507-8D20-541228FEF302', 'sequence': {'long': 701}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81525024}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A7739E71-02D9-5507-8D20-541228FEF302','701','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','81525024','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A7739E71-02D9-5507-8D20-541228FEF302','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A7739E71-02D9-5507-8D20-541228FEF302','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A7739E71-02D9-5507-8D20-541228FEF302','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '53C5EC52-257A-536E-92E4-21090328ADB3', 'sequence': {'long': 702}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'53C5EC52-257A-536E-92E4-21090328ADB3','702','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'53C5EC52-257A-536E-92E4-21090328ADB3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'53C5EC52-257A-536E-92E4-21090328ADB3','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'53C5EC52-257A-536E-92E4-21090328ADB3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5CFFA9DB-EBE8-5ED4-9D77-2CBE0C92DA5D', 'sequence': {'long': 703}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59822080}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5CFFA9DB-EBE8-5ED4-9D77-2CBE0C92DA5D','703','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','59822080','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5CFFA9DB-EBE8-5ED4-9D77-2CBE0C92DA5D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5CFFA9DB-EBE8-5ED4-9D77-2CBE0C92DA5D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5CFFA9DB-EBE8-5ED4-9D77-2CBE0C92DA5D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '36A9C73E-DE98-5B8F-AF78-DC9E30148E7A', 'sequence': {'long': 704}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'36A9C73E-DE98-5B8F-AF78-DC9E30148E7A','704','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'36A9C73E-DE98-5B8F-AF78-DC9E30148E7A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'36A9C73E-DE98-5B8F-AF78-DC9E30148E7A','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'36A9C73E-DE98-5B8F-AF78-DC9E30148E7A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2374DEA2-AD61-55CA-BA4D-BC99F34F35A2', 'sequence': {'long': 705}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59822208}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2374DEA2-AD61-55CA-BA4D-BC99F34F35A2','705','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','59822208','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2374DEA2-AD61-55CA-BA4D-BC99F34F35A2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2374DEA2-AD61-55CA-BA4D-BC99F34F35A2','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2374DEA2-AD61-55CA-BA4D-BC99F34F35A2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5218BB96-30DA-5E52-A372-316CA06AC8E5', 'sequence': {'long': 706}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5218BB96-30DA-5E52-A372-316CA06AC8E5','706','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5218BB96-30DA-5E52-A372-316CA06AC8E5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5218BB96-30DA-5E52-A372-316CA06AC8E5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5218BB96-30DA-5E52-A372-316CA06AC8E5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '69175E73-61DB-5590-A3A7-6035403EA367', 'sequence': {'long': 707}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83093664}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'69175E73-61DB-5590-A3A7-6035403EA367','707','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','83093664','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'69175E73-61DB-5590-A3A7-6035403EA367','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'69175E73-61DB-5590-A3A7-6035403EA367','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'69175E73-61DB-5590-A3A7-6035403EA367','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9577831B-3F9A-5209-B99B-33AE1E82C8BC', 'sequence': {'long': 708}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9577831B-3F9A-5209-B99B-33AE1E82C8BC','708','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9577831B-3F9A-5209-B99B-33AE1E82C8BC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9577831B-3F9A-5209-B99B-33AE1E82C8BC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9577831B-3F9A-5209-B99B-33AE1E82C8BC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '354D4035-5A0A-50A5-997A-37E9228A7AB3', 'sequence': {'long': 709}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83093792}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'354D4035-5A0A-50A5-997A-37E9228A7AB3','709','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','83093792','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'354D4035-5A0A-50A5-997A-37E9228A7AB3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'354D4035-5A0A-50A5-997A-37E9228A7AB3','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'354D4035-5A0A-50A5-997A-37E9228A7AB3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5686DD23-E20E-50C8-89FC-E6BC83F221A3', 'sequence': {'long': 710}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5686DD23-E20E-50C8-89FC-E6BC83F221A3','710','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5686DD23-E20E-50C8-89FC-E6BC83F221A3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5686DD23-E20E-50C8-89FC-E6BC83F221A3','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5686DD23-E20E-50C8-89FC-E6BC83F221A3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2B4EC13B-34CD-5E3E-868C-D574AC3029E6', 'sequence': {'long': 711}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79369296}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2B4EC13B-34CD-5E3E-868C-D574AC3029E6','711','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','79369296','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2B4EC13B-34CD-5E3E-868C-D574AC3029E6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2B4EC13B-34CD-5E3E-868C-D574AC3029E6','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2B4EC13B-34CD-5E3E-868C-D574AC3029E6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2E61FB5F-D857-558E-B743-2F97241EE8E4', 'sequence': {'long': 712}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2E61FB5F-D857-558E-B743-2F97241EE8E4','712','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2E61FB5F-D857-558E-B743-2F97241EE8E4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2E61FB5F-D857-558E-B743-2F97241EE8E4','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2E61FB5F-D857-558E-B743-2F97241EE8E4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BE305132-CEF6-531A-890C-EA514F1EFF17', 'sequence': {'long': 713}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79369424}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BE305132-CEF6-531A-890C-EA514F1EFF17','713','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','79369424','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BE305132-CEF6-531A-890C-EA514F1EFF17','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BE305132-CEF6-531A-890C-EA514F1EFF17','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BE305132-CEF6-531A-890C-EA514F1EFF17','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '99CAE69F-CB01-5EB2-8DAB-C179B5BBE459', 'sequence': {'long': 714}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'99CAE69F-CB01-5EB2-8DAB-C179B5BBE459','714','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'99CAE69F-CB01-5EB2-8DAB-C179B5BBE459','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'99CAE69F-CB01-5EB2-8DAB-C179B5BBE459','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'99CAE69F-CB01-5EB2-8DAB-C179B5BBE459','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '20F41460-3B1D-53D2-813F-5A7F18511B83', 'sequence': {'long': 715}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81963168}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'20F41460-3B1D-53D2-813F-5A7F18511B83','715','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','81963168','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'20F41460-3B1D-53D2-813F-5A7F18511B83','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'20F41460-3B1D-53D2-813F-5A7F18511B83','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'20F41460-3B1D-53D2-813F-5A7F18511B83','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EADDEE77-B862-5D47-8C11-718217B9EDBA', 'sequence': {'long': 716}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EADDEE77-B862-5D47-8C11-718217B9EDBA','716','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EADDEE77-B862-5D47-8C11-718217B9EDBA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EADDEE77-B862-5D47-8C11-718217B9EDBA','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EADDEE77-B862-5D47-8C11-718217B9EDBA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F2AD2976-F0E8-5B70-A158-F34BCF386C9F', 'sequence': {'long': 717}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81963296}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F2AD2976-F0E8-5B70-A158-F34BCF386C9F','717','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','81963296','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F2AD2976-F0E8-5B70-A158-F34BCF386C9F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F2AD2976-F0E8-5B70-A158-F34BCF386C9F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F2AD2976-F0E8-5B70-A158-F34BCF386C9F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5318378C-E31E-599F-9C28-236598D1873B', 'sequence': {'long': 718}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5318378C-E31E-599F-9C28-236598D1873B','718','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5318378C-E31E-599F-9C28-236598D1873B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5318378C-E31E-599F-9C28-236598D1873B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5318378C-E31E-599F-9C28-236598D1873B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8F4CBE96-C2F6-5180-89BB-22F3C3E7FBB3', 'sequence': {'long': 719}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79856720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8F4CBE96-C2F6-5180-89BB-22F3C3E7FBB3','719','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','79856720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8F4CBE96-C2F6-5180-89BB-22F3C3E7FBB3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8F4CBE96-C2F6-5180-89BB-22F3C3E7FBB3','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8F4CBE96-C2F6-5180-89BB-22F3C3E7FBB3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E4939013-07AD-5205-A51F-D30AF116CC57', 'sequence': {'long': 720}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E4939013-07AD-5205-A51F-D30AF116CC57','720','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E4939013-07AD-5205-A51F-D30AF116CC57','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E4939013-07AD-5205-A51F-D30AF116CC57','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E4939013-07AD-5205-A51F-D30AF116CC57','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CF462BF0-B4E3-5D48-B84D-D6F7C8D11C7E', 'sequence': {'long': 721}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79856848}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CF462BF0-B4E3-5D48-B84D-D6F7C8D11C7E','721','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','79856848','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CF462BF0-B4E3-5D48-B84D-D6F7C8D11C7E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CF462BF0-B4E3-5D48-B84D-D6F7C8D11C7E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CF462BF0-B4E3-5D48-B84D-D6F7C8D11C7E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CB72B43E-3923-5DD5-A6F4-AA0DBF50F025', 'sequence': {'long': 722}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CB72B43E-3923-5DD5-A6F4-AA0DBF50F025','722','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CB72B43E-3923-5DD5-A6F4-AA0DBF50F025','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CB72B43E-3923-5DD5-A6F4-AA0DBF50F025','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CB72B43E-3923-5DD5-A6F4-AA0DBF50F025','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CE75CE7E-34B3-5DC7-80FF-116133450B36', 'sequence': {'long': 723}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79857824}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CE75CE7E-34B3-5DC7-80FF-116133450B36','723','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','79857824','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CE75CE7E-34B3-5DC7-80FF-116133450B36','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CE75CE7E-34B3-5DC7-80FF-116133450B36','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CE75CE7E-34B3-5DC7-80FF-116133450B36','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C69C9AE5-3793-5253-AF44-DD3922B4F569', 'sequence': {'long': 724}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C69C9AE5-3793-5253-AF44-DD3922B4F569','724','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C69C9AE5-3793-5253-AF44-DD3922B4F569','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C69C9AE5-3793-5253-AF44-DD3922B4F569','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C69C9AE5-3793-5253-AF44-DD3922B4F569','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A100F9D7-7337-55DF-BCAB-78C9272D9043', 'sequence': {'long': 725}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79857952}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A100F9D7-7337-55DF-BCAB-78C9272D9043','725','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','79857952','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A100F9D7-7337-55DF-BCAB-78C9272D9043','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A100F9D7-7337-55DF-BCAB-78C9272D9043','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A100F9D7-7337-55DF-BCAB-78C9272D9043','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '76BEC650-996B-5561-9AFB-9FBCBFBCE89A', 'sequence': {'long': 726}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'76BEC650-996B-5561-9AFB-9FBCBFBCE89A','726','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866513355450','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'76BEC650-996B-5561-9AFB-9FBCBFBCE89A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'76BEC650-996B-5561-9AFB-9FBCBFBCE89A','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'76BEC650-996B-5561-9AFB-9FBCBFBCE89A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0FA7F071-1213-5D87-8B0A-25EF989C3E4F', 'sequence': {'long': 727}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866513355450, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79859712}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0FA7F071-1213-5D87-8B0A-25EF989C3E4F','727','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866513355450','aue_lseek','79859712','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0FA7F071-1213-5D87-8B0A-25EF989C3E4F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0FA7F071-1213-5D87-8B0A-25EF989C3E4F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0FA7F071-1213-5D87-8B0A-25EF989C3E4F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '889E1509-8C20-52DA-A1E4-D243E961B50B', 'sequence': {'long': 728}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'889E1509-8C20-52DA-A1E4-D243E961B50B','728','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'889E1509-8C20-52DA-A1E4-D243E961B50B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'889E1509-8C20-52DA-A1E4-D243E961B50B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'889E1509-8C20-52DA-A1E4-D243E961B50B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D9FFD18E-923E-5F1F-A3DE-2EDF788F922B', 'sequence': {'long': 729}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79859840}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D9FFD18E-923E-5F1F-A3DE-2EDF788F922B','729','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79859840','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D9FFD18E-923E-5F1F-A3DE-2EDF788F922B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D9FFD18E-923E-5F1F-A3DE-2EDF788F922B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D9FFD18E-923E-5F1F-A3DE-2EDF788F922B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4604E274-73DB-5790-AD88-940981E00D88', 'sequence': {'long': 730}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4604E274-73DB-5790-AD88-940981E00D88','730','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4604E274-73DB-5790-AD88-940981E00D88','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4604E274-73DB-5790-AD88-940981E00D88','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4604E274-73DB-5790-AD88-940981E00D88','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F7A6CD54-FB64-5E78-AC78-10B308A1A80D', 'sequence': {'long': 731}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79860816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F7A6CD54-FB64-5E78-AC78-10B308A1A80D','731','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79860816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F7A6CD54-FB64-5E78-AC78-10B308A1A80D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F7A6CD54-FB64-5E78-AC78-10B308A1A80D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F7A6CD54-FB64-5E78-AC78-10B308A1A80D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B80C2E41-D545-5155-AF85-2D8182BCC280', 'sequence': {'long': 732}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B80C2E41-D545-5155-AF85-2D8182BCC280','732','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B80C2E41-D545-5155-AF85-2D8182BCC280','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B80C2E41-D545-5155-AF85-2D8182BCC280','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B80C2E41-D545-5155-AF85-2D8182BCC280','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D649086-014E-51EC-B39F-41D84CBC27DE', 'sequence': {'long': 733}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79860944}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D649086-014E-51EC-B39F-41D84CBC27DE','733','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79860944','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D649086-014E-51EC-B39F-41D84CBC27DE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D649086-014E-51EC-B39F-41D84CBC27DE','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7D649086-014E-51EC-B39F-41D84CBC27DE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F09BA180-B7D6-5F67-BB38-F9A3E89947EA', 'sequence': {'long': 734}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F09BA180-B7D6-5F67-BB38-F9A3E89947EA','734','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F09BA180-B7D6-5F67-BB38-F9A3E89947EA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F09BA180-B7D6-5F67-BB38-F9A3E89947EA','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F09BA180-B7D6-5F67-BB38-F9A3E89947EA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6DD68A6A-B03B-5FC3-AFEE-8F485B6D2B84', 'sequence': {'long': 735}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79861920}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6DD68A6A-B03B-5FC3-AFEE-8F485B6D2B84','735','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79861920','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6DD68A6A-B03B-5FC3-AFEE-8F485B6D2B84','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6DD68A6A-B03B-5FC3-AFEE-8F485B6D2B84','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6DD68A6A-B03B-5FC3-AFEE-8F485B6D2B84','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5EA6DE43-6A9E-5B0F-9F05-2B6A353B604C', 'sequence': {'long': 736}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5EA6DE43-6A9E-5B0F-9F05-2B6A353B604C','736','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5EA6DE43-6A9E-5B0F-9F05-2B6A353B604C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5EA6DE43-6A9E-5B0F-9F05-2B6A353B604C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5EA6DE43-6A9E-5B0F-9F05-2B6A353B604C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3AB6503-72E0-5F72-9F7F-71624245EBED', 'sequence': {'long': 737}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79862048}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3AB6503-72E0-5F72-9F7F-71624245EBED','737','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79862048','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3AB6503-72E0-5F72-9F7F-71624245EBED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3AB6503-72E0-5F72-9F7F-71624245EBED','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B3AB6503-72E0-5F72-9F7F-71624245EBED','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DC3F074E-C780-58D0-A366-62D2343835AB', 'sequence': {'long': 738}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DC3F074E-C780-58D0-A366-62D2343835AB','738','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DC3F074E-C780-58D0-A366-62D2343835AB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DC3F074E-C780-58D0-A366-62D2343835AB','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DC3F074E-C780-58D0-A366-62D2343835AB','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8DF89DA0-78B9-55BA-9360-A962C123FA61', 'sequence': {'long': 739}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79863808}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8DF89DA0-78B9-55BA-9360-A962C123FA61','739','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79863808','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8DF89DA0-78B9-55BA-9360-A962C123FA61','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8DF89DA0-78B9-55BA-9360-A962C123FA61','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8DF89DA0-78B9-55BA-9360-A962C123FA61','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6D2CFCC9-169A-50ED-98CA-DEF9C4B2C843', 'sequence': {'long': 740}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6D2CFCC9-169A-50ED-98CA-DEF9C4B2C843','740','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6D2CFCC9-169A-50ED-98CA-DEF9C4B2C843','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6D2CFCC9-169A-50ED-98CA-DEF9C4B2C843','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6D2CFCC9-169A-50ED-98CA-DEF9C4B2C843','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '935818C3-3D55-58EC-B59F-92D24F90E0D5', 'sequence': {'long': 741}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79863936}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'935818C3-3D55-58EC-B59F-92D24F90E0D5','741','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79863936','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'935818C3-3D55-58EC-B59F-92D24F90E0D5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'935818C3-3D55-58EC-B59F-92D24F90E0D5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'935818C3-3D55-58EC-B59F-92D24F90E0D5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9B46E775-F8A9-5191-B7B0-E18057ACC217', 'sequence': {'long': 742}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9B46E775-F8A9-5191-B7B0-E18057ACC217','742','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9B46E775-F8A9-5191-B7B0-E18057ACC217','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9B46E775-F8A9-5191-B7B0-E18057ACC217','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9B46E775-F8A9-5191-B7B0-E18057ACC217','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9433F5C4-756C-5B9D-AFC3-9ACD48F30A3C', 'sequence': {'long': 743}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79864912}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9433F5C4-756C-5B9D-AFC3-9ACD48F30A3C','743','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79864912','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9433F5C4-756C-5B9D-AFC3-9ACD48F30A3C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9433F5C4-756C-5B9D-AFC3-9ACD48F30A3C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9433F5C4-756C-5B9D-AFC3-9ACD48F30A3C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DEB179C0-0E2A-5F60-93F9-41E08EA0FAA3', 'sequence': {'long': 744}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DEB179C0-0E2A-5F60-93F9-41E08EA0FAA3','744','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DEB179C0-0E2A-5F60-93F9-41E08EA0FAA3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DEB179C0-0E2A-5F60-93F9-41E08EA0FAA3','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DEB179C0-0E2A-5F60-93F9-41E08EA0FAA3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '607105FC-F47A-59D0-9FD8-A213B23386E7', 'sequence': {'long': 745}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79865040}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'607105FC-F47A-59D0-9FD8-A213B23386E7','745','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79865040','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'607105FC-F47A-59D0-9FD8-A213B23386E7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'607105FC-F47A-59D0-9FD8-A213B23386E7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'607105FC-F47A-59D0-9FD8-A213B23386E7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5F99E867-F602-5954-95C7-C3F7637D5FD7', 'sequence': {'long': 746}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5F99E867-F602-5954-95C7-C3F7637D5FD7','746','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5F99E867-F602-5954-95C7-C3F7637D5FD7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5F99E867-F602-5954-95C7-C3F7637D5FD7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5F99E867-F602-5954-95C7-C3F7637D5FD7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FE5BA9C6-B0D2-58F9-99D6-43F1B0A04473', 'sequence': {'long': 747}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79866016}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FE5BA9C6-B0D2-58F9-99D6-43F1B0A04473','747','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79866016','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FE5BA9C6-B0D2-58F9-99D6-43F1B0A04473','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FE5BA9C6-B0D2-58F9-99D6-43F1B0A04473','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FE5BA9C6-B0D2-58F9-99D6-43F1B0A04473','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F80AA3D0-1090-56CD-94A2-4F0348FEBA08', 'sequence': {'long': 748}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F80AA3D0-1090-56CD-94A2-4F0348FEBA08','748','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F80AA3D0-1090-56CD-94A2-4F0348FEBA08','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F80AA3D0-1090-56CD-94A2-4F0348FEBA08','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F80AA3D0-1090-56CD-94A2-4F0348FEBA08','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6DD9BC22-9FD4-5D92-AC5E-363DD346D049', 'sequence': {'long': 749}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79866144}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6DD9BC22-9FD4-5D92-AC5E-363DD346D049','749','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79866144','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6DD9BC22-9FD4-5D92-AC5E-363DD346D049','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6DD9BC22-9FD4-5D92-AC5E-363DD346D049','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6DD9BC22-9FD4-5D92-AC5E-363DD346D049','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0781F2F5-9A01-5E2B-AFE8-5B90A69FEDB9', 'sequence': {'long': 750}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0781F2F5-9A01-5E2B-AFE8-5B90A69FEDB9','750','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0781F2F5-9A01-5E2B-AFE8-5B90A69FEDB9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0781F2F5-9A01-5E2B-AFE8-5B90A69FEDB9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0781F2F5-9A01-5E2B-AFE8-5B90A69FEDB9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '40BB483B-1BE3-5E64-9D0B-99E866CC2193', 'sequence': {'long': 751}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79370400}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'40BB483B-1BE3-5E64-9D0B-99E866CC2193','751','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79370400','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'40BB483B-1BE3-5E64-9D0B-99E866CC2193','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'40BB483B-1BE3-5E64-9D0B-99E866CC2193','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'40BB483B-1BE3-5E64-9D0B-99E866CC2193','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A0D3D26F-58AB-58CA-87A5-D76F382FEFF5', 'sequence': {'long': 752}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A0D3D26F-58AB-58CA-87A5-D76F382FEFF5','752','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A0D3D26F-58AB-58CA-87A5-D76F382FEFF5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A0D3D26F-58AB-58CA-87A5-D76F382FEFF5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A0D3D26F-58AB-58CA-87A5-D76F382FEFF5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9401722E-33E0-5E3C-A3FB-E8DEEE747F2E', 'sequence': {'long': 753}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79370528}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9401722E-33E0-5E3C-A3FB-E8DEEE747F2E','753','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79370528','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9401722E-33E0-5E3C-A3FB-E8DEEE747F2E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9401722E-33E0-5E3C-A3FB-E8DEEE747F2E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9401722E-33E0-5E3C-A3FB-E8DEEE747F2E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0A89657B-2275-557E-A459-C2707195088C', 'sequence': {'long': 754}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0A89657B-2275-557E-A459-C2707195088C','754','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0A89657B-2275-557E-A459-C2707195088C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0A89657B-2275-557E-A459-C2707195088C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0A89657B-2275-557E-A459-C2707195088C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '69485B7A-4949-5880-9DEA-C23EE77860C8', 'sequence': {'long': 755}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79372288}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'69485B7A-4949-5880-9DEA-C23EE77860C8','755','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79372288','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'69485B7A-4949-5880-9DEA-C23EE77860C8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'69485B7A-4949-5880-9DEA-C23EE77860C8','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'69485B7A-4949-5880-9DEA-C23EE77860C8','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '864C7B87-29FD-5F4E-A9E6-890283AADAE7', 'sequence': {'long': 756}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'864C7B87-29FD-5F4E-A9E6-890283AADAE7','756','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'864C7B87-29FD-5F4E-A9E6-890283AADAE7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'864C7B87-29FD-5F4E-A9E6-890283AADAE7','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'864C7B87-29FD-5F4E-A9E6-890283AADAE7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AE6B001F-5E33-5FC1-BE1F-67F90DF2E85F', 'sequence': {'long': 757}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79372416}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AE6B001F-5E33-5FC1-BE1F-67F90DF2E85F','757','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79372416','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AE6B001F-5E33-5FC1-BE1F-67F90DF2E85F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AE6B001F-5E33-5FC1-BE1F-67F90DF2E85F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AE6B001F-5E33-5FC1-BE1F-67F90DF2E85F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6BB22259-062A-51E7-8132-72CEA95F7132', 'sequence': {'long': 758}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6BB22259-062A-51E7-8132-72CEA95F7132','758','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866523352971','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6BB22259-062A-51E7-8132-72CEA95F7132','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6BB22259-062A-51E7-8132-72CEA95F7132','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6BB22259-062A-51E7-8132-72CEA95F7132','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6DFA2041-5231-5FD6-9C0C-94829C126AD9', 'sequence': {'long': 759}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866523352971, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79373392}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6DFA2041-5231-5FD6-9C0C-94829C126AD9','759','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866523352971','aue_lseek','79373392','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6DFA2041-5231-5FD6-9C0C-94829C126AD9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6DFA2041-5231-5FD6-9C0C-94829C126AD9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6DFA2041-5231-5FD6-9C0C-94829C126AD9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '95A7307E-01DF-5755-A614-4693720B5D4A', 'sequence': {'long': 760}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'95A7307E-01DF-5755-A614-4693720B5D4A','760','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'95A7307E-01DF-5755-A614-4693720B5D4A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'95A7307E-01DF-5755-A614-4693720B5D4A','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'95A7307E-01DF-5755-A614-4693720B5D4A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B07125B7-08C5-5378-89CD-337CB680EF06', 'sequence': {'long': 761}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79373520}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B07125B7-08C5-5378-89CD-337CB680EF06','761','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','79373520','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B07125B7-08C5-5378-89CD-337CB680EF06','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B07125B7-08C5-5378-89CD-337CB680EF06','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B07125B7-08C5-5378-89CD-337CB680EF06','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3B378F6E-A621-51AD-AA53-D2D334E489BF', 'sequence': {'long': 762}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3B378F6E-A621-51AD-AA53-D2D334E489BF','762','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3B378F6E-A621-51AD-AA53-D2D334E489BF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3B378F6E-A621-51AD-AA53-D2D334E489BF','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3B378F6E-A621-51AD-AA53-D2D334E489BF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '35C0B203-8911-59AF-B32C-DE1AE37E106B', 'sequence': {'long': 763}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79374496}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'35C0B203-8911-59AF-B32C-DE1AE37E106B','763','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','79374496','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'35C0B203-8911-59AF-B32C-DE1AE37E106B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'35C0B203-8911-59AF-B32C-DE1AE37E106B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'35C0B203-8911-59AF-B32C-DE1AE37E106B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FAFCDDF9-E127-55D8-8A9D-6A89603D514F', 'sequence': {'long': 764}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FAFCDDF9-E127-55D8-8A9D-6A89603D514F','764','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FAFCDDF9-E127-55D8-8A9D-6A89603D514F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FAFCDDF9-E127-55D8-8A9D-6A89603D514F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FAFCDDF9-E127-55D8-8A9D-6A89603D514F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D8E56530-2CC2-5AB0-A7BB-D1FEC724986D', 'sequence': {'long': 765}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79374624}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D8E56530-2CC2-5AB0-A7BB-D1FEC724986D','765','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','79374624','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D8E56530-2CC2-5AB0-A7BB-D1FEC724986D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D8E56530-2CC2-5AB0-A7BB-D1FEC724986D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D8E56530-2CC2-5AB0-A7BB-D1FEC724986D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '588210C1-DFCF-57AF-8726-7F9B9130EAD9', 'sequence': {'long': 766}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'588210C1-DFCF-57AF-8726-7F9B9130EAD9','766','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'588210C1-DFCF-57AF-8726-7F9B9130EAD9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'588210C1-DFCF-57AF-8726-7F9B9130EAD9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'588210C1-DFCF-57AF-8726-7F9B9130EAD9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C1BAAC7B-6408-56E1-9505-3E17E1C10D44', 'sequence': {'long': 767}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59824288}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C1BAAC7B-6408-56E1-9505-3E17E1C10D44','767','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','59824288','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C1BAAC7B-6408-56E1-9505-3E17E1C10D44','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C1BAAC7B-6408-56E1-9505-3E17E1C10D44','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C1BAAC7B-6408-56E1-9505-3E17E1C10D44','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8B4B8165-6C13-588A-9886-848A405D5316', 'sequence': {'long': 768}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8B4B8165-6C13-588A-9886-848A405D5316','768','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8B4B8165-6C13-588A-9886-848A405D5316','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8B4B8165-6C13-588A-9886-848A405D5316','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8B4B8165-6C13-588A-9886-848A405D5316','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '20EE75F3-84C0-5C32-8C3E-0D47E81A9D48', 'sequence': {'long': 769}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59824416}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'20EE75F3-84C0-5C32-8C3E-0D47E81A9D48','769','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','59824416','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'20EE75F3-84C0-5C32-8C3E-0D47E81A9D48','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'20EE75F3-84C0-5C32-8C3E-0D47E81A9D48','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'20EE75F3-84C0-5C32-8C3E-0D47E81A9D48','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8167A621-4C42-545C-9EA6-1FB80D035ED9', 'sequence': {'long': 770}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8167A621-4C42-545C-9EA6-1FB80D035ED9','770','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8167A621-4C42-545C-9EA6-1FB80D035ED9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8167A621-4C42-545C-9EA6-1FB80D035ED9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8167A621-4C42-545C-9EA6-1FB80D035ED9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0F5D9991-5FA9-5C5D-8392-8506C2DC6253', 'sequence': {'long': 771}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56430592}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0F5D9991-5FA9-5C5D-8392-8506C2DC6253','771','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','56430592','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0F5D9991-5FA9-5C5D-8392-8506C2DC6253','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0F5D9991-5FA9-5C5D-8392-8506C2DC6253','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0F5D9991-5FA9-5C5D-8392-8506C2DC6253','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3201EAB5-AC4E-5510-8881-1EC859A15D80', 'sequence': {'long': 772}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3201EAB5-AC4E-5510-8881-1EC859A15D80','772','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3201EAB5-AC4E-5510-8881-1EC859A15D80','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3201EAB5-AC4E-5510-8881-1EC859A15D80','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3201EAB5-AC4E-5510-8881-1EC859A15D80','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D939A1EA-9BE0-532A-AA66-10DADDF6305B', 'sequence': {'long': 773}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56430720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D939A1EA-9BE0-532A-AA66-10DADDF6305B','773','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','56430720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D939A1EA-9BE0-532A-AA66-10DADDF6305B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D939A1EA-9BE0-532A-AA66-10DADDF6305B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D939A1EA-9BE0-532A-AA66-10DADDF6305B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2BCD798B-E75A-5A83-9808-C788995D73C5', 'sequence': {'long': 774}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2BCD798B-E75A-5A83-9808-C788995D73C5','774','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2BCD798B-E75A-5A83-9808-C788995D73C5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2BCD798B-E75A-5A83-9808-C788995D73C5','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2BCD798B-E75A-5A83-9808-C788995D73C5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '56046D8E-D7F7-5A32-B3C0-95A240C3E80F', 'sequence': {'long': 775}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56431696}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'56046D8E-D7F7-5A32-B3C0-95A240C3E80F','775','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','56431696','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'56046D8E-D7F7-5A32-B3C0-95A240C3E80F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'56046D8E-D7F7-5A32-B3C0-95A240C3E80F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'56046D8E-D7F7-5A32-B3C0-95A240C3E80F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '880EDA7C-E485-5713-BC2C-7A36D3B9591E', 'sequence': {'long': 776}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'880EDA7C-E485-5713-BC2C-7A36D3B9591E','776','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'880EDA7C-E485-5713-BC2C-7A36D3B9591E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'880EDA7C-E485-5713-BC2C-7A36D3B9591E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'880EDA7C-E485-5713-BC2C-7A36D3B9591E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C678F4DB-2434-52B8-84A5-10ACA9A53FBC', 'sequence': {'long': 777}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56431824}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C678F4DB-2434-52B8-84A5-10ACA9A53FBC','777','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','56431824','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C678F4DB-2434-52B8-84A5-10ACA9A53FBC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C678F4DB-2434-52B8-84A5-10ACA9A53FBC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C678F4DB-2434-52B8-84A5-10ACA9A53FBC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FD65DFE7-99FD-52C7-B789-A04F0A0FCCFD', 'sequence': {'long': 778}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FD65DFE7-99FD-52C7-B789-A04F0A0FCCFD','778','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FD65DFE7-99FD-52C7-B789-A04F0A0FCCFD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FD65DFE7-99FD-52C7-B789-A04F0A0FCCFD','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FD65DFE7-99FD-52C7-B789-A04F0A0FCCFD','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '019B240A-D526-5838-A452-E099F105908F', 'sequence': {'long': 779}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56432800}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'019B240A-D526-5838-A452-E099F105908F','779','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','56432800','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'019B240A-D526-5838-A452-E099F105908F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'019B240A-D526-5838-A452-E099F105908F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'019B240A-D526-5838-A452-E099F105908F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C8F40E16-F158-52C5-B5B7-5A33C77D0188', 'sequence': {'long': 780}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C8F40E16-F158-52C5-B5B7-5A33C77D0188','780','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C8F40E16-F158-52C5-B5B7-5A33C77D0188','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C8F40E16-F158-52C5-B5B7-5A33C77D0188','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C8F40E16-F158-52C5-B5B7-5A33C77D0188','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9F38D4A4-4491-50A9-8C78-58BED782977E', 'sequence': {'long': 781}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56432928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9F38D4A4-4491-50A9-8C78-58BED782977E','781','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','56432928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9F38D4A4-4491-50A9-8C78-58BED782977E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9F38D4A4-4491-50A9-8C78-58BED782977E','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9F38D4A4-4491-50A9-8C78-58BED782977E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2E7E6E78-369A-568A-AD89-8951EAB5DCDE', 'sequence': {'long': 782}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2E7E6E78-369A-568A-AD89-8951EAB5DCDE','782','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2E7E6E78-369A-568A-AD89-8951EAB5DCDE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2E7E6E78-369A-568A-AD89-8951EAB5DCDE','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2E7E6E78-369A-568A-AD89-8951EAB5DCDE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '194BD510-DA7B-57B3-BDC4-385A62E7134F', 'sequence': {'long': 783}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56434688}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'194BD510-DA7B-57B3-BDC4-385A62E7134F','783','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','56434688','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'194BD510-DA7B-57B3-BDC4-385A62E7134F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'194BD510-DA7B-57B3-BDC4-385A62E7134F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'194BD510-DA7B-57B3-BDC4-385A62E7134F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '45FC59AB-4E3B-5B0A-88F3-BB80A105679C', 'sequence': {'long': 784}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'45FC59AB-4E3B-5B0A-88F3-BB80A105679C','784','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'45FC59AB-4E3B-5B0A-88F3-BB80A105679C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'45FC59AB-4E3B-5B0A-88F3-BB80A105679C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'45FC59AB-4E3B-5B0A-88F3-BB80A105679C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F769791C-2E00-5C19-9B0E-CA7BA2531740', 'sequence': {'long': 785}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56434816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F769791C-2E00-5C19-9B0E-CA7BA2531740','785','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','56434816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F769791C-2E00-5C19-9B0E-CA7BA2531740','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F769791C-2E00-5C19-9B0E-CA7BA2531740','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F769791C-2E00-5C19-9B0E-CA7BA2531740','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '716E682F-18E3-5837-8983-BD166E602FBA', 'sequence': {'long': 786}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'716E682F-18E3-5837-8983-BD166E602FBA','786','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'716E682F-18E3-5837-8983-BD166E602FBA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'716E682F-18E3-5837-8983-BD166E602FBA','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'716E682F-18E3-5837-8983-BD166E602FBA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '16428AA9-3E7A-5A1A-B5A9-3D2CF6E122C3', 'sequence': {'long': 787}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56435792}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'16428AA9-3E7A-5A1A-B5A9-3D2CF6E122C3','787','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','56435792','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'16428AA9-3E7A-5A1A-B5A9-3D2CF6E122C3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'16428AA9-3E7A-5A1A-B5A9-3D2CF6E122C3','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'16428AA9-3E7A-5A1A-B5A9-3D2CF6E122C3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5F002099-5888-55C3-89A1-4EFF83BFEBE1', 'sequence': {'long': 788}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5F002099-5888-55C3-89A1-4EFF83BFEBE1','788','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5F002099-5888-55C3-89A1-4EFF83BFEBE1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5F002099-5888-55C3-89A1-4EFF83BFEBE1','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5F002099-5888-55C3-89A1-4EFF83BFEBE1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '293E42C1-3E8E-5DFB-9994-EA711C67578D', 'sequence': {'long': 789}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56435920}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'293E42C1-3E8E-5DFB-9994-EA711C67578D','789','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866533353161','aue_lseek','56435920','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'293E42C1-3E8E-5DFB-9994-EA711C67578D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'293E42C1-3E8E-5DFB-9994-EA711C67578D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'293E42C1-3E8E-5DFB-9994-EA711C67578D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '96334E06-4F54-56C1-BF05-0D7EE5235A91', 'sequence': {'long': 790}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866533353161, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'96334E06-4F54-56C1-BF05-0D7EE5235A91','790','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866533353161','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'96334E06-4F54-56C1-BF05-0D7EE5235A91','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'96334E06-4F54-56C1-BF05-0D7EE5235A91','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'96334E06-4F54-56C1-BF05-0D7EE5235A91','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '09C2C628-84F3-52FE-B9E8-D52B2BE19036', 'sequence': {'long': 791}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56436896}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'09C2C628-84F3-52FE-B9E8-D52B2BE19036','791','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','56436896','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'09C2C628-84F3-52FE-B9E8-D52B2BE19036','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'09C2C628-84F3-52FE-B9E8-D52B2BE19036','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'09C2C628-84F3-52FE-B9E8-D52B2BE19036','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '26727370-554E-5D04-A4DC-6788C978C846', 'sequence': {'long': 792}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'26727370-554E-5D04-A4DC-6788C978C846','792','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'26727370-554E-5D04-A4DC-6788C978C846','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'26727370-554E-5D04-A4DC-6788C978C846','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'26727370-554E-5D04-A4DC-6788C978C846','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0AF53089-F8E6-5A43-B2A0-271EBE7DF481', 'sequence': {'long': 793}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56437024}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0AF53089-F8E6-5A43-B2A0-271EBE7DF481','793','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','56437024','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0AF53089-F8E6-5A43-B2A0-271EBE7DF481','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0AF53089-F8E6-5A43-B2A0-271EBE7DF481','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0AF53089-F8E6-5A43-B2A0-271EBE7DF481','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CD19C799-32F2-53B1-8C82-948322F29549', 'sequence': {'long': 794}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CD19C799-32F2-53B1-8C82-948322F29549','794','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CD19C799-32F2-53B1-8C82-948322F29549','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CD19C799-32F2-53B1-8C82-948322F29549','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CD19C799-32F2-53B1-8C82-948322F29549','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '71664219-EA58-5CE7-A8E4-E2B91BACB7FC', 'sequence': {'long': 795}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56438784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'71664219-EA58-5CE7-A8E4-E2B91BACB7FC','795','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','56438784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'71664219-EA58-5CE7-A8E4-E2B91BACB7FC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'71664219-EA58-5CE7-A8E4-E2B91BACB7FC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'71664219-EA58-5CE7-A8E4-E2B91BACB7FC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '539C2E36-B93D-57FA-A745-6AD17EAEC033', 'sequence': {'long': 796}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'539C2E36-B93D-57FA-A745-6AD17EAEC033','796','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'539C2E36-B93D-57FA-A745-6AD17EAEC033','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'539C2E36-B93D-57FA-A745-6AD17EAEC033','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'539C2E36-B93D-57FA-A745-6AD17EAEC033','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9AF79B7D-7796-5277-8CB7-7614AEA859C9', 'sequence': {'long': 797}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56438912}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9AF79B7D-7796-5277-8CB7-7614AEA859C9','797','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','56438912','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9AF79B7D-7796-5277-8CB7-7614AEA859C9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9AF79B7D-7796-5277-8CB7-7614AEA859C9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9AF79B7D-7796-5277-8CB7-7614AEA859C9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E78C6615-78FB-5914-AF7D-8F0E97C01A6A', 'sequence': {'long': 798}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E78C6615-78FB-5914-AF7D-8F0E97C01A6A','798','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E78C6615-78FB-5914-AF7D-8F0E97C01A6A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E78C6615-78FB-5914-AF7D-8F0E97C01A6A','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E78C6615-78FB-5914-AF7D-8F0E97C01A6A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A89B756C-80E1-519C-AE78-3CD3D2260FF0', 'sequence': {'long': 799}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56439888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A89B756C-80E1-519C-AE78-3CD3D2260FF0','799','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','56439888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A89B756C-80E1-519C-AE78-3CD3D2260FF0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A89B756C-80E1-519C-AE78-3CD3D2260FF0','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A89B756C-80E1-519C-AE78-3CD3D2260FF0','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '838220D4-54E2-5428-A00F-DC4BF506519D', 'sequence': {'long': 800}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'838220D4-54E2-5428-A00F-DC4BF506519D','800','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'838220D4-54E2-5428-A00F-DC4BF506519D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'838220D4-54E2-5428-A00F-DC4BF506519D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'838220D4-54E2-5428-A00F-DC4BF506519D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7AAA4C7A-B9FB-5FCD-B5CF-B13304557EDB', 'sequence': {'long': 801}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56440016}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7AAA4C7A-B9FB-5FCD-B5CF-B13304557EDB','801','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','56440016','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7AAA4C7A-B9FB-5FCD-B5CF-B13304557EDB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7AAA4C7A-B9FB-5FCD-B5CF-B13304557EDB','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7AAA4C7A-B9FB-5FCD-B5CF-B13304557EDB','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '363C7223-A3AF-56CE-A55E-F1F73CDC288F', 'sequence': {'long': 802}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'363C7223-A3AF-56CE-A55E-F1F73CDC288F','802','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'363C7223-A3AF-56CE-A55E-F1F73CDC288F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'363C7223-A3AF-56CE-A55E-F1F73CDC288F','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'363C7223-A3AF-56CE-A55E-F1F73CDC288F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '02353189-0007-5D66-BF64-4CEAB2D04782', 'sequence': {'long': 803}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56440992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'02353189-0007-5D66-BF64-4CEAB2D04782','803','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','56440992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'02353189-0007-5D66-BF64-4CEAB2D04782','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'02353189-0007-5D66-BF64-4CEAB2D04782','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'02353189-0007-5D66-BF64-4CEAB2D04782','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6F7FBC8E-13C1-5D0B-9673-F9E79C02E6FC', 'sequence': {'long': 804}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6F7FBC8E-13C1-5D0B-9673-F9E79C02E6FC','804','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6F7FBC8E-13C1-5D0B-9673-F9E79C02E6FC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6F7FBC8E-13C1-5D0B-9673-F9E79C02E6FC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6F7FBC8E-13C1-5D0B-9673-F9E79C02E6FC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0C4AE25D-57A1-5C3C-ABA0-60030D132EF1', 'sequence': {'long': 805}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56441120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0C4AE25D-57A1-5C3C-ABA0-60030D132EF1','805','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','56441120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C4AE25D-57A1-5C3C-ABA0-60030D132EF1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C4AE25D-57A1-5C3C-ABA0-60030D132EF1','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0C4AE25D-57A1-5C3C-ABA0-60030D132EF1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B834FD00-5B54-5CD3-891A-C612A6DC5C20', 'sequence': {'long': 806}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B834FD00-5B54-5CD3-891A-C612A6DC5C20','806','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B834FD00-5B54-5CD3-891A-C612A6DC5C20','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B834FD00-5B54-5CD3-891A-C612A6DC5C20','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B834FD00-5B54-5CD3-891A-C612A6DC5C20','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0C6AA2CD-C623-5186-9E55-ABF39DC38139', 'sequence': {'long': 807}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55747664}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0C6AA2CD-C623-5186-9E55-ABF39DC38139','807','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','55747664','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C6AA2CD-C623-5186-9E55-ABF39DC38139','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C6AA2CD-C623-5186-9E55-ABF39DC38139','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0C6AA2CD-C623-5186-9E55-ABF39DC38139','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6EFC4B3A-77B8-54AF-A2B4-E7E1C6C54A1D', 'sequence': {'long': 808}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6EFC4B3A-77B8-54AF-A2B4-E7E1C6C54A1D','808','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6EFC4B3A-77B8-54AF-A2B4-E7E1C6C54A1D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6EFC4B3A-77B8-54AF-A2B4-E7E1C6C54A1D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6EFC4B3A-77B8-54AF-A2B4-E7E1C6C54A1D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EB558E5F-C45B-5306-9217-CA15D7DD516C', 'sequence': {'long': 809}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55747792}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EB558E5F-C45B-5306-9217-CA15D7DD516C','809','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','55747792','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EB558E5F-C45B-5306-9217-CA15D7DD516C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EB558E5F-C45B-5306-9217-CA15D7DD516C','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EB558E5F-C45B-5306-9217-CA15D7DD516C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '52D9C7AA-5913-5D4F-875F-F801E25282EF', 'sequence': {'long': 810}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'52D9C7AA-5913-5D4F-875F-F801E25282EF','810','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'52D9C7AA-5913-5D4F-875F-F801E25282EF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'52D9C7AA-5913-5D4F-875F-F801E25282EF','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'52D9C7AA-5913-5D4F-875F-F801E25282EF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0B281BE0-685B-5159-AA71-CB62F2BF2666', 'sequence': {'long': 811}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55748768}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0B281BE0-685B-5159-AA71-CB62F2BF2666','811','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','55748768','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0B281BE0-685B-5159-AA71-CB62F2BF2666','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0B281BE0-685B-5159-AA71-CB62F2BF2666','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0B281BE0-685B-5159-AA71-CB62F2BF2666','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A11BFF9A-BF40-55CD-9E06-F8E5F9FB2F97', 'sequence': {'long': 812}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A11BFF9A-BF40-55CD-9E06-F8E5F9FB2F97','812','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A11BFF9A-BF40-55CD-9E06-F8E5F9FB2F97','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A11BFF9A-BF40-55CD-9E06-F8E5F9FB2F97','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A11BFF9A-BF40-55CD-9E06-F8E5F9FB2F97','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EAE544F7-DBDD-59AA-8CF3-0BCC7D5DA8CC', 'sequence': {'long': 813}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55748896}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EAE544F7-DBDD-59AA-8CF3-0BCC7D5DA8CC','813','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','55748896','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EAE544F7-DBDD-59AA-8CF3-0BCC7D5DA8CC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EAE544F7-DBDD-59AA-8CF3-0BCC7D5DA8CC','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EAE544F7-DBDD-59AA-8CF3-0BCC7D5DA8CC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EA883901-18C5-5EBF-9B08-BA06AD2B43C8', 'sequence': {'long': 814}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EA883901-18C5-5EBF-9B08-BA06AD2B43C8','814','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EA883901-18C5-5EBF-9B08-BA06AD2B43C8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EA883901-18C5-5EBF-9B08-BA06AD2B43C8','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EA883901-18C5-5EBF-9B08-BA06AD2B43C8','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '94DCC7DE-7B85-5FBE-9432-3C2F138FC887', 'sequence': {'long': 815}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55750656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'94DCC7DE-7B85-5FBE-9432-3C2F138FC887','815','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','55750656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'94DCC7DE-7B85-5FBE-9432-3C2F138FC887','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'94DCC7DE-7B85-5FBE-9432-3C2F138FC887','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'94DCC7DE-7B85-5FBE-9432-3C2F138FC887','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B1B905FE-D2A5-516D-BAC3-3DB82F259D00', 'sequence': {'long': 816}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B1B905FE-D2A5-516D-BAC3-3DB82F259D00','816','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B1B905FE-D2A5-516D-BAC3-3DB82F259D00','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B1B905FE-D2A5-516D-BAC3-3DB82F259D00','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B1B905FE-D2A5-516D-BAC3-3DB82F259D00','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '68288CE1-DB40-5CF8-8C4B-DCE97A24C671', 'sequence': {'long': 817}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55750784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'68288CE1-DB40-5CF8-8C4B-DCE97A24C671','817','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','55750784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'68288CE1-DB40-5CF8-8C4B-DCE97A24C671','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'68288CE1-DB40-5CF8-8C4B-DCE97A24C671','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'68288CE1-DB40-5CF8-8C4B-DCE97A24C671','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DFE17E03-FE80-5FAD-B0B3-FDEF65659D01', 'sequence': {'long': 818}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DFE17E03-FE80-5FAD-B0B3-FDEF65659D01','818','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DFE17E03-FE80-5FAD-B0B3-FDEF65659D01','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DFE17E03-FE80-5FAD-B0B3-FDEF65659D01','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DFE17E03-FE80-5FAD-B0B3-FDEF65659D01','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '892CA6CC-7663-522C-8F35-16660CC6F2CA', 'sequence': {'long': 819}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55751760}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'892CA6CC-7663-522C-8F35-16660CC6F2CA','819','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','55751760','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'892CA6CC-7663-522C-8F35-16660CC6F2CA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'892CA6CC-7663-522C-8F35-16660CC6F2CA','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'892CA6CC-7663-522C-8F35-16660CC6F2CA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0F56E3AD-E840-5F8E-824D-09AF85AB98ED', 'sequence': {'long': 820}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0F56E3AD-E840-5F8E-824D-09AF85AB98ED','820','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866543351121','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0F56E3AD-E840-5F8E-824D-09AF85AB98ED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0F56E3AD-E840-5F8E-824D-09AF85AB98ED','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0F56E3AD-E840-5F8E-824D-09AF85AB98ED','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '139BFE2F-28A5-52B9-AC6A-3409210DBAEB', 'sequence': {'long': 821}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866543351121, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55751888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'139BFE2F-28A5-52B9-AC6A-3409210DBAEB','821','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866543351121','aue_lseek','55751888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'139BFE2F-28A5-52B9-AC6A-3409210DBAEB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'139BFE2F-28A5-52B9-AC6A-3409210DBAEB','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'139BFE2F-28A5-52B9-AC6A-3409210DBAEB','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '760E2CE0-8533-5F83-ADBF-931A9550CF3D', 'sequence': {'long': 822}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'760E2CE0-8533-5F83-ADBF-931A9550CF3D','822','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866553353492','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'760E2CE0-8533-5F83-ADBF-931A9550CF3D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'760E2CE0-8533-5F83-ADBF-931A9550CF3D','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'760E2CE0-8533-5F83-ADBF-931A9550CF3D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '29829E1A-41C3-5A20-BE92-2B24A0A79240', 'sequence': {'long': 823}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55752864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'29829E1A-41C3-5A20-BE92-2B24A0A79240','823','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866553353492','aue_lseek','55752864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'29829E1A-41C3-5A20-BE92-2B24A0A79240','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'29829E1A-41C3-5A20-BE92-2B24A0A79240','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'29829E1A-41C3-5A20-BE92-2B24A0A79240','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DF133913-E85B-556E-80C2-D606CFDD154B', 'sequence': {'long': 824}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DF133913-E85B-556E-80C2-D606CFDD154B','824','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866553353492','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DF133913-E85B-556E-80C2-D606CFDD154B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DF133913-E85B-556E-80C2-D606CFDD154B','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DF133913-E85B-556E-80C2-D606CFDD154B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '380A7559-74C9-5107-A123-900993405A11', 'sequence': {'long': 825}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55752992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'380A7559-74C9-5107-A123-900993405A11','825','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706866553353492','aue_lseek','55752992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'380A7559-74C9-5107-A123-900993405A11','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'380A7559-74C9-5107-A123-900993405A11','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'380A7559-74C9-5107-A123-900993405A11','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BFF0BF22-9046-5CE6-AB9C-B87F2A9CD4E9', 'sequence': {'long': 826}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BFF0BF22-9046-5CE6-AB9C-B87F2A9CD4E9','826','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706866553353492','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BFF0BF22-9046-5CE6-AB9C-B87F2A9CD4E9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BFF0BF22-9046-5CE6-AB9C-B87F2A9CD4E9','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BFF0BF22-9046-5CE6-AB9C-B87F2A9CD4E9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '890A9043-18A4-5DF0-AE3E-DE7B6F133337', 'sequence': {'long': 827}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'890A9043-18A4-5DF0-AE3E-DE7B6F133337','827','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','1522706866553353492','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'890A9043-18A4-5DF0-AE3E-DE7B6F133337','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'890A9043-18A4-5DF0-AE3E-DE7B6F133337','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'890A9043-18A4-5DF0-AE3E-DE7B6F133337','4635AFD1-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '46494307-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2809, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706866553353492, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'46494307-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2809','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706866553353492','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'46494307-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'46494307-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'46494307-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'46494307-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5D03D5EE-9FC1-55E0-B078-662D2117B0D7', 'sequence': {'long': 828}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2809', 'exec': 'bash', 'arg_pid': '2809', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'5D03D5EE-9FC1-55E0-B078-662D2117B0D7','828','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','46494307-36C2-11E8-BF66-D9AA8AFF4A69','1522706866553353492','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2809','bash','2809','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5D03D5EE-9FC1-55E0-B078-662D2117B0D7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5D03D5EE-9FC1-55E0-B078-662D2117B0D7','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5D03D5EE-9FC1-55E0-B078-662D2117B0D7','46494307-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5E346819-97B7-5E6A-AB00-F0F54A4603E4', 'sequence': {'long': 829}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5E346819-97B7-5E6A-AB00-F0F54A4603E4','829','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706866553353492','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5E346819-97B7-5E6A-AB00-F0F54A4603E4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5E346819-97B7-5E6A-AB00-F0F54A4603E4','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5E346819-97B7-5E6A-AB00-F0F54A4603E4','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3837AA55-6848-53AD-B900-3B370885238A', 'sequence': {'long': 830}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C836AA2-BB54-3A58-94BB-1E5D583A637E'}, 'predicateObjectPath': {'string': '/bin/sleep'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'sleep 57', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3837AA55-6848-53AD-B900-3B370885238A','830','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','6C836AA2-BB54-3A58-94BB-1E5D583A637E','/bin/sleep','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706866553353492','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','sleep 57','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3837AA55-6848-53AD-B900-3B370885238A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3837AA55-6848-53AD-B900-3B370885238A','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3837AA55-6848-53AD-B900-3B370885238A','6C836AA2-BB54-3A58-94BB-1E5D583A637E','affects'),(nextval('edge_number_seq'),'3837AA55-6848-53AD-B900-3B370885238A','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D2DC628F-0B3A-5619-B6DD-3C57BB85A338', 'sequence': {'long': 831}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D2DC628F-0B3A-5619-B6DD-3C57BB85A338','831','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706866553353492','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D2DC628F-0B3A-5619-B6DD-3C57BB85A338','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D2DC628F-0B3A-5619-B6DD-3C57BB85A338','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D2DC628F-0B3A-5619-B6DD-3C57BB85A338','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A96131CE-8803-5593-8E7A-960DE2FF89EB', 'sequence': {'long': 832}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A96131CE-8803-5593-8E7A-960DE2FF89EB','832','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706866553353492','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A96131CE-8803-5593-8E7A-960DE2FF89EB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A96131CE-8803-5593-8E7A-960DE2FF89EB','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A96131CE-8803-5593-8E7A-960DE2FF89EB','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BEF29BD1-7644-59AE-80D6-1C376168F9AB', 'sequence': {'long': 833}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BEF29BD1-7644-59AE-80D6-1C376168F9AB','833','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706866553353492','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BEF29BD1-7644-59AE-80D6-1C376168F9AB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BEF29BD1-7644-59AE-80D6-1C376168F9AB','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BEF29BD1-7644-59AE-80D6-1C376168F9AB','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1DCAE590-128E-5D70-BE6D-E4CDC92FF256', 'sequence': {'long': 834}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1DCAE590-128E-5D70-BE6D-E4CDC92FF256','834','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706866553353492','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1DCAE590-128E-5D70-BE6D-E4CDC92FF256','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1DCAE590-128E-5D70-BE6D-E4CDC92FF256','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1DCAE590-128E-5D70-BE6D-E4CDC92FF256','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7AD4D375-6C4E-5251-B186-4AA630BAAA34', 'sequence': {'long': 835}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7AD4D375-6C4E-5251-B186-4AA630BAAA34','835','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706866553353492','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7AD4D375-6C4E-5251-B186-4AA630BAAA34','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7AD4D375-6C4E-5251-B186-4AA630BAAA34','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7AD4D375-6C4E-5251-B186-4AA630BAAA34','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '52BFDF23-AB90-5BB7-BEB5-D8980052E510', 'sequence': {'long': 836}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'52BFDF23-AB90-5BB7-BEB5-D8980052E510','836','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706866553353492','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'52BFDF23-AB90-5BB7-BEB5-D8980052E510','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'52BFDF23-AB90-5BB7-BEB5-D8980052E510','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'52BFDF23-AB90-5BB7-BEB5-D8980052E510','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E3BE50A9-1F7C-5955-9E61-E548C74FE7B0', 'sequence': {'long': 837}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E3BE50A9-1F7C-5955-9E61-E548C74FE7B0','837','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706866553353492','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E3BE50A9-1F7C-5955-9E61-E548C74FE7B0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E3BE50A9-1F7C-5955-9E61-E548C74FE7B0','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E3BE50A9-1F7C-5955-9E61-E548C74FE7B0','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E50271D6-E00D-5672-B3AD-106DAF4E30F7', 'sequence': {'long': 838}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E50271D6-E00D-5672-B3AD-106DAF4E30F7','838','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706866553353492','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E50271D6-E00D-5672-B3AD-106DAF4E30F7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E50271D6-E00D-5672-B3AD-106DAF4E30F7','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E50271D6-E00D-5672-B3AD-106DAF4E30F7','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2E222D06-1DC4-5508-84F8-0573D7CED813', 'sequence': {'long': 839}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2E222D06-1DC4-5508-84F8-0573D7CED813','839','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866553353492','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2E222D06-1DC4-5508-84F8-0573D7CED813','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2E222D06-1DC4-5508-84F8-0573D7CED813','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2E222D06-1DC4-5508-84F8-0573D7CED813','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1D7BF2CF-DD8B-59FD-9355-3D02467C6CDD', 'sequence': {'long': 840}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1D7BF2CF-DD8B-59FD-9355-3D02467C6CDD','840','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866553353492','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1D7BF2CF-DD8B-59FD-9355-3D02467C6CDD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1D7BF2CF-DD8B-59FD-9355-3D02467C6CDD','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1D7BF2CF-DD8B-59FD-9355-3D02467C6CDD','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3AFDD3AF-7046-5817-AFBB-F9F87932B50C', 'sequence': {'long': 841}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3AFDD3AF-7046-5817-AFBB-F9F87932B50C','841','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866553353492','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3AFDD3AF-7046-5817-AFBB-F9F87932B50C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3AFDD3AF-7046-5817-AFBB-F9F87932B50C','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3AFDD3AF-7046-5817-AFBB-F9F87932B50C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C08EEFF4-EAAA-5C51-8BCF-04909992E0EE', 'sequence': {'long': 842}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C08EEFF4-EAAA-5C51-8BCF-04909992E0EE','842','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866553353492','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C08EEFF4-EAAA-5C51-8BCF-04909992E0EE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C08EEFF4-EAAA-5C51-8BCF-04909992E0EE','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C08EEFF4-EAAA-5C51-8BCF-04909992E0EE','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6B1FED71-6483-5162-917D-9C9926AC1BE2', 'sequence': {'long': 843}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6B1FED71-6483-5162-917D-9C9926AC1BE2','843','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866553353492','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6B1FED71-6483-5162-917D-9C9926AC1BE2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6B1FED71-6483-5162-917D-9C9926AC1BE2','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6B1FED71-6483-5162-917D-9C9926AC1BE2','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '714AEDE6-AEE6-5F33-8C9E-D664B7F6AC7C', 'sequence': {'long': 844}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'714AEDE6-AEE6-5F33-8C9E-D664B7F6AC7C','844','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866553353492','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'714AEDE6-AEE6-5F33-8C9E-D664B7F6AC7C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'714AEDE6-AEE6-5F33-8C9E-D664B7F6AC7C','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'714AEDE6-AEE6-5F33-8C9E-D664B7F6AC7C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A04835BC-359E-57CB-8D94-74651E919B8A', 'sequence': {'long': 845}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866553353492, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A04835BC-359E-57CB-8D94-74651E919B8A','845','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706866553353492','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A04835BC-359E-57CB-8D94-74651E919B8A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A04835BC-359E-57CB-8D94-74651E919B8A','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A04835BC-359E-57CB-8D94-74651E919B8A','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '74EF780B-C906-5DF9-8EAD-04FDE54FB212', 'sequence': {'long': 846}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866563356902, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'74EF780B-C906-5DF9-8EAD-04FDE54FB212','846','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706866563356902','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'74EF780B-C906-5DF9-8EAD-04FDE54FB212','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'74EF780B-C906-5DF9-8EAD-04FDE54FB212','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'74EF780B-C906-5DF9-8EAD-04FDE54FB212','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3B0B84FD-14AC-5ED4-87E3-3F48F820BB0C', 'sequence': {'long': 847}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866563356902, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3B0B84FD-14AC-5ED4-87E3-3F48F820BB0C','847','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706866563356902','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3B0B84FD-14AC-5ED4-87E3-3F48F820BB0C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3B0B84FD-14AC-5ED4-87E3-3F48F820BB0C','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3B0B84FD-14AC-5ED4-87E3-3F48F820BB0C','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '15E2843E-F75C-5A8F-8CD4-66AAB71A634A', 'sequence': {'long': 848}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866563356902, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'15E2843E-F75C-5A8F-8CD4-66AAB71A634A','848','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706866563356902','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'15E2843E-F75C-5A8F-8CD4-66AAB71A634A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'15E2843E-F75C-5A8F-8CD4-66AAB71A634A','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'15E2843E-F75C-5A8F-8CD4-66AAB71A634A','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7C847776-09CB-5918-97B7-7BCD93A9150B', 'sequence': {'long': 849}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866563356902, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7C847776-09CB-5918-97B7-7BCD93A9150B','849','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706866563356902','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7C847776-09CB-5918-97B7-7BCD93A9150B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7C847776-09CB-5918-97B7-7BCD93A9150B','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7C847776-09CB-5918-97B7-7BCD93A9150B','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0987EDBC-9C0E-5A04-88BB-2AEC890838E2', 'sequence': {'long': 850}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '45D833E9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866813351271, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0987EDBC-9C0E-5A04-88BB-2AEC890838E2','850','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','45D833E9-36C2-11E8-BF66-D9AA8AFF4A69','1522706866813351271','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0987EDBC-9C0E-5A04-88BB-2AEC890838E2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0987EDBC-9C0E-5A04-88BB-2AEC890838E2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0987EDBC-9C0E-5A04-88BB-2AEC890838E2','45D833E9-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '14276F5F-6B06-5C8F-814C-D5E2DE8F18E9', 'sequence': {'long': 851}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '45D83503-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866813351271, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'14276F5F-6B06-5C8F-814C-D5E2DE8F18E9','851','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','45D83503-36C2-11E8-BF66-D9AA8AFF4A69','1522706866813351271','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'14276F5F-6B06-5C8F-814C-D5E2DE8F18E9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'14276F5F-6B06-5C8F-814C-D5E2DE8F18E9','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'14276F5F-6B06-5C8F-814C-D5E2DE8F18E9','45D83503-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4670CB82-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4670CB82-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4670CB82-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4670CB82-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4670CACA-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4670CACA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4670CACA-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4670CACA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F65C4C9A-B0F8-510A-BABF-D5B4A4031972', 'sequence': {'long': 852}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4670CACA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4670CB82-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706866813351271, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F65C4C9A-B0F8-510A-BABF-D5B4A4031972','852','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4670CACA-36C2-11E8-BF66-D9AA8AFF4A69','4670CB82-36C2-11E8-BF66-D9AA8AFF4A69','1522706866813351271','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F65C4C9A-B0F8-510A-BABF-D5B4A4031972','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F65C4C9A-B0F8-510A-BABF-D5B4A4031972','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F65C4C9A-B0F8-510A-BABF-D5B4A4031972','4670CACA-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'F65C4C9A-B0F8-510A-BABF-D5B4A4031972','4670CB82-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '192CB234-CF5D-5C71-8105-8053993D26F6', 'sequence': {'long': 853}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866813351271, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'192CB234-CF5D-5C71-8105-8053993D26F6','853','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706866813351271','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'192CB234-CF5D-5C71-8105-8053993D26F6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'192CB234-CF5D-5C71-8105-8053993D26F6','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0E4FBF06-E6FC-5C0B-A2F1-4AE22B64C7A1', 'sequence': {'long': 854}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866813351271, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0E4FBF06-E6FC-5C0B-A2F1-4AE22B64C7A1','854','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706866813351271','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0E4FBF06-E6FC-5C0B-A2F1-4AE22B64C7A1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0E4FBF06-E6FC-5C0B-A2F1-4AE22B64C7A1','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '365EC621-3401-5BB9-A8A5-CBFA5A84D08A', 'sequence': {'long': 855}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866813351271, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'365EC621-3401-5BB9-A8A5-CBFA5A84D08A','855','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706866813351271','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'365EC621-3401-5BB9-A8A5-CBFA5A84D08A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'365EC621-3401-5BB9-A8A5-CBFA5A84D08A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '32E3A91C-A010-5DF9-8928-C58D604EA1B9', 'sequence': {'long': 856}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706866813351271, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'32E3A91C-A010-5DF9-8928-C58D604EA1B9','856','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706866813351271','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'32E3A91C-A010-5DF9-8928-C58D604EA1B9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'32E3A91C-A010-5DF9-8928-C58D604EA1B9','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '99A2EF6E-E8E8-5B9D-972E-13AB6CD7A8E2', 'sequence': {'long': 857}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4670CACA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706867813354717, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'99A2EF6E-E8E8-5B9D-972E-13AB6CD7A8E2','857','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4670CACA-36C2-11E8-BF66-D9AA8AFF4A69','1522706867813354717','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'99A2EF6E-E8E8-5B9D-972E-13AB6CD7A8E2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'99A2EF6E-E8E8-5B9D-972E-13AB6CD7A8E2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'99A2EF6E-E8E8-5B9D-972E-13AB6CD7A8E2','4670CACA-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E9F722B5-BB6B-5678-A7C6-AC028B39E8FF', 'sequence': {'long': 858}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4670CB82-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706867813354717, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E9F722B5-BB6B-5678-A7C6-AC028B39E8FF','858','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4670CB82-36C2-11E8-BF66-D9AA8AFF4A69','1522706867813354717','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E9F722B5-BB6B-5678-A7C6-AC028B39E8FF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E9F722B5-BB6B-5678-A7C6-AC028B39E8FF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E9F722B5-BB6B-5678-A7C6-AC028B39E8FF','4670CB82-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4709607F-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4709607F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4709607F-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4709607F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '47095FD2-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'47095FD2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'47095FD2-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'47095FD2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3E7FF5B-C789-586F-9D3B-F647B596EC15', 'sequence': {'long': 859}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '47095FD2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4709607F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706867813354717, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3E7FF5B-C789-586F-9D3B-F647B596EC15','859','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','47095FD2-36C2-11E8-BF66-D9AA8AFF4A69','4709607F-36C2-11E8-BF66-D9AA8AFF4A69','1522706867813354717','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3E7FF5B-C789-586F-9D3B-F647B596EC15','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3E7FF5B-C789-586F-9D3B-F647B596EC15','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B3E7FF5B-C789-586F-9D3B-F647B596EC15','47095FD2-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'B3E7FF5B-C789-586F-9D3B-F647B596EC15','4709607F-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C552D9B2-5CEB-5E9B-B752-072492990422', 'sequence': {'long': 860}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706867813354717, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C552D9B2-5CEB-5E9B-B752-072492990422','860','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706867813354717','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C552D9B2-5CEB-5E9B-B752-072492990422','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C552D9B2-5CEB-5E9B-B752-072492990422','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '13251A4E-7284-501C-A29D-FB9FEE603529', 'sequence': {'long': 861}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706867813354717, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'13251A4E-7284-501C-A29D-FB9FEE603529','861','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706867813354717','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'13251A4E-7284-501C-A29D-FB9FEE603529','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'13251A4E-7284-501C-A29D-FB9FEE603529','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '323FBE59-C5F1-51A5-9737-83A48D642F65', 'sequence': {'long': 862}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706867813354717, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'323FBE59-C5F1-51A5-9737-83A48D642F65','862','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706867813354717','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'323FBE59-C5F1-51A5-9737-83A48D642F65','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'323FBE59-C5F1-51A5-9737-83A48D642F65','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '643380A7-5C22-5AAA-9C60-24602B14BE3D', 'sequence': {'long': 863}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706867813354717, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'643380A7-5C22-5AAA-9C60-24602B14BE3D','863','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706867813354717','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'643380A7-5C22-5AAA-9C60-24602B14BE3D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'643380A7-5C22-5AAA-9C60-24602B14BE3D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BC2731E2-4DDB-5947-9B58-6A3C2CE41D9F', 'sequence': {'long': 864}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '47095FD2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706868813350563, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BC2731E2-4DDB-5947-9B58-6A3C2CE41D9F','864','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','47095FD2-36C2-11E8-BF66-D9AA8AFF4A69','1522706868813350563','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BC2731E2-4DDB-5947-9B58-6A3C2CE41D9F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BC2731E2-4DDB-5947-9B58-6A3C2CE41D9F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BC2731E2-4DDB-5947-9B58-6A3C2CE41D9F','47095FD2-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A1649AED-F03B-5724-AAE3-A3594DB19D48', 'sequence': {'long': 865}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4709607F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706868813350563, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A1649AED-F03B-5724-AAE3-A3594DB19D48','865','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4709607F-36C2-11E8-BF66-D9AA8AFF4A69','1522706868813350563','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A1649AED-F03B-5724-AAE3-A3594DB19D48','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A1649AED-F03B-5724-AAE3-A3594DB19D48','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A1649AED-F03B-5724-AAE3-A3594DB19D48','4709607F-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '47A1F998-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'47A1F998-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'47A1F998-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'47A1F998-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '47A1F8EA-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'47A1F8EA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'47A1F8EA-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'47A1F8EA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5D16EF48-1DF4-5D5D-8F54-72992D506361', 'sequence': {'long': 866}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '47A1F8EA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '47A1F998-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706868813350563, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5D16EF48-1DF4-5D5D-8F54-72992D506361','866','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','47A1F8EA-36C2-11E8-BF66-D9AA8AFF4A69','47A1F998-36C2-11E8-BF66-D9AA8AFF4A69','1522706868813350563','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5D16EF48-1DF4-5D5D-8F54-72992D506361','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5D16EF48-1DF4-5D5D-8F54-72992D506361','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5D16EF48-1DF4-5D5D-8F54-72992D506361','47A1F8EA-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'5D16EF48-1DF4-5D5D-8F54-72992D506361','47A1F998-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6F09F402-87B4-5D6A-83C5-55D4532CD50B', 'sequence': {'long': 867}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706868813350563, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6F09F402-87B4-5D6A-83C5-55D4532CD50B','867','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706868813350563','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6F09F402-87B4-5D6A-83C5-55D4532CD50B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6F09F402-87B4-5D6A-83C5-55D4532CD50B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C53A9C24-4BE9-500D-927E-DE6426F14323', 'sequence': {'long': 868}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706868813350563, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C53A9C24-4BE9-500D-927E-DE6426F14323','868','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706868813350563','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C53A9C24-4BE9-500D-927E-DE6426F14323','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C53A9C24-4BE9-500D-927E-DE6426F14323','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ADE11E6A-3888-5D22-BD71-C17ACFBC8B65', 'sequence': {'long': 869}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706868813350563, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ADE11E6A-3888-5D22-BD71-C17ACFBC8B65','869','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706868813350563','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ADE11E6A-3888-5D22-BD71-C17ACFBC8B65','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ADE11E6A-3888-5D22-BD71-C17ACFBC8B65','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9075579E-721A-539B-AAFB-D32EE7D97919', 'sequence': {'long': 870}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706868813350563, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9075579E-721A-539B-AAFB-D32EE7D97919','870','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706868813350563','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9075579E-721A-539B-AAFB-D32EE7D97919','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9075579E-721A-539B-AAFB-D32EE7D97919','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '851663B8-D2BE-555B-B9F4-0CBBAC156AF8', 'sequence': {'long': 871}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '47A1F8EA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706869813352840, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'851663B8-D2BE-555B-B9F4-0CBBAC156AF8','871','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','47A1F8EA-36C2-11E8-BF66-D9AA8AFF4A69','1522706869813352840','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'851663B8-D2BE-555B-B9F4-0CBBAC156AF8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'851663B8-D2BE-555B-B9F4-0CBBAC156AF8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'851663B8-D2BE-555B-B9F4-0CBBAC156AF8','47A1F8EA-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4871A256-E7D1-51F4-955C-6C8F8AD2BD41', 'sequence': {'long': 872}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '47A1F998-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706869813352840, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4871A256-E7D1-51F4-955C-6C8F8AD2BD41','872','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','47A1F998-36C2-11E8-BF66-D9AA8AFF4A69','1522706869813352840','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4871A256-E7D1-51F4-955C-6C8F8AD2BD41','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4871A256-E7D1-51F4-955C-6C8F8AD2BD41','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4871A256-E7D1-51F4-955C-6C8F8AD2BD41','47A1F998-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '483A972C-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'483A972C-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'483A972C-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'483A972C-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '483A9679-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'483A9679-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'483A9679-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'483A9679-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2315B32B-204E-58B6-B9D1-37920EBEA4EA', 'sequence': {'long': 873}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '483A9679-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '483A972C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706869813352840, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2315B32B-204E-58B6-B9D1-37920EBEA4EA','873','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','483A9679-36C2-11E8-BF66-D9AA8AFF4A69','483A972C-36C2-11E8-BF66-D9AA8AFF4A69','1522706869813352840','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2315B32B-204E-58B6-B9D1-37920EBEA4EA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2315B32B-204E-58B6-B9D1-37920EBEA4EA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2315B32B-204E-58B6-B9D1-37920EBEA4EA','483A9679-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'2315B32B-204E-58B6-B9D1-37920EBEA4EA','483A972C-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '37D21309-31FA-577D-8C0F-6E0D2DD33F10', 'sequence': {'long': 874}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706869813352840, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'37D21309-31FA-577D-8C0F-6E0D2DD33F10','874','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706869813352840','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'37D21309-31FA-577D-8C0F-6E0D2DD33F10','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'37D21309-31FA-577D-8C0F-6E0D2DD33F10','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B53D52B5-7E4C-5D57-BCF6-9D813A710F63', 'sequence': {'long': 875}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706869813352840, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B53D52B5-7E4C-5D57-BCF6-9D813A710F63','875','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706869813352840','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B53D52B5-7E4C-5D57-BCF6-9D813A710F63','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B53D52B5-7E4C-5D57-BCF6-9D813A710F63','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E7175570-4702-5FA8-A1E9-64343E0FD6CF', 'sequence': {'long': 876}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706869813352840, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E7175570-4702-5FA8-A1E9-64343E0FD6CF','876','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706869813352840','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E7175570-4702-5FA8-A1E9-64343E0FD6CF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E7175570-4702-5FA8-A1E9-64343E0FD6CF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '185B302C-929D-5A49-956F-998CB0E4A247', 'sequence': {'long': 877}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706869813352840, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'185B302C-929D-5A49-956F-998CB0E4A247','877','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706869813352840','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'185B302C-929D-5A49-956F-998CB0E4A247','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'185B302C-929D-5A49-956F-998CB0E4A247','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '675867F7-41E6-5BDB-94C9-3E5824F5D882', 'sequence': {'long': 878}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '483A9679-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706870813354696, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'675867F7-41E6-5BDB-94C9-3E5824F5D882','878','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','483A9679-36C2-11E8-BF66-D9AA8AFF4A69','1522706870813354696','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'675867F7-41E6-5BDB-94C9-3E5824F5D882','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'675867F7-41E6-5BDB-94C9-3E5824F5D882','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'675867F7-41E6-5BDB-94C9-3E5824F5D882','483A9679-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EEFFEC98-750B-57BC-8194-EBE86D5DDAF2', 'sequence': {'long': 879}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '483A972C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706870813354696, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EEFFEC98-750B-57BC-8194-EBE86D5DDAF2','879','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','483A972C-36C2-11E8-BF66-D9AA8AFF4A69','1522706870813354696','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EEFFEC98-750B-57BC-8194-EBE86D5DDAF2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EEFFEC98-750B-57BC-8194-EBE86D5DDAF2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EEFFEC98-750B-57BC-8194-EBE86D5DDAF2','483A972C-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '48D33E48-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'48D33E48-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'48D33E48-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'48D33E48-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '48D33D33-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'48D33D33-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'48D33D33-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'48D33D33-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BE59115C-A9FF-5E27-A7FE-7ADACE9943F4', 'sequence': {'long': 880}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '48D33D33-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '48D33E48-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706870813354696, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BE59115C-A9FF-5E27-A7FE-7ADACE9943F4','880','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','48D33D33-36C2-11E8-BF66-D9AA8AFF4A69','48D33E48-36C2-11E8-BF66-D9AA8AFF4A69','1522706870813354696','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BE59115C-A9FF-5E27-A7FE-7ADACE9943F4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BE59115C-A9FF-5E27-A7FE-7ADACE9943F4','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BE59115C-A9FF-5E27-A7FE-7ADACE9943F4','48D33D33-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'BE59115C-A9FF-5E27-A7FE-7ADACE9943F4','48D33E48-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '23AF2D1F-B778-5BAF-9C8C-278CF64D16B8', 'sequence': {'long': 881}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706870813354696, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'23AF2D1F-B778-5BAF-9C8C-278CF64D16B8','881','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706870813354696','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'23AF2D1F-B778-5BAF-9C8C-278CF64D16B8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'23AF2D1F-B778-5BAF-9C8C-278CF64D16B8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '78C6C03D-F675-56DE-8E7E-FAB45C69D2BF', 'sequence': {'long': 882}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706870813354696, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'78C6C03D-F675-56DE-8E7E-FAB45C69D2BF','882','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706870813354696','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'78C6C03D-F675-56DE-8E7E-FAB45C69D2BF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'78C6C03D-F675-56DE-8E7E-FAB45C69D2BF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A6F06219-7F13-59EF-BF6B-8EE9505E28F5', 'sequence': {'long': 883}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706870813354696, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A6F06219-7F13-59EF-BF6B-8EE9505E28F5','883','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706870813354696','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A6F06219-7F13-59EF-BF6B-8EE9505E28F5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A6F06219-7F13-59EF-BF6B-8EE9505E28F5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5128FA1D-C4AA-578C-9194-B18325200F89', 'sequence': {'long': 884}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706870813354696, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5128FA1D-C4AA-578C-9194-B18325200F89','884','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706870813354696','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5128FA1D-C4AA-578C-9194-B18325200F89','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5128FA1D-C4AA-578C-9194-B18325200F89','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6338706F-C38E-51E5-A047-FC49419FC9AA', 'sequence': {'long': 885}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '48D33D33-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706871813350792, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6338706F-C38E-51E5-A047-FC49419FC9AA','885','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','48D33D33-36C2-11E8-BF66-D9AA8AFF4A69','1522706871813350792','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6338706F-C38E-51E5-A047-FC49419FC9AA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6338706F-C38E-51E5-A047-FC49419FC9AA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6338706F-C38E-51E5-A047-FC49419FC9AA','48D33D33-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7DE84CAA-A801-57F7-A324-AA470AE81429', 'sequence': {'long': 886}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '48D33E48-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706871813350792, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7DE84CAA-A801-57F7-A324-AA470AE81429','886','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','48D33E48-36C2-11E8-BF66-D9AA8AFF4A69','1522706871813350792','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7DE84CAA-A801-57F7-A324-AA470AE81429','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7DE84CAA-A801-57F7-A324-AA470AE81429','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7DE84CAA-A801-57F7-A324-AA470AE81429','48D33E48-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '496BD509-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'496BD509-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'496BD509-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'496BD509-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '496BD400-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'496BD400-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'496BD400-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'496BD400-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0CA88111-8EA8-5BEC-B3C8-DADE619EEC35', 'sequence': {'long': 887}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '496BD400-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '496BD509-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706871813350792, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0CA88111-8EA8-5BEC-B3C8-DADE619EEC35','887','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','496BD400-36C2-11E8-BF66-D9AA8AFF4A69','496BD509-36C2-11E8-BF66-D9AA8AFF4A69','1522706871813350792','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0CA88111-8EA8-5BEC-B3C8-DADE619EEC35','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0CA88111-8EA8-5BEC-B3C8-DADE619EEC35','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0CA88111-8EA8-5BEC-B3C8-DADE619EEC35','496BD400-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'0CA88111-8EA8-5BEC-B3C8-DADE619EEC35','496BD509-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '03C160EC-3A32-5894-8E98-8EF12CB540BA', 'sequence': {'long': 888}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706871813350792, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'03C160EC-3A32-5894-8E98-8EF12CB540BA','888','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706871813350792','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'03C160EC-3A32-5894-8E98-8EF12CB540BA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'03C160EC-3A32-5894-8E98-8EF12CB540BA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3552D9D-6B53-5F8C-A518-2BB9D0AB52B1', 'sequence': {'long': 889}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706871813350792, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3552D9D-6B53-5F8C-A518-2BB9D0AB52B1','889','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706871813350792','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3552D9D-6B53-5F8C-A518-2BB9D0AB52B1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3552D9D-6B53-5F8C-A518-2BB9D0AB52B1','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '49C5B226-316E-5D2D-9281-EF7E2E4B3A0E', 'sequence': {'long': 890}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706871813350792, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'49C5B226-316E-5D2D-9281-EF7E2E4B3A0E','890','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706871813350792','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'49C5B226-316E-5D2D-9281-EF7E2E4B3A0E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'49C5B226-316E-5D2D-9281-EF7E2E4B3A0E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4C7C9A3F-8826-5DB7-AD77-8B816CE3FECF', 'sequence': {'long': 891}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706871813350792, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4C7C9A3F-8826-5DB7-AD77-8B816CE3FECF','891','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706871813350792','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4C7C9A3F-8826-5DB7-AD77-8B816CE3FECF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4C7C9A3F-8826-5DB7-AD77-8B816CE3FECF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '025DA21A-ECD1-5857-9570-890B045AC086', 'sequence': {'long': 892}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '496BD400-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706872813350708, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'025DA21A-ECD1-5857-9570-890B045AC086','892','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','496BD400-36C2-11E8-BF66-D9AA8AFF4A69','1522706872813350708','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'025DA21A-ECD1-5857-9570-890B045AC086','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'025DA21A-ECD1-5857-9570-890B045AC086','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'025DA21A-ECD1-5857-9570-890B045AC086','496BD400-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2DBE7238-9681-5C51-A149-0333D05C54E8', 'sequence': {'long': 893}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '496BD509-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706872813350708, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2DBE7238-9681-5C51-A149-0333D05C54E8','893','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','496BD509-36C2-11E8-BF66-D9AA8AFF4A69','1522706872813350708','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2DBE7238-9681-5C51-A149-0333D05C54E8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2DBE7238-9681-5C51-A149-0333D05C54E8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2DBE7238-9681-5C51-A149-0333D05C54E8','496BD509-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4A0453E2-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4A0453E2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4A0453E2-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4A0453E2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4A04532D-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4A04532D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4A04532D-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4A04532D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '991DA675-46F3-55D9-B885-E7E98A53083B', 'sequence': {'long': 894}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4A04532D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4A0453E2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706872813350708, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'991DA675-46F3-55D9-B885-E7E98A53083B','894','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4A04532D-36C2-11E8-BF66-D9AA8AFF4A69','4A0453E2-36C2-11E8-BF66-D9AA8AFF4A69','1522706872813350708','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'991DA675-46F3-55D9-B885-E7E98A53083B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'991DA675-46F3-55D9-B885-E7E98A53083B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'991DA675-46F3-55D9-B885-E7E98A53083B','4A04532D-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'991DA675-46F3-55D9-B885-E7E98A53083B','4A0453E2-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F1F01C5B-5383-575F-9AE6-9DD856B830AC', 'sequence': {'long': 895}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706872813350708, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F1F01C5B-5383-575F-9AE6-9DD856B830AC','895','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706872813350708','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F1F01C5B-5383-575F-9AE6-9DD856B830AC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F1F01C5B-5383-575F-9AE6-9DD856B830AC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7BCA68FC-CD8F-5698-8C76-B34E48A482A8', 'sequence': {'long': 896}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706872813350708, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7BCA68FC-CD8F-5698-8C76-B34E48A482A8','896','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706872813350708','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7BCA68FC-CD8F-5698-8C76-B34E48A482A8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7BCA68FC-CD8F-5698-8C76-B34E48A482A8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C9C4F86A-97BC-5151-BB5C-0D3989868011', 'sequence': {'long': 897}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706872813350708, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C9C4F86A-97BC-5151-BB5C-0D3989868011','897','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706872813350708','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C9C4F86A-97BC-5151-BB5C-0D3989868011','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C9C4F86A-97BC-5151-BB5C-0D3989868011','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CD6CB79C-F435-5162-A30C-BB5970EE032E', 'sequence': {'long': 898}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706872813350708, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CD6CB79C-F435-5162-A30C-BB5970EE032E','898','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706872813350708','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CD6CB79C-F435-5162-A30C-BB5970EE032E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CD6CB79C-F435-5162-A30C-BB5970EE032E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9F4AD6F2-3218-5A89-AE49-41C1B6B746DB', 'sequence': {'long': 899}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4A04532D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706873813352064, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9F4AD6F2-3218-5A89-AE49-41C1B6B746DB','899','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4A04532D-36C2-11E8-BF66-D9AA8AFF4A69','1522706873813352064','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9F4AD6F2-3218-5A89-AE49-41C1B6B746DB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9F4AD6F2-3218-5A89-AE49-41C1B6B746DB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9F4AD6F2-3218-5A89-AE49-41C1B6B746DB','4A04532D-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8EE4805F-5A42-5B30-9BC9-A3DE73A0ABC5', 'sequence': {'long': 900}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4A0453E2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706873813352064, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8EE4805F-5A42-5B30-9BC9-A3DE73A0ABC5','900','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4A0453E2-36C2-11E8-BF66-D9AA8AFF4A69','1522706873813352064','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8EE4805F-5A42-5B30-9BC9-A3DE73A0ABC5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8EE4805F-5A42-5B30-9BC9-A3DE73A0ABC5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8EE4805F-5A42-5B30-9BC9-A3DE73A0ABC5','4A0453E2-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4A9CE8D3-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4A9CE8D3-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4A9CE8D3-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4A9CE8D3-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4A9CE821-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4A9CE821-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4A9CE821-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4A9CE821-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5E342164-11BA-5513-B96B-7A8A22DD4831', 'sequence': {'long': 901}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4A9CE821-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4A9CE8D3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706873813352064, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5E342164-11BA-5513-B96B-7A8A22DD4831','901','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4A9CE821-36C2-11E8-BF66-D9AA8AFF4A69','4A9CE8D3-36C2-11E8-BF66-D9AA8AFF4A69','1522706873813352064','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5E342164-11BA-5513-B96B-7A8A22DD4831','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5E342164-11BA-5513-B96B-7A8A22DD4831','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5E342164-11BA-5513-B96B-7A8A22DD4831','4A9CE821-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'5E342164-11BA-5513-B96B-7A8A22DD4831','4A9CE8D3-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '51255B9A-A880-5716-B34E-0036F5EB5351', 'sequence': {'long': 902}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706873813352064, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'51255B9A-A880-5716-B34E-0036F5EB5351','902','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706873813352064','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'51255B9A-A880-5716-B34E-0036F5EB5351','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'51255B9A-A880-5716-B34E-0036F5EB5351','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FC3A4B3A-D147-5D8F-84C0-C82B7D2AEEC9', 'sequence': {'long': 903}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706873813352064, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FC3A4B3A-D147-5D8F-84C0-C82B7D2AEEC9','903','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706873813352064','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FC3A4B3A-D147-5D8F-84C0-C82B7D2AEEC9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FC3A4B3A-D147-5D8F-84C0-C82B7D2AEEC9','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '457EDC91-C846-5E2E-9AA2-13027A68533D', 'sequence': {'long': 904}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706873813352064, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'457EDC91-C846-5E2E-9AA2-13027A68533D','904','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706873813352064','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'457EDC91-C846-5E2E-9AA2-13027A68533D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'457EDC91-C846-5E2E-9AA2-13027A68533D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E84BF855-B460-52BA-A360-0884C396C593', 'sequence': {'long': 905}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706873813352064, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E84BF855-B460-52BA-A360-0884C396C593','905','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706873813352064','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E84BF855-B460-52BA-A360-0884C396C593','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E84BF855-B460-52BA-A360-0884C396C593','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EE943A38-B933-50E0-BCC0-B5B5A687C2A6', 'sequence': {'long': 906}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4A9CE821-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706874813360680, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EE943A38-B933-50E0-BCC0-B5B5A687C2A6','906','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4A9CE821-36C2-11E8-BF66-D9AA8AFF4A69','1522706874813360680','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EE943A38-B933-50E0-BCC0-B5B5A687C2A6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EE943A38-B933-50E0-BCC0-B5B5A687C2A6','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EE943A38-B933-50E0-BCC0-B5B5A687C2A6','4A9CE821-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6A166E06-6147-5A6E-A03A-F279FEB78385', 'sequence': {'long': 907}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4A9CE8D3-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706874813360680, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6A166E06-6147-5A6E-A03A-F279FEB78385','907','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4A9CE8D3-36C2-11E8-BF66-D9AA8AFF4A69','1522706874813360680','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6A166E06-6147-5A6E-A03A-F279FEB78385','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6A166E06-6147-5A6E-A03A-F279FEB78385','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6A166E06-6147-5A6E-A03A-F279FEB78385','4A9CE8D3-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4B357F4B-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4B357F4B-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4B357F4B-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4B357F4B-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4B357E9D-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4B357E9D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4B357E9D-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4B357E9D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6C8F4794-DBC8-5905-8273-DF80D89E0730', 'sequence': {'long': 908}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B357E9D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B357F4B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706874813360680, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6C8F4794-DBC8-5905-8273-DF80D89E0730','908','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4B357E9D-36C2-11E8-BF66-D9AA8AFF4A69','4B357F4B-36C2-11E8-BF66-D9AA8AFF4A69','1522706874813360680','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6C8F4794-DBC8-5905-8273-DF80D89E0730','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6C8F4794-DBC8-5905-8273-DF80D89E0730','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6C8F4794-DBC8-5905-8273-DF80D89E0730','4B357E9D-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'6C8F4794-DBC8-5905-8273-DF80D89E0730','4B357F4B-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A9BDC6BA-9D66-5F5D-B370-4B333B9F627D', 'sequence': {'long': 909}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706874813360680, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A9BDC6BA-9D66-5F5D-B370-4B333B9F627D','909','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706874813360680','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A9BDC6BA-9D66-5F5D-B370-4B333B9F627D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A9BDC6BA-9D66-5F5D-B370-4B333B9F627D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B7F03A22-5F7D-5C68-B3C1-FAF1DA555904', 'sequence': {'long': 910}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706874813360680, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B7F03A22-5F7D-5C68-B3C1-FAF1DA555904','910','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706874813360680','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B7F03A22-5F7D-5C68-B3C1-FAF1DA555904','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B7F03A22-5F7D-5C68-B3C1-FAF1DA555904','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '033861CC-9DC9-59F1-A21A-C9EEA5713665', 'sequence': {'long': 911}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706874813360680, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'033861CC-9DC9-59F1-A21A-C9EEA5713665','911','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706874813360680','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'033861CC-9DC9-59F1-A21A-C9EEA5713665','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'033861CC-9DC9-59F1-A21A-C9EEA5713665','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2C2545E2-9728-59C3-8746-FDC46A177053', 'sequence': {'long': 912}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706874813360680, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2C2545E2-9728-59C3-8746-FDC46A177053','912','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706874813360680','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2C2545E2-9728-59C3-8746-FDC46A177053','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2C2545E2-9728-59C3-8746-FDC46A177053','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '87EC120E-0852-5577-8A86-8FBF32B71032', 'sequence': {'long': 913}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B357E9D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706875803351696, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'87EC120E-0852-5577-8A86-8FBF32B71032','913','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4B357E9D-36C2-11E8-BF66-D9AA8AFF4A69','1522706875803351696','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'87EC120E-0852-5577-8A86-8FBF32B71032','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'87EC120E-0852-5577-8A86-8FBF32B71032','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'87EC120E-0852-5577-8A86-8FBF32B71032','4B357E9D-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AF87F24E-CEBB-5AFE-85A8-543A40499149', 'sequence': {'long': 914}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B357F4B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706875803351696, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AF87F24E-CEBB-5AFE-85A8-543A40499149','914','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4B357F4B-36C2-11E8-BF66-D9AA8AFF4A69','1522706875803351696','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AF87F24E-CEBB-5AFE-85A8-543A40499149','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AF87F24E-CEBB-5AFE-85A8-543A40499149','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AF87F24E-CEBB-5AFE-85A8-543A40499149','4B357F4B-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4BCD1F67-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4BCD1F67-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4BCD1F67-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4BCD1F67-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4BCD1EB9-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4BCD1EB9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4BCD1EB9-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4BCD1EB9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '80D026C4-30BF-5F7F-BF72-5FAC7F3813FF', 'sequence': {'long': 915}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4BCD1EB9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4BCD1F67-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706875803351696, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'80D026C4-30BF-5F7F-BF72-5FAC7F3813FF','915','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4BCD1EB9-36C2-11E8-BF66-D9AA8AFF4A69','4BCD1F67-36C2-11E8-BF66-D9AA8AFF4A69','1522706875803351696','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'80D026C4-30BF-5F7F-BF72-5FAC7F3813FF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'80D026C4-30BF-5F7F-BF72-5FAC7F3813FF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'80D026C4-30BF-5F7F-BF72-5FAC7F3813FF','4BCD1EB9-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'80D026C4-30BF-5F7F-BF72-5FAC7F3813FF','4BCD1F67-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D63A75EB-D98F-52DB-AE79-300D620CA2E1', 'sequence': {'long': 916}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706875803351696, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D63A75EB-D98F-52DB-AE79-300D620CA2E1','916','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706875803351696','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D63A75EB-D98F-52DB-AE79-300D620CA2E1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D63A75EB-D98F-52DB-AE79-300D620CA2E1','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D427E3C6-3812-5CBC-9F17-97F921DE9F6E', 'sequence': {'long': 917}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706875803351696, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D427E3C6-3812-5CBC-9F17-97F921DE9F6E','917','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706875803351696','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D427E3C6-3812-5CBC-9F17-97F921DE9F6E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D427E3C6-3812-5CBC-9F17-97F921DE9F6E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E94D198E-616F-52DD-A012-B14F8CEA4830', 'sequence': {'long': 918}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706875803351696, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E94D198E-616F-52DD-A012-B14F8CEA4830','918','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706875803351696','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E94D198E-616F-52DD-A012-B14F8CEA4830','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E94D198E-616F-52DD-A012-B14F8CEA4830','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D7FA52A7-BF79-54CA-9A37-84B2BF0719F5', 'sequence': {'long': 919}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706875803351696, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D7FA52A7-BF79-54CA-9A37-84B2BF0719F5','919','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706875803351696','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D7FA52A7-BF79-54CA-9A37-84B2BF0719F5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D7FA52A7-BF79-54CA-9A37-84B2BF0719F5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D6086013-B2B9-5780-81B2-CF60474BBC5C', 'sequence': {'long': 920}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4BCD1EB9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706876793350012, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D6086013-B2B9-5780-81B2-CF60474BBC5C','920','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4BCD1EB9-36C2-11E8-BF66-D9AA8AFF4A69','1522706876793350012','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D6086013-B2B9-5780-81B2-CF60474BBC5C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D6086013-B2B9-5780-81B2-CF60474BBC5C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D6086013-B2B9-5780-81B2-CF60474BBC5C','4BCD1EB9-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C93B9D07-6852-524C-9632-86FEEB9A2AB2', 'sequence': {'long': 921}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4BCD1F67-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706876803364162, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C93B9D07-6852-524C-9632-86FEEB9A2AB2','921','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4BCD1F67-36C2-11E8-BF66-D9AA8AFF4A69','1522706876803364162','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C93B9D07-6852-524C-9632-86FEEB9A2AB2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C93B9D07-6852-524C-9632-86FEEB9A2AB2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C93B9D07-6852-524C-9632-86FEEB9A2AB2','4BCD1F67-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4C651513-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4C651513-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4C651513-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4C651513-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4C651406-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4C651406-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4C651406-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4C651406-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A3BC5B3E-166C-5D34-8299-CC5FDDC0B4CA', 'sequence': {'long': 922}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4C651406-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4C651513-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706876803364162, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A3BC5B3E-166C-5D34-8299-CC5FDDC0B4CA','922','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4C651406-36C2-11E8-BF66-D9AA8AFF4A69','4C651513-36C2-11E8-BF66-D9AA8AFF4A69','1522706876803364162','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A3BC5B3E-166C-5D34-8299-CC5FDDC0B4CA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A3BC5B3E-166C-5D34-8299-CC5FDDC0B4CA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A3BC5B3E-166C-5D34-8299-CC5FDDC0B4CA','4C651406-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'A3BC5B3E-166C-5D34-8299-CC5FDDC0B4CA','4C651513-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D7B92EF6-061D-59F9-AE36-700995CD3685', 'sequence': {'long': 923}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706876803364162, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D7B92EF6-061D-59F9-AE36-700995CD3685','923','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706876803364162','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D7B92EF6-061D-59F9-AE36-700995CD3685','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D7B92EF6-061D-59F9-AE36-700995CD3685','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '35D73F9F-EE0F-5B89-9AD7-3028486D7C2F', 'sequence': {'long': 924}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706876803364162, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'35D73F9F-EE0F-5B89-9AD7-3028486D7C2F','924','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706876803364162','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'35D73F9F-EE0F-5B89-9AD7-3028486D7C2F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'35D73F9F-EE0F-5B89-9AD7-3028486D7C2F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3525B33A-3BB1-5F6A-95BD-C6704209D36C', 'sequence': {'long': 925}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706876803364162, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3525B33A-3BB1-5F6A-95BD-C6704209D36C','925','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706876803364162','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3525B33A-3BB1-5F6A-95BD-C6704209D36C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3525B33A-3BB1-5F6A-95BD-C6704209D36C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EE8372F1-8E61-508C-9D6B-E43DF9CAC540', 'sequence': {'long': 926}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706876803364162, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EE8372F1-8E61-508C-9D6B-E43DF9CAC540','926','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706876803364162','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EE8372F1-8E61-508C-9D6B-E43DF9CAC540','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EE8372F1-8E61-508C-9D6B-E43DF9CAC540','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E40BE1AB-BFF9-5CAC-B741-8FDCDB79B61A', 'sequence': {'long': 927}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4C651406-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706877813350379, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E40BE1AB-BFF9-5CAC-B741-8FDCDB79B61A','927','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4C651406-36C2-11E8-BF66-D9AA8AFF4A69','1522706877813350379','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E40BE1AB-BFF9-5CAC-B741-8FDCDB79B61A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E40BE1AB-BFF9-5CAC-B741-8FDCDB79B61A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E40BE1AB-BFF9-5CAC-B741-8FDCDB79B61A','4C651406-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '77743503-F467-5605-87B0-B964B605369F', 'sequence': {'long': 928}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4C651513-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706877813350379, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'77743503-F467-5605-87B0-B964B605369F','928','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4C651513-36C2-11E8-BF66-D9AA8AFF4A69','1522706877813350379','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'77743503-F467-5605-87B0-B964B605369F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'77743503-F467-5605-87B0-B964B605369F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'77743503-F467-5605-87B0-B964B605369F','4C651513-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4CFF5C5C-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4CFF5C5C-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4CFF5C5C-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4CFF5C5C-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4CFF5B2E-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4CFF5B2E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4CFF5B2E-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4CFF5B2E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '931724FE-7B29-586D-835F-F348FBA47057', 'sequence': {'long': 929}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4CFF5B2E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4CFF5C5C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706877813350379, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'931724FE-7B29-586D-835F-F348FBA47057','929','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4CFF5B2E-36C2-11E8-BF66-D9AA8AFF4A69','4CFF5C5C-36C2-11E8-BF66-D9AA8AFF4A69','1522706877813350379','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'931724FE-7B29-586D-835F-F348FBA47057','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'931724FE-7B29-586D-835F-F348FBA47057','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'931724FE-7B29-586D-835F-F348FBA47057','4CFF5B2E-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'931724FE-7B29-586D-835F-F348FBA47057','4CFF5C5C-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '278116BD-F5D9-59C0-8B02-C3031F415E99', 'sequence': {'long': 930}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706877813350379, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'278116BD-F5D9-59C0-8B02-C3031F415E99','930','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706877813350379','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'278116BD-F5D9-59C0-8B02-C3031F415E99','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'278116BD-F5D9-59C0-8B02-C3031F415E99','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7B82F776-6FC8-5B71-8FB9-38655A383C75', 'sequence': {'long': 931}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706877813350379, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7B82F776-6FC8-5B71-8FB9-38655A383C75','931','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706877813350379','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7B82F776-6FC8-5B71-8FB9-38655A383C75','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7B82F776-6FC8-5B71-8FB9-38655A383C75','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D48A1C5B-9FAE-5406-A3A7-BF1E16F151AC', 'sequence': {'long': 932}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706877813350379, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D48A1C5B-9FAE-5406-A3A7-BF1E16F151AC','932','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706877813350379','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D48A1C5B-9FAE-5406-A3A7-BF1E16F151AC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D48A1C5B-9FAE-5406-A3A7-BF1E16F151AC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '47CCA4D4-E6EE-52C9-978F-9B6ADCC6250B', 'sequence': {'long': 933}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706877813350379, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'47CCA4D4-E6EE-52C9-978F-9B6ADCC6250B','933','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706877813350379','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'47CCA4D4-E6EE-52C9-978F-9B6ADCC6250B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'47CCA4D4-E6EE-52C9-978F-9B6ADCC6250B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '46F250F2-BBFA-5405-B452-CA68AF5D870A', 'sequence': {'long': 934}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4CFF5B2E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706878813349685, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'46F250F2-BBFA-5405-B452-CA68AF5D870A','934','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4CFF5B2E-36C2-11E8-BF66-D9AA8AFF4A69','1522706878813349685','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'46F250F2-BBFA-5405-B452-CA68AF5D870A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'46F250F2-BBFA-5405-B452-CA68AF5D870A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'46F250F2-BBFA-5405-B452-CA68AF5D870A','4CFF5B2E-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A5E6B640-C52D-5CE4-9C9C-A96E6E94649B', 'sequence': {'long': 935}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4CFF5C5C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706878813349685, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A5E6B640-C52D-5CE4-9C9C-A96E6E94649B','935','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4CFF5C5C-36C2-11E8-BF66-D9AA8AFF4A69','1522706878813349685','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A5E6B640-C52D-5CE4-9C9C-A96E6E94649B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A5E6B640-C52D-5CE4-9C9C-A96E6E94649B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A5E6B640-C52D-5CE4-9C9C-A96E6E94649B','4CFF5C5C-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4D97F940-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4D97F940-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4D97F940-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4D97F940-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4D97F88A-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4D97F88A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4D97F88A-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4D97F88A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7E081562-8DE7-504A-91FA-B81E21ABDB47', 'sequence': {'long': 936}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D97F88A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D97F940-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706878813349685, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7E081562-8DE7-504A-91FA-B81E21ABDB47','936','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4D97F88A-36C2-11E8-BF66-D9AA8AFF4A69','4D97F940-36C2-11E8-BF66-D9AA8AFF4A69','1522706878813349685','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7E081562-8DE7-504A-91FA-B81E21ABDB47','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7E081562-8DE7-504A-91FA-B81E21ABDB47','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7E081562-8DE7-504A-91FA-B81E21ABDB47','4D97F88A-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'7E081562-8DE7-504A-91FA-B81E21ABDB47','4D97F940-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '047336FC-B5F2-5665-A78B-30CE1DA6569A', 'sequence': {'long': 937}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706878813349685, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'047336FC-B5F2-5665-A78B-30CE1DA6569A','937','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706878813349685','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'047336FC-B5F2-5665-A78B-30CE1DA6569A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'047336FC-B5F2-5665-A78B-30CE1DA6569A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6050C31D-0B0A-52A2-A7B2-02D47E6795B7', 'sequence': {'long': 938}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706878813349685, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6050C31D-0B0A-52A2-A7B2-02D47E6795B7','938','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706878813349685','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6050C31D-0B0A-52A2-A7B2-02D47E6795B7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6050C31D-0B0A-52A2-A7B2-02D47E6795B7','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EF72886E-CE60-5706-818F-68C5634BB165', 'sequence': {'long': 939}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706878813349685, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EF72886E-CE60-5706-818F-68C5634BB165','939','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706878813349685','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EF72886E-CE60-5706-818F-68C5634BB165','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EF72886E-CE60-5706-818F-68C5634BB165','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '095A5BCC-A4EA-53C6-B9AD-29DEE1C28C81', 'sequence': {'long': 940}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706878813349685, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'095A5BCC-A4EA-53C6-B9AD-29DEE1C28C81','940','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706878813349685','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'095A5BCC-A4EA-53C6-B9AD-29DEE1C28C81','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'095A5BCC-A4EA-53C6-B9AD-29DEE1C28C81','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '10C7ABA9-5990-5DCD-ADF7-346D1690214E', 'sequence': {'long': 941}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D97F88A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706879803352241, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'10C7ABA9-5990-5DCD-ADF7-346D1690214E','941','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4D97F88A-36C2-11E8-BF66-D9AA8AFF4A69','1522706879803352241','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'10C7ABA9-5990-5DCD-ADF7-346D1690214E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'10C7ABA9-5990-5DCD-ADF7-346D1690214E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'10C7ABA9-5990-5DCD-ADF7-346D1690214E','4D97F88A-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '596CCDD1-BBB1-50AB-BBD5-C6BBE080EE28', 'sequence': {'long': 942}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D97F940-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706879803352241, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'596CCDD1-BBB1-50AB-BBD5-C6BBE080EE28','942','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4D97F940-36C2-11E8-BF66-D9AA8AFF4A69','1522706879803352241','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'596CCDD1-BBB1-50AB-BBD5-C6BBE080EE28','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'596CCDD1-BBB1-50AB-BBD5-C6BBE080EE28','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'596CCDD1-BBB1-50AB-BBD5-C6BBE080EE28','4D97F940-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4E2F1B2F-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4E2F1B2F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4E2F1B2F-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4E2F1B2F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4E2F1A25-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4E2F1A25-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4E2F1A25-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4E2F1A25-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '74351E88-DAB5-52B5-B548-C2EC2545D499', 'sequence': {'long': 943}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4E2F1A25-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4E2F1B2F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706879803352241, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'74351E88-DAB5-52B5-B548-C2EC2545D499','943','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4E2F1A25-36C2-11E8-BF66-D9AA8AFF4A69','4E2F1B2F-36C2-11E8-BF66-D9AA8AFF4A69','1522706879803352241','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'74351E88-DAB5-52B5-B548-C2EC2545D499','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'74351E88-DAB5-52B5-B548-C2EC2545D499','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'74351E88-DAB5-52B5-B548-C2EC2545D499','4E2F1A25-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'74351E88-DAB5-52B5-B548-C2EC2545D499','4E2F1B2F-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A28F917F-6018-562E-BD56-C19289A48090', 'sequence': {'long': 944}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706879803352241, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A28F917F-6018-562E-BD56-C19289A48090','944','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706879803352241','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A28F917F-6018-562E-BD56-C19289A48090','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A28F917F-6018-562E-BD56-C19289A48090','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0E5C09A2-C733-5C9B-84A9-3B6C03099916', 'sequence': {'long': 945}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706879803352241, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0E5C09A2-C733-5C9B-84A9-3B6C03099916','945','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706879803352241','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0E5C09A2-C733-5C9B-84A9-3B6C03099916','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0E5C09A2-C733-5C9B-84A9-3B6C03099916','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '07B1284D-C21A-5163-98C3-DFB2170FF946', 'sequence': {'long': 946}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706879803352241, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'07B1284D-C21A-5163-98C3-DFB2170FF946','946','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706879803352241','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'07B1284D-C21A-5163-98C3-DFB2170FF946','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'07B1284D-C21A-5163-98C3-DFB2170FF946','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2A9A4166-697D-5052-AC7C-D78387B4C765', 'sequence': {'long': 947}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706879803352241, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2A9A4166-697D-5052-AC7C-D78387B4C765','947','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706879803352241','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2A9A4166-697D-5052-AC7C-D78387B4C765','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2A9A4166-697D-5052-AC7C-D78387B4C765','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ABD03FDB-B6C4-50C8-AA9A-CE7C22173E43', 'sequence': {'long': 948}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4E2F1A25-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706880813351347, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ABD03FDB-B6C4-50C8-AA9A-CE7C22173E43','948','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4E2F1A25-36C2-11E8-BF66-D9AA8AFF4A69','1522706880813351347','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ABD03FDB-B6C4-50C8-AA9A-CE7C22173E43','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ABD03FDB-B6C4-50C8-AA9A-CE7C22173E43','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ABD03FDB-B6C4-50C8-AA9A-CE7C22173E43','4E2F1A25-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FDBBE27A-A2EA-567D-AC13-943A13913A5D', 'sequence': {'long': 949}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4E2F1B2F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706880813351347, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FDBBE27A-A2EA-567D-AC13-943A13913A5D','949','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4E2F1B2F-36C2-11E8-BF66-D9AA8AFF4A69','1522706880813351347','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FDBBE27A-A2EA-567D-AC13-943A13913A5D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FDBBE27A-A2EA-567D-AC13-943A13913A5D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FDBBE27A-A2EA-567D-AC13-943A13913A5D','4E2F1B2F-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4EC9377F-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4EC9377F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4EC9377F-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4EC9377F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4EC9366D-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4EC9366D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4EC9366D-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4EC9366D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A4FAA017-0EE2-51C2-99FB-500DF148019A', 'sequence': {'long': 950}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4EC9366D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4EC9377F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706880813351347, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A4FAA017-0EE2-51C2-99FB-500DF148019A','950','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4EC9366D-36C2-11E8-BF66-D9AA8AFF4A69','4EC9377F-36C2-11E8-BF66-D9AA8AFF4A69','1522706880813351347','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A4FAA017-0EE2-51C2-99FB-500DF148019A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A4FAA017-0EE2-51C2-99FB-500DF148019A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A4FAA017-0EE2-51C2-99FB-500DF148019A','4EC9366D-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'A4FAA017-0EE2-51C2-99FB-500DF148019A','4EC9377F-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BAD82CD5-A53F-5BC0-BEF9-3FFFB93890EF', 'sequence': {'long': 951}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706880813351347, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BAD82CD5-A53F-5BC0-BEF9-3FFFB93890EF','951','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706880813351347','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BAD82CD5-A53F-5BC0-BEF9-3FFFB93890EF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BAD82CD5-A53F-5BC0-BEF9-3FFFB93890EF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '54F9BC95-E09C-5148-A7E1-7FDE5D5C1D2D', 'sequence': {'long': 952}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706880813351347, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'54F9BC95-E09C-5148-A7E1-7FDE5D5C1D2D','952','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706880813351347','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54F9BC95-E09C-5148-A7E1-7FDE5D5C1D2D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54F9BC95-E09C-5148-A7E1-7FDE5D5C1D2D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0E14953B-C40E-5129-AECE-C646B325F6D1', 'sequence': {'long': 953}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706880813351347, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0E14953B-C40E-5129-AECE-C646B325F6D1','953','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706880813351347','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0E14953B-C40E-5129-AECE-C646B325F6D1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0E14953B-C40E-5129-AECE-C646B325F6D1','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '90431E7A-FFEE-5C41-8899-CDDD63EE73A1', 'sequence': {'long': 954}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706880813351347, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'90431E7A-FFEE-5C41-8899-CDDD63EE73A1','954','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706880813351347','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'90431E7A-FFEE-5C41-8899-CDDD63EE73A1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'90431E7A-FFEE-5C41-8899-CDDD63EE73A1','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C99DE6ED-88B9-55AC-9F81-ABB18BAB094D', 'sequence': {'long': 955}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4EC9366D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706881803351673, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C99DE6ED-88B9-55AC-9F81-ABB18BAB094D','955','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4EC9366D-36C2-11E8-BF66-D9AA8AFF4A69','1522706881803351673','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C99DE6ED-88B9-55AC-9F81-ABB18BAB094D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C99DE6ED-88B9-55AC-9F81-ABB18BAB094D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C99DE6ED-88B9-55AC-9F81-ABB18BAB094D','4EC9366D-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D91225FB-7F9E-501E-9366-72AC096111A3', 'sequence': {'long': 956}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4EC9377F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706881803351673, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D91225FB-7F9E-501E-9366-72AC096111A3','956','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4EC9377F-36C2-11E8-BF66-D9AA8AFF4A69','1522706881803351673','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D91225FB-7F9E-501E-9366-72AC096111A3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D91225FB-7F9E-501E-9366-72AC096111A3','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D91225FB-7F9E-501E-9366-72AC096111A3','4EC9377F-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4F6013E8-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4F6013E8-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4F6013E8-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4F6013E8-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4F6012EB-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4F6012EB-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4F6012EB-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4F6012EB-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '58371AC1-A0D2-51F1-AA82-7B54465B3141', 'sequence': {'long': 957}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F6012EB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F6013E8-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706881803351673, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'58371AC1-A0D2-51F1-AA82-7B54465B3141','957','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4F6012EB-36C2-11E8-BF66-D9AA8AFF4A69','4F6013E8-36C2-11E8-BF66-D9AA8AFF4A69','1522706881803351673','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'58371AC1-A0D2-51F1-AA82-7B54465B3141','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'58371AC1-A0D2-51F1-AA82-7B54465B3141','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'58371AC1-A0D2-51F1-AA82-7B54465B3141','4F6012EB-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'58371AC1-A0D2-51F1-AA82-7B54465B3141','4F6013E8-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CABD104A-F2D1-5E39-BBC7-C8A8EC20EFDD', 'sequence': {'long': 958}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706881803351673, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CABD104A-F2D1-5E39-BBC7-C8A8EC20EFDD','958','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706881803351673','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CABD104A-F2D1-5E39-BBC7-C8A8EC20EFDD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CABD104A-F2D1-5E39-BBC7-C8A8EC20EFDD','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D116888-D933-580C-A033-4701B170B0EF', 'sequence': {'long': 959}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706881803351673, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D116888-D933-580C-A033-4701B170B0EF','959','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706881803351673','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D116888-D933-580C-A033-4701B170B0EF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D116888-D933-580C-A033-4701B170B0EF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D25BC1E-CD6C-5AA2-8AFE-0D393BBCDAAC', 'sequence': {'long': 960}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706881803351673, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D25BC1E-CD6C-5AA2-8AFE-0D393BBCDAAC','960','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706881803351673','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D25BC1E-CD6C-5AA2-8AFE-0D393BBCDAAC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D25BC1E-CD6C-5AA2-8AFE-0D393BBCDAAC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '145A64E5-1099-53C0-A005-1DAB6EF50FBF', 'sequence': {'long': 961}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706881803351673, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'145A64E5-1099-53C0-A005-1DAB6EF50FBF','961','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706881803351673','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'145A64E5-1099-53C0-A005-1DAB6EF50FBF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'145A64E5-1099-53C0-A005-1DAB6EF50FBF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E779BF07-5157-5D7D-BB80-A664DC494A62', 'sequence': {'long': 962}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F6012EB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706882813351799, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E779BF07-5157-5D7D-BB80-A664DC494A62','962','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4F6012EB-36C2-11E8-BF66-D9AA8AFF4A69','1522706882813351799','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E779BF07-5157-5D7D-BB80-A664DC494A62','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E779BF07-5157-5D7D-BB80-A664DC494A62','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E779BF07-5157-5D7D-BB80-A664DC494A62','4F6012EB-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6159AF02-552C-545B-9E93-90EF3220F746', 'sequence': {'long': 963}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F6013E8-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706882813351799, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6159AF02-552C-545B-9E93-90EF3220F746','963','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4F6013E8-36C2-11E8-BF66-D9AA8AFF4A69','1522706882813351799','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6159AF02-552C-545B-9E93-90EF3220F746','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6159AF02-552C-545B-9E93-90EF3220F746','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6159AF02-552C-545B-9E93-90EF3220F746','4F6013E8-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4FFA425C-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4FFA425C-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4FFA425C-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4FFA425C-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4FFA4183-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4FFA4183-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4FFA4183-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4FFA4183-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '98F11A51-09EA-539F-9192-7CDBEDC03CC2', 'sequence': {'long': 964}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4FFA4183-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '4FFA425C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706882813351799, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'98F11A51-09EA-539F-9192-7CDBEDC03CC2','964','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4FFA4183-36C2-11E8-BF66-D9AA8AFF4A69','4FFA425C-36C2-11E8-BF66-D9AA8AFF4A69','1522706882813351799','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'98F11A51-09EA-539F-9192-7CDBEDC03CC2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'98F11A51-09EA-539F-9192-7CDBEDC03CC2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'98F11A51-09EA-539F-9192-7CDBEDC03CC2','4FFA4183-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'98F11A51-09EA-539F-9192-7CDBEDC03CC2','4FFA425C-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D0C7333-EE46-5C27-9DA6-F69DEC4C4787', 'sequence': {'long': 965}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706882813351799, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D0C7333-EE46-5C27-9DA6-F69DEC4C4787','965','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706882813351799','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D0C7333-EE46-5C27-9DA6-F69DEC4C4787','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D0C7333-EE46-5C27-9DA6-F69DEC4C4787','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3DE81386-7DD8-523F-AC8F-9E15060D7966', 'sequence': {'long': 966}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706882813351799, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3DE81386-7DD8-523F-AC8F-9E15060D7966','966','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706882813351799','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3DE81386-7DD8-523F-AC8F-9E15060D7966','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3DE81386-7DD8-523F-AC8F-9E15060D7966','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C3188091-D3FD-5EA2-BF1D-F5E85401FEF4', 'sequence': {'long': 967}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706882813351799, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C3188091-D3FD-5EA2-BF1D-F5E85401FEF4','967','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706882813351799','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C3188091-D3FD-5EA2-BF1D-F5E85401FEF4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C3188091-D3FD-5EA2-BF1D-F5E85401FEF4','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '16A71AA6-FAEE-528F-A7BA-7C5161DB84B5', 'sequence': {'long': 968}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706882813351799, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'16A71AA6-FAEE-528F-A7BA-7C5161DB84B5','968','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706882813351799','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'16A71AA6-FAEE-528F-A7BA-7C5161DB84B5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'16A71AA6-FAEE-528F-A7BA-7C5161DB84B5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '07D0B527-BB98-5C9D-B803-5AD9EEC41DFE', 'sequence': {'long': 969}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4FFA4183-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706883813355136, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'07D0B527-BB98-5C9D-B803-5AD9EEC41DFE','969','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4FFA4183-36C2-11E8-BF66-D9AA8AFF4A69','1522706883813355136','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'07D0B527-BB98-5C9D-B803-5AD9EEC41DFE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'07D0B527-BB98-5C9D-B803-5AD9EEC41DFE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'07D0B527-BB98-5C9D-B803-5AD9EEC41DFE','4FFA4183-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F465A8B7-8815-54C1-A14A-6BACEE1F1FEA', 'sequence': {'long': 970}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4FFA425C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706883813355136, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F465A8B7-8815-54C1-A14A-6BACEE1F1FEA','970','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','4FFA425C-36C2-11E8-BF66-D9AA8AFF4A69','1522706883813355136','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F465A8B7-8815-54C1-A14A-6BACEE1F1FEA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F465A8B7-8815-54C1-A14A-6BACEE1F1FEA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F465A8B7-8815-54C1-A14A-6BACEE1F1FEA','4FFA425C-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5092C8DA-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5092C8DA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5092C8DA-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5092C8DA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5092C82A-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5092C82A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5092C82A-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5092C82A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A1F27B3F-C69A-5FFC-8468-C6E2CAF31F0A', 'sequence': {'long': 971}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5092C82A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5092C8DA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706883813355136, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A1F27B3F-C69A-5FFC-8468-C6E2CAF31F0A','971','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5092C82A-36C2-11E8-BF66-D9AA8AFF4A69','5092C8DA-36C2-11E8-BF66-D9AA8AFF4A69','1522706883813355136','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A1F27B3F-C69A-5FFC-8468-C6E2CAF31F0A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A1F27B3F-C69A-5FFC-8468-C6E2CAF31F0A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A1F27B3F-C69A-5FFC-8468-C6E2CAF31F0A','5092C82A-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'A1F27B3F-C69A-5FFC-8468-C6E2CAF31F0A','5092C8DA-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C1D8895C-59A6-5E07-A060-B34BFBEEDAFE', 'sequence': {'long': 972}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706883813355136, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C1D8895C-59A6-5E07-A060-B34BFBEEDAFE','972','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706883813355136','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C1D8895C-59A6-5E07-A060-B34BFBEEDAFE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C1D8895C-59A6-5E07-A060-B34BFBEEDAFE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AD2821A0-90F8-56B6-AE02-AA1DA6457E05', 'sequence': {'long': 973}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706883813355136, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AD2821A0-90F8-56B6-AE02-AA1DA6457E05','973','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706883813355136','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AD2821A0-90F8-56B6-AE02-AA1DA6457E05','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AD2821A0-90F8-56B6-AE02-AA1DA6457E05','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DAEFDF37-B7FE-5475-802B-6A91D4DADD47', 'sequence': {'long': 974}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706883813355136, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DAEFDF37-B7FE-5475-802B-6A91D4DADD47','974','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706883813355136','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DAEFDF37-B7FE-5475-802B-6A91D4DADD47','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DAEFDF37-B7FE-5475-802B-6A91D4DADD47','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BF9FF60C-EAE8-51C5-A2A9-CA4E00918A66', 'sequence': {'long': 975}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706883813355136, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BF9FF60C-EAE8-51C5-A2A9-CA4E00918A66','975','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706883813355136','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BF9FF60C-EAE8-51C5-A2A9-CA4E00918A66','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BF9FF60C-EAE8-51C5-A2A9-CA4E00918A66','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F4DC2F2A-B063-5A76-B6CC-94130E5AE826', 'sequence': {'long': 976}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5092C82A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706884813354302, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F4DC2F2A-B063-5A76-B6CC-94130E5AE826','976','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5092C82A-36C2-11E8-BF66-D9AA8AFF4A69','1522706884813354302','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F4DC2F2A-B063-5A76-B6CC-94130E5AE826','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F4DC2F2A-B063-5A76-B6CC-94130E5AE826','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F4DC2F2A-B063-5A76-B6CC-94130E5AE826','5092C82A-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ACEC0CF8-B16E-5A7A-9241-09AAB007E4BC', 'sequence': {'long': 977}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5092C8DA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706884813354302, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ACEC0CF8-B16E-5A7A-9241-09AAB007E4BC','977','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5092C8DA-36C2-11E8-BF66-D9AA8AFF4A69','1522706884813354302','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ACEC0CF8-B16E-5A7A-9241-09AAB007E4BC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ACEC0CF8-B16E-5A7A-9241-09AAB007E4BC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ACEC0CF8-B16E-5A7A-9241-09AAB007E4BC','5092C8DA-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '512B6159-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'512B6159-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'512B6159-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'512B6159-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '512B60A9-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'512B60A9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'512B60A9-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'512B60A9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5287358A-DB95-5AA0-A820-1EDD1DFB0367', 'sequence': {'long': 978}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '512B60A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '512B6159-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706884813354302, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5287358A-DB95-5AA0-A820-1EDD1DFB0367','978','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','512B60A9-36C2-11E8-BF66-D9AA8AFF4A69','512B6159-36C2-11E8-BF66-D9AA8AFF4A69','1522706884813354302','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5287358A-DB95-5AA0-A820-1EDD1DFB0367','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5287358A-DB95-5AA0-A820-1EDD1DFB0367','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5287358A-DB95-5AA0-A820-1EDD1DFB0367','512B60A9-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'5287358A-DB95-5AA0-A820-1EDD1DFB0367','512B6159-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AC0EE72F-0AA6-51A9-9719-4F7802934BE1', 'sequence': {'long': 979}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706884813354302, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AC0EE72F-0AA6-51A9-9719-4F7802934BE1','979','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706884813354302','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AC0EE72F-0AA6-51A9-9719-4F7802934BE1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AC0EE72F-0AA6-51A9-9719-4F7802934BE1','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '36D02760-7431-5725-8C73-4F741C033153', 'sequence': {'long': 980}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706884813354302, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'36D02760-7431-5725-8C73-4F741C033153','980','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706884813354302','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'36D02760-7431-5725-8C73-4F741C033153','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'36D02760-7431-5725-8C73-4F741C033153','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9DAC7323-65CB-508C-8EA9-A005458354D3', 'sequence': {'long': 981}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706884813354302, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9DAC7323-65CB-508C-8EA9-A005458354D3','981','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706884813354302','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9DAC7323-65CB-508C-8EA9-A005458354D3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9DAC7323-65CB-508C-8EA9-A005458354D3','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7671AA5A-7E78-50DF-A2C4-8A0018AA8F3D', 'sequence': {'long': 982}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706884813354302, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7671AA5A-7E78-50DF-A2C4-8A0018AA8F3D','982','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706884813354302','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7671AA5A-7E78-50DF-A2C4-8A0018AA8F3D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7671AA5A-7E78-50DF-A2C4-8A0018AA8F3D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1EF9FB77-F25A-582F-BC59-04A21EB4E4F9', 'sequence': {'long': 983}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '512B60A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706885813349778, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1EF9FB77-F25A-582F-BC59-04A21EB4E4F9','983','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','512B60A9-36C2-11E8-BF66-D9AA8AFF4A69','1522706885813349778','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1EF9FB77-F25A-582F-BC59-04A21EB4E4F9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1EF9FB77-F25A-582F-BC59-04A21EB4E4F9','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1EF9FB77-F25A-582F-BC59-04A21EB4E4F9','512B60A9-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '48D246F3-6F1E-5F77-B286-070902BFE312', 'sequence': {'long': 984}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '512B6159-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706885813349778, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'48D246F3-6F1E-5F77-B286-070902BFE312','984','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','512B6159-36C2-11E8-BF66-D9AA8AFF4A69','1522706885813349778','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'48D246F3-6F1E-5F77-B286-070902BFE312','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'48D246F3-6F1E-5F77-B286-070902BFE312','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'48D246F3-6F1E-5F77-B286-070902BFE312','512B6159-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '51C3F467-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'51C3F467-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'51C3F467-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'51C3F467-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '51C3F354-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'51C3F354-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'51C3F354-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'51C3F354-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8C0F4A97-C64A-5273-ACAB-9A2D465DE506', 'sequence': {'long': 985}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51C3F354-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '51C3F467-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706885813349778, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8C0F4A97-C64A-5273-ACAB-9A2D465DE506','985','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','51C3F354-36C2-11E8-BF66-D9AA8AFF4A69','51C3F467-36C2-11E8-BF66-D9AA8AFF4A69','1522706885813349778','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8C0F4A97-C64A-5273-ACAB-9A2D465DE506','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8C0F4A97-C64A-5273-ACAB-9A2D465DE506','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8C0F4A97-C64A-5273-ACAB-9A2D465DE506','51C3F354-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'8C0F4A97-C64A-5273-ACAB-9A2D465DE506','51C3F467-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E8DFB52A-BC02-5624-8A54-0C5B433C32D9', 'sequence': {'long': 986}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706885813349778, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E8DFB52A-BC02-5624-8A54-0C5B433C32D9','986','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706885813349778','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E8DFB52A-BC02-5624-8A54-0C5B433C32D9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E8DFB52A-BC02-5624-8A54-0C5B433C32D9','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '31617F2D-D084-546E-BB34-8C81DECF5032', 'sequence': {'long': 987}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706885813349778, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'31617F2D-D084-546E-BB34-8C81DECF5032','987','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706885813349778','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'31617F2D-D084-546E-BB34-8C81DECF5032','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'31617F2D-D084-546E-BB34-8C81DECF5032','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BBFD5F1D-1A00-5E4D-BCFA-56A01B20C1B2', 'sequence': {'long': 988}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706885813349778, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BBFD5F1D-1A00-5E4D-BCFA-56A01B20C1B2','988','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706885813349778','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BBFD5F1D-1A00-5E4D-BCFA-56A01B20C1B2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BBFD5F1D-1A00-5E4D-BCFA-56A01B20C1B2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6FC0BE15-57AE-53F1-8F5E-C029EA770A1E', 'sequence': {'long': 989}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706885813349778, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6FC0BE15-57AE-53F1-8F5E-C029EA770A1E','989','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706885813349778','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6FC0BE15-57AE-53F1-8F5E-C029EA770A1E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6FC0BE15-57AE-53F1-8F5E-C029EA770A1E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C7E195E8-D04D-5A6C-AA62-2C04A1A2786B', 'sequence': {'long': 990}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51C3F354-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706886813349824, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C7E195E8-D04D-5A6C-AA62-2C04A1A2786B','990','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','51C3F354-36C2-11E8-BF66-D9AA8AFF4A69','1522706886813349824','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C7E195E8-D04D-5A6C-AA62-2C04A1A2786B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C7E195E8-D04D-5A6C-AA62-2C04A1A2786B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C7E195E8-D04D-5A6C-AA62-2C04A1A2786B','51C3F354-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F2D94811-DF89-5CDE-A939-AB04204639BA', 'sequence': {'long': 991}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51C3F467-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706886813349824, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F2D94811-DF89-5CDE-A939-AB04204639BA','991','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','51C3F467-36C2-11E8-BF66-D9AA8AFF4A69','1522706886813349824','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F2D94811-DF89-5CDE-A939-AB04204639BA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F2D94811-DF89-5CDE-A939-AB04204639BA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F2D94811-DF89-5CDE-A939-AB04204639BA','51C3F467-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '525CA886-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'525CA886-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'525CA886-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'525CA886-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '525CA7DA-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'525CA7DA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'525CA7DA-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'525CA7DA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3365920E-75EE-5C6E-B929-D2CA585DF2DC', 'sequence': {'long': 992}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '525CA7DA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '525CA886-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706886813349824, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3365920E-75EE-5C6E-B929-D2CA585DF2DC','992','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','525CA7DA-36C2-11E8-BF66-D9AA8AFF4A69','525CA886-36C2-11E8-BF66-D9AA8AFF4A69','1522706886813349824','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3365920E-75EE-5C6E-B929-D2CA585DF2DC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3365920E-75EE-5C6E-B929-D2CA585DF2DC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3365920E-75EE-5C6E-B929-D2CA585DF2DC','525CA7DA-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'3365920E-75EE-5C6E-B929-D2CA585DF2DC','525CA886-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '47D1D815-73BF-50AC-8C82-D1C43EEED292', 'sequence': {'long': 993}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706886813349824, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'47D1D815-73BF-50AC-8C82-D1C43EEED292','993','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706886813349824','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'47D1D815-73BF-50AC-8C82-D1C43EEED292','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'47D1D815-73BF-50AC-8C82-D1C43EEED292','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CFC462DE-409F-5937-B530-9A002C5121FC', 'sequence': {'long': 994}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706886813349824, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CFC462DE-409F-5937-B530-9A002C5121FC','994','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706886813349824','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CFC462DE-409F-5937-B530-9A002C5121FC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CFC462DE-409F-5937-B530-9A002C5121FC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C378830D-1378-5F1F-8DF9-93596E95294F', 'sequence': {'long': 995}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706886813349824, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C378830D-1378-5F1F-8DF9-93596E95294F','995','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706886813349824','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C378830D-1378-5F1F-8DF9-93596E95294F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C378830D-1378-5F1F-8DF9-93596E95294F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5445488C-7511-5351-AF6B-3600DF6BF33C', 'sequence': {'long': 996}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706886813349824, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5445488C-7511-5351-AF6B-3600DF6BF33C','996','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706886813349824','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5445488C-7511-5351-AF6B-3600DF6BF33C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5445488C-7511-5351-AF6B-3600DF6BF33C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A4F5F1AD-B251-59F5-B297-188E6496F0FA', 'sequence': {'long': 997}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '525CA7DA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706887813352570, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A4F5F1AD-B251-59F5-B297-188E6496F0FA','997','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','525CA7DA-36C2-11E8-BF66-D9AA8AFF4A69','1522706887813352570','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A4F5F1AD-B251-59F5-B297-188E6496F0FA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A4F5F1AD-B251-59F5-B297-188E6496F0FA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A4F5F1AD-B251-59F5-B297-188E6496F0FA','525CA7DA-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '074AD14D-0AE4-56FA-B5D4-0DD9EBE3FF7C', 'sequence': {'long': 998}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '525CA886-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706887813352570, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'074AD14D-0AE4-56FA-B5D4-0DD9EBE3FF7C','998','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','525CA886-36C2-11E8-BF66-D9AA8AFF4A69','1522706887813352570','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'074AD14D-0AE4-56FA-B5D4-0DD9EBE3FF7C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'074AD14D-0AE4-56FA-B5D4-0DD9EBE3FF7C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'074AD14D-0AE4-56FA-B5D4-0DD9EBE3FF7C','525CA886-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '52F5246D-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'52F5246D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'52F5246D-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'52F5246D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '52F523BE-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'52F523BE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'52F523BE-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'52F523BE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1B3F0CDF-06BE-5A63-ABA0-F3E96E83F457', 'sequence': {'long': 999}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '52F523BE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '52F5246D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706887813352570, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1B3F0CDF-06BE-5A63-ABA0-F3E96E83F457','999','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','52F523BE-36C2-11E8-BF66-D9AA8AFF4A69','52F5246D-36C2-11E8-BF66-D9AA8AFF4A69','1522706887813352570','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1B3F0CDF-06BE-5A63-ABA0-F3E96E83F457','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1B3F0CDF-06BE-5A63-ABA0-F3E96E83F457','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1B3F0CDF-06BE-5A63-ABA0-F3E96E83F457','52F523BE-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'1B3F0CDF-06BE-5A63-ABA0-F3E96E83F457','52F5246D-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '689222AD-6487-5E4B-86B5-48EB3FF09E48', 'sequence': {'long': 1000}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706887813352570, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'689222AD-6487-5E4B-86B5-48EB3FF09E48','1000','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706887813352570','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'689222AD-6487-5E4B-86B5-48EB3FF09E48','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'689222AD-6487-5E4B-86B5-48EB3FF09E48','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '72E7CC7D-B94D-52B5-B674-45144259A479', 'sequence': {'long': 1001}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706887813352570, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'72E7CC7D-B94D-52B5-B674-45144259A479','1001','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706887813352570','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'72E7CC7D-B94D-52B5-B674-45144259A479','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'72E7CC7D-B94D-52B5-B674-45144259A479','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3D79B8F-CED5-5C4B-8AA1-AECC34D7116B', 'sequence': {'long': 1002}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706887813352570, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3D79B8F-CED5-5C4B-8AA1-AECC34D7116B','1002','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706887813352570','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3D79B8F-CED5-5C4B-8AA1-AECC34D7116B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3D79B8F-CED5-5C4B-8AA1-AECC34D7116B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '723B03A9-359D-550E-9B26-B2F5C3F405A9', 'sequence': {'long': 1003}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706887813352570, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'723B03A9-359D-550E-9B26-B2F5C3F405A9','1003','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706887813352570','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'723B03A9-359D-550E-9B26-B2F5C3F405A9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'723B03A9-359D-550E-9B26-B2F5C3F405A9','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '740D025B-D506-5051-80D8-A981F1A92F8D', 'sequence': {'long': 1004}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '52F523BE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706888813351446, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'740D025B-D506-5051-80D8-A981F1A92F8D','1004','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','52F523BE-36C2-11E8-BF66-D9AA8AFF4A69','1522706888813351446','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'740D025B-D506-5051-80D8-A981F1A92F8D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'740D025B-D506-5051-80D8-A981F1A92F8D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'740D025B-D506-5051-80D8-A981F1A92F8D','52F523BE-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '171FD851-00F3-5C73-A73C-B05A89EC7CBB', 'sequence': {'long': 1005}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '52F5246D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706888813351446, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'171FD851-00F3-5C73-A73C-B05A89EC7CBB','1005','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','52F5246D-36C2-11E8-BF66-D9AA8AFF4A69','1522706888813351446','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'171FD851-00F3-5C73-A73C-B05A89EC7CBB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'171FD851-00F3-5C73-A73C-B05A89EC7CBB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'171FD851-00F3-5C73-A73C-B05A89EC7CBB','52F5246D-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '538DD637-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'538DD637-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'538DD637-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'538DD637-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '538DD52A-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'538DD52A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'538DD52A-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'538DD52A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3EFB21D7-A306-57D0-AF04-94681F5E6C66', 'sequence': {'long': 1006}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '538DD52A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '538DD637-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706888813351446, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3EFB21D7-A306-57D0-AF04-94681F5E6C66','1006','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','538DD52A-36C2-11E8-BF66-D9AA8AFF4A69','538DD637-36C2-11E8-BF66-D9AA8AFF4A69','1522706888813351446','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3EFB21D7-A306-57D0-AF04-94681F5E6C66','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3EFB21D7-A306-57D0-AF04-94681F5E6C66','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3EFB21D7-A306-57D0-AF04-94681F5E6C66','538DD52A-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'3EFB21D7-A306-57D0-AF04-94681F5E6C66','538DD637-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6E864E78-EED7-5607-AAD1-948F66196BE3', 'sequence': {'long': 1007}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706888813351446, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6E864E78-EED7-5607-AAD1-948F66196BE3','1007','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706888813351446','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6E864E78-EED7-5607-AAD1-948F66196BE3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6E864E78-EED7-5607-AAD1-948F66196BE3','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8D32F356-A2ED-5087-B394-29A77308ECD3', 'sequence': {'long': 1008}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706888813351446, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8D32F356-A2ED-5087-B394-29A77308ECD3','1008','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706888813351446','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8D32F356-A2ED-5087-B394-29A77308ECD3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8D32F356-A2ED-5087-B394-29A77308ECD3','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '79624CFE-08DC-527B-AD47-AF17070ED8E7', 'sequence': {'long': 1009}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706888813351446, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'79624CFE-08DC-527B-AD47-AF17070ED8E7','1009','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706888813351446','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'79624CFE-08DC-527B-AD47-AF17070ED8E7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'79624CFE-08DC-527B-AD47-AF17070ED8E7','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3355DBED-2CB4-5BED-B04D-C9EBAD8A7F37', 'sequence': {'long': 1010}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706888813351446, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3355DBED-2CB4-5BED-B04D-C9EBAD8A7F37','1010','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706888813351446','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3355DBED-2CB4-5BED-B04D-C9EBAD8A7F37','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3355DBED-2CB4-5BED-B04D-C9EBAD8A7F37','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0D0875FC-1AD6-57F0-AFF9-5A0E3DA71F7A', 'sequence': {'long': 1011}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '538DD52A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706889813352622, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0D0875FC-1AD6-57F0-AFF9-5A0E3DA71F7A','1011','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','538DD52A-36C2-11E8-BF66-D9AA8AFF4A69','1522706889813352622','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0D0875FC-1AD6-57F0-AFF9-5A0E3DA71F7A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0D0875FC-1AD6-57F0-AFF9-5A0E3DA71F7A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0D0875FC-1AD6-57F0-AFF9-5A0E3DA71F7A','538DD52A-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7AB7DAB9-E06E-5932-B577-A0DBCE09A88D', 'sequence': {'long': 1012}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '538DD637-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706889813352622, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7AB7DAB9-E06E-5932-B577-A0DBCE09A88D','1012','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','538DD637-36C2-11E8-BF66-D9AA8AFF4A69','1522706889813352622','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7AB7DAB9-E06E-5932-B577-A0DBCE09A88D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7AB7DAB9-E06E-5932-B577-A0DBCE09A88D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7AB7DAB9-E06E-5932-B577-A0DBCE09A88D','538DD637-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '54267E73-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'54267E73-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54267E73-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54267E73-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '54267D92-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'54267D92-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54267D92-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54267D92-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '88FA83F6-05D5-50AF-9BC0-7E86E0644E7F', 'sequence': {'long': 1013}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '54267D92-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '54267E73-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706889813352622, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'88FA83F6-05D5-50AF-9BC0-7E86E0644E7F','1013','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','54267D92-36C2-11E8-BF66-D9AA8AFF4A69','54267E73-36C2-11E8-BF66-D9AA8AFF4A69','1522706889813352622','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'88FA83F6-05D5-50AF-9BC0-7E86E0644E7F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'88FA83F6-05D5-50AF-9BC0-7E86E0644E7F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'88FA83F6-05D5-50AF-9BC0-7E86E0644E7F','54267D92-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'88FA83F6-05D5-50AF-9BC0-7E86E0644E7F','54267E73-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '46F411E0-B182-51F6-B458-5F91EC2D4D15', 'sequence': {'long': 1014}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706889813352622, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'46F411E0-B182-51F6-B458-5F91EC2D4D15','1014','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706889813352622','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'46F411E0-B182-51F6-B458-5F91EC2D4D15','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'46F411E0-B182-51F6-B458-5F91EC2D4D15','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EFAD9641-3F0C-5CA2-B6DC-9CD9501BFD7D', 'sequence': {'long': 1015}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706889813352622, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EFAD9641-3F0C-5CA2-B6DC-9CD9501BFD7D','1015','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706889813352622','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EFAD9641-3F0C-5CA2-B6DC-9CD9501BFD7D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EFAD9641-3F0C-5CA2-B6DC-9CD9501BFD7D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9089C3C2-BD46-52BC-8709-9CFD39DD772B', 'sequence': {'long': 1016}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706889813352622, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9089C3C2-BD46-52BC-8709-9CFD39DD772B','1016','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706889813352622','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9089C3C2-BD46-52BC-8709-9CFD39DD772B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9089C3C2-BD46-52BC-8709-9CFD39DD772B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E3EC332E-D165-5E15-AE21-8D4E156B39CE', 'sequence': {'long': 1017}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706889813352622, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E3EC332E-D165-5E15-AE21-8D4E156B39CE','1017','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706889813352622','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E3EC332E-D165-5E15-AE21-8D4E156B39CE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E3EC332E-D165-5E15-AE21-8D4E156B39CE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2B3010AB-55CD-5FA1-91D6-82674200F6D6', 'sequence': {'long': 1018}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '54267D92-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706890803349668, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2B3010AB-55CD-5FA1-91D6-82674200F6D6','1018','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','54267D92-36C2-11E8-BF66-D9AA8AFF4A69','1522706890803349668','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2B3010AB-55CD-5FA1-91D6-82674200F6D6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2B3010AB-55CD-5FA1-91D6-82674200F6D6','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2B3010AB-55CD-5FA1-91D6-82674200F6D6','54267D92-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5B4B1704-9556-5F44-95C3-140BA7E730C5', 'sequence': {'long': 1019}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '54267E73-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706890803349668, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5B4B1704-9556-5F44-95C3-140BA7E730C5','1019','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','54267E73-36C2-11E8-BF66-D9AA8AFF4A69','1522706890803349668','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5B4B1704-9556-5F44-95C3-140BA7E730C5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5B4B1704-9556-5F44-95C3-140BA7E730C5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5B4B1704-9556-5F44-95C3-140BA7E730C5','54267E73-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '54BD62EE-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'54BD62EE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54BD62EE-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54BD62EE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '54BD6237-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'54BD6237-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54BD6237-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54BD6237-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D4E0723A-B66D-55B9-8C6B-00FDCD91487B', 'sequence': {'long': 1020}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '54BD6237-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '54BD62EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706890803349668, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D4E0723A-B66D-55B9-8C6B-00FDCD91487B','1020','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','54BD6237-36C2-11E8-BF66-D9AA8AFF4A69','54BD62EE-36C2-11E8-BF66-D9AA8AFF4A69','1522706890803349668','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D4E0723A-B66D-55B9-8C6B-00FDCD91487B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D4E0723A-B66D-55B9-8C6B-00FDCD91487B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D4E0723A-B66D-55B9-8C6B-00FDCD91487B','54BD6237-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'D4E0723A-B66D-55B9-8C6B-00FDCD91487B','54BD62EE-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3E99EC3E-1C5B-5A93-8449-DC98B88D2E8B', 'sequence': {'long': 1021}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706890803349668, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3E99EC3E-1C5B-5A93-8449-DC98B88D2E8B','1021','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706890803349668','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3E99EC3E-1C5B-5A93-8449-DC98B88D2E8B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3E99EC3E-1C5B-5A93-8449-DC98B88D2E8B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E9B86190-89DB-58AA-8EB7-8BE1E9FEEF1D', 'sequence': {'long': 1022}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706890803349668, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E9B86190-89DB-58AA-8EB7-8BE1E9FEEF1D','1022','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706890803349668','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E9B86190-89DB-58AA-8EB7-8BE1E9FEEF1D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E9B86190-89DB-58AA-8EB7-8BE1E9FEEF1D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8AFA2039-2419-5B41-A5F3-86DB3B75B2B4', 'sequence': {'long': 1023}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706890803349668, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8AFA2039-2419-5B41-A5F3-86DB3B75B2B4','1023','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706890803349668','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8AFA2039-2419-5B41-A5F3-86DB3B75B2B4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8AFA2039-2419-5B41-A5F3-86DB3B75B2B4','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '286AF20D-C2E4-569A-B36F-EF66AA21BF66', 'sequence': {'long': 1024}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706890803349668, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'286AF20D-C2E4-569A-B36F-EF66AA21BF66','1024','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706890803349668','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'286AF20D-C2E4-569A-B36F-EF66AA21BF66','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'286AF20D-C2E4-569A-B36F-EF66AA21BF66','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1DE7D055-70B6-502E-AEDB-AA5987A1B79F', 'sequence': {'long': 1025}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '54BD6237-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706891813353195, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1DE7D055-70B6-502E-AEDB-AA5987A1B79F','1025','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','54BD6237-36C2-11E8-BF66-D9AA8AFF4A69','1522706891813353195','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1DE7D055-70B6-502E-AEDB-AA5987A1B79F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1DE7D055-70B6-502E-AEDB-AA5987A1B79F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1DE7D055-70B6-502E-AEDB-AA5987A1B79F','54BD6237-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E77BAA79-E7FF-5C1D-BFFB-1AFFF46D3137', 'sequence': {'long': 1026}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '54BD62EE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706891813353195, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E77BAA79-E7FF-5C1D-BFFB-1AFFF46D3137','1026','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','54BD62EE-36C2-11E8-BF66-D9AA8AFF4A69','1522706891813353195','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E77BAA79-E7FF-5C1D-BFFB-1AFFF46D3137','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E77BAA79-E7FF-5C1D-BFFB-1AFFF46D3137','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E77BAA79-E7FF-5C1D-BFFB-1AFFF46D3137','54BD62EE-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '55578B7A-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'55578B7A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'55578B7A-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'55578B7A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '55578A92-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'55578A92-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'55578A92-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'55578A92-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '24B17ACF-FF44-5812-99F5-4D1559764DBB', 'sequence': {'long': 1027}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '55578A92-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '55578B7A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706891813353195, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'24B17ACF-FF44-5812-99F5-4D1559764DBB','1027','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','55578A92-36C2-11E8-BF66-D9AA8AFF4A69','55578B7A-36C2-11E8-BF66-D9AA8AFF4A69','1522706891813353195','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'24B17ACF-FF44-5812-99F5-4D1559764DBB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'24B17ACF-FF44-5812-99F5-4D1559764DBB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'24B17ACF-FF44-5812-99F5-4D1559764DBB','55578A92-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'24B17ACF-FF44-5812-99F5-4D1559764DBB','55578B7A-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '45ED3814-EC26-531E-B62E-8345B9B7C00B', 'sequence': {'long': 1028}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706891813353195, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'45ED3814-EC26-531E-B62E-8345B9B7C00B','1028','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706891813353195','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'45ED3814-EC26-531E-B62E-8345B9B7C00B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'45ED3814-EC26-531E-B62E-8345B9B7C00B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C4841071-9960-59B4-83A8-2D542DE490DE', 'sequence': {'long': 1029}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706891813353195, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C4841071-9960-59B4-83A8-2D542DE490DE','1029','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706891813353195','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C4841071-9960-59B4-83A8-2D542DE490DE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C4841071-9960-59B4-83A8-2D542DE490DE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '29CE8041-6E0C-570A-B7C7-1CBBB531D8DB', 'sequence': {'long': 1030}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706891813353195, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'29CE8041-6E0C-570A-B7C7-1CBBB531D8DB','1030','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706891813353195','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'29CE8041-6E0C-570A-B7C7-1CBBB531D8DB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'29CE8041-6E0C-570A-B7C7-1CBBB531D8DB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '145139B2-6D9D-5C0B-BA5B-0437CDA45A8A', 'sequence': {'long': 1031}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706891813353195, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'145139B2-6D9D-5C0B-BA5B-0437CDA45A8A','1031','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706891813353195','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'145139B2-6D9D-5C0B-BA5B-0437CDA45A8A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'145139B2-6D9D-5C0B-BA5B-0437CDA45A8A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '75004D24-214B-53E6-A73A-4D35345DAA99', 'sequence': {'long': 1032}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '55578A92-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706892813350371, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'75004D24-214B-53E6-A73A-4D35345DAA99','1032','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','55578A92-36C2-11E8-BF66-D9AA8AFF4A69','1522706892813350371','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'75004D24-214B-53E6-A73A-4D35345DAA99','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'75004D24-214B-53E6-A73A-4D35345DAA99','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'75004D24-214B-53E6-A73A-4D35345DAA99','55578A92-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '421F0943-4B03-5444-860D-E8A19FB38C7C', 'sequence': {'long': 1033}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '55578B7A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706892813350371, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'421F0943-4B03-5444-860D-E8A19FB38C7C','1033','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','55578B7A-36C2-11E8-BF66-D9AA8AFF4A69','1522706892813350371','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'421F0943-4B03-5444-860D-E8A19FB38C7C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'421F0943-4B03-5444-860D-E8A19FB38C7C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'421F0943-4B03-5444-860D-E8A19FB38C7C','55578B7A-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '55F02C7D-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'55F02C7D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'55F02C7D-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'55F02C7D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '55F02B68-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'55F02B68-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'55F02B68-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'55F02B68-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8C63949D-9999-5050-86FD-58F384006FC4', 'sequence': {'long': 1034}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '55F02B68-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '55F02C7D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706892813350371, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8C63949D-9999-5050-86FD-58F384006FC4','1034','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','55F02B68-36C2-11E8-BF66-D9AA8AFF4A69','55F02C7D-36C2-11E8-BF66-D9AA8AFF4A69','1522706892813350371','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8C63949D-9999-5050-86FD-58F384006FC4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8C63949D-9999-5050-86FD-58F384006FC4','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8C63949D-9999-5050-86FD-58F384006FC4','55F02B68-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'8C63949D-9999-5050-86FD-58F384006FC4','55F02C7D-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C10C0D9A-438F-5ADC-BF83-642CD94D045A', 'sequence': {'long': 1035}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706892813350371, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C10C0D9A-438F-5ADC-BF83-642CD94D045A','1035','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706892813350371','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C10C0D9A-438F-5ADC-BF83-642CD94D045A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C10C0D9A-438F-5ADC-BF83-642CD94D045A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AD7F8D50-2152-571B-8C95-9C980784E274', 'sequence': {'long': 1036}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706892813350371, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AD7F8D50-2152-571B-8C95-9C980784E274','1036','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706892813350371','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AD7F8D50-2152-571B-8C95-9C980784E274','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AD7F8D50-2152-571B-8C95-9C980784E274','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '60F3B155-8229-5BCD-A41A-896F3A8E9D8F', 'sequence': {'long': 1037}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706892813350371, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'60F3B155-8229-5BCD-A41A-896F3A8E9D8F','1037','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706892813350371','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'60F3B155-8229-5BCD-A41A-896F3A8E9D8F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'60F3B155-8229-5BCD-A41A-896F3A8E9D8F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '58A0FD47-B4E8-5D42-89D2-B06B4E2A1636', 'sequence': {'long': 1038}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706892813350371, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'58A0FD47-B4E8-5D42-89D2-B06B4E2A1636','1038','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706892813350371','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'58A0FD47-B4E8-5D42-89D2-B06B4E2A1636','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'58A0FD47-B4E8-5D42-89D2-B06B4E2A1636','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2B375BE1-E2E7-5F38-A756-5A6B23E115BB', 'sequence': {'long': 1039}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '55F02B68-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706893813351737, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2B375BE1-E2E7-5F38-A756-5A6B23E115BB','1039','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','55F02B68-36C2-11E8-BF66-D9AA8AFF4A69','1522706893813351737','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2B375BE1-E2E7-5F38-A756-5A6B23E115BB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2B375BE1-E2E7-5F38-A756-5A6B23E115BB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2B375BE1-E2E7-5F38-A756-5A6B23E115BB','55F02B68-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E3BEA954-F05C-539C-ADFA-8049F20C872B', 'sequence': {'long': 1040}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '55F02C7D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706893813351737, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E3BEA954-F05C-539C-ADFA-8049F20C872B','1040','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','55F02C7D-36C2-11E8-BF66-D9AA8AFF4A69','1522706893813351737','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E3BEA954-F05C-539C-ADFA-8049F20C872B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E3BEA954-F05C-539C-ADFA-8049F20C872B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E3BEA954-F05C-539C-ADFA-8049F20C872B','55F02C7D-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5688A914-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5688A914-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5688A914-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5688A914-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5688A865-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5688A865-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5688A865-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5688A865-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ED9AB0C7-8050-5F40-BD2A-F4860BBC9BAD', 'sequence': {'long': 1041}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5688A865-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5688A914-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706893813351737, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ED9AB0C7-8050-5F40-BD2A-F4860BBC9BAD','1041','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5688A865-36C2-11E8-BF66-D9AA8AFF4A69','5688A914-36C2-11E8-BF66-D9AA8AFF4A69','1522706893813351737','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ED9AB0C7-8050-5F40-BD2A-F4860BBC9BAD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ED9AB0C7-8050-5F40-BD2A-F4860BBC9BAD','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ED9AB0C7-8050-5F40-BD2A-F4860BBC9BAD','5688A865-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'ED9AB0C7-8050-5F40-BD2A-F4860BBC9BAD','5688A914-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '915C65F9-7BA3-5D8A-A316-35C0F05B20FA', 'sequence': {'long': 1042}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706893813351737, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'915C65F9-7BA3-5D8A-A316-35C0F05B20FA','1042','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706893813351737','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'915C65F9-7BA3-5D8A-A316-35C0F05B20FA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'915C65F9-7BA3-5D8A-A316-35C0F05B20FA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '81111FE9-4612-5E7A-B56C-CF10FF31B100', 'sequence': {'long': 1043}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706893813351737, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'81111FE9-4612-5E7A-B56C-CF10FF31B100','1043','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706893813351737','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'81111FE9-4612-5E7A-B56C-CF10FF31B100','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'81111FE9-4612-5E7A-B56C-CF10FF31B100','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C5F78E62-5684-5421-87BE-1EE324FF4AB5', 'sequence': {'long': 1044}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706893813351737, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C5F78E62-5684-5421-87BE-1EE324FF4AB5','1044','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706893813351737','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C5F78E62-5684-5421-87BE-1EE324FF4AB5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C5F78E62-5684-5421-87BE-1EE324FF4AB5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E770D086-EF1B-53D1-A66F-1F5E6A073696', 'sequence': {'long': 1045}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706893813351737, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E770D086-EF1B-53D1-A66F-1F5E6A073696','1045','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706893813351737','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E770D086-EF1B-53D1-A66F-1F5E6A073696','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E770D086-EF1B-53D1-A66F-1F5E6A073696','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'ED281817-20F6-7E52-B620-7E7B827E05AF', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'ED281817-20F6-7E52-B620-7E7B827E05AF','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ED281817-20F6-7E52-B620-7E7B827E05AF','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ED281817-20F6-7E52-B620-7E7B827E05AF','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2337, 'parentSubject': None, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 0, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2337','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2D3143F6-74A7-5DAA-A13B-07B809D1691C', 'sequence': {'long': 1046}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706893933349471, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2D3143F6-74A7-5DAA-A13B-07B809D1691C','1046','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706893933349471','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2D3143F6-74A7-5DAA-A13B-07B809D1691C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2D3143F6-74A7-5DAA-A13B-07B809D1691C','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2D3143F6-74A7-5DAA-A13B-07B809D1691C','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D54CC1AE-1753-5FA0-ADD0-1F90909DFBA7', 'sequence': {'long': 1047}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706893933349471, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D54CC1AE-1753-5FA0-ADD0-1F90909DFBA7','1047','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706893933349471','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D54CC1AE-1753-5FA0-ADD0-1F90909DFBA7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D54CC1AE-1753-5FA0-ADD0-1F90909DFBA7','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D54CC1AE-1753-5FA0-ADD0-1F90909DFBA7','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3032884A-1D3F-5017-9BAF-39978C540245', 'sequence': {'long': 1048}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894003350954, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3032884A-1D3F-5017-9BAF-39978C540245','1048','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706894003350954','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3032884A-1D3F-5017-9BAF-39978C540245','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3032884A-1D3F-5017-9BAF-39978C540245','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3032884A-1D3F-5017-9BAF-39978C540245','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6FFEC848-EAA3-51C7-8E85-ECB1A42638C8', 'sequence': {'long': 1049}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894003350954, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6FFEC848-EAA3-51C7-8E85-ECB1A42638C8','1049','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706894003350954','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6FFEC848-EAA3-51C7-8E85-ECB1A42638C8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6FFEC848-EAA3-51C7-8E85-ECB1A42638C8','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6FFEC848-EAA3-51C7-8E85-ECB1A42638C8','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CF441BE3-B616-5C77-B41F-5E889DD485C5', 'sequence': {'long': 1050}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894273350374, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CF441BE3-B616-5C77-B41F-5E889DD485C5','1050','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706894273350374','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CF441BE3-B616-5C77-B41F-5E889DD485C5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CF441BE3-B616-5C77-B41F-5E889DD485C5','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CF441BE3-B616-5C77-B41F-5E889DD485C5','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E28478AF-9090-5EDB-8DFA-CF37DD70ED92', 'sequence': {'long': 1051}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894273350374, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E28478AF-9090-5EDB-8DFA-CF37DD70ED92','1051','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706894273350374','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E28478AF-9090-5EDB-8DFA-CF37DD70ED92','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E28478AF-9090-5EDB-8DFA-CF37DD70ED92','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E28478AF-9090-5EDB-8DFA-CF37DD70ED92','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '519FA133-830F-5512-8B2F-3BCB9394C383', 'sequence': {'long': 1052}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894423350189, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'519FA133-830F-5512-8B2F-3BCB9394C383','1052','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706894423350189','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'519FA133-830F-5512-8B2F-3BCB9394C383','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'519FA133-830F-5512-8B2F-3BCB9394C383','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'519FA133-830F-5512-8B2F-3BCB9394C383','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6DAF0F18-AFD2-5395-989E-DC3B0E4407AE', 'sequence': {'long': 1053}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894423350189, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6DAF0F18-AFD2-5395-989E-DC3B0E4407AE','1053','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706894423350189','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6DAF0F18-AFD2-5395-989E-DC3B0E4407AE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6DAF0F18-AFD2-5395-989E-DC3B0E4407AE','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6DAF0F18-AFD2-5395-989E-DC3B0E4407AE','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A4CE7427-97C8-5F51-9633-FB73C9EC09FD', 'sequence': {'long': 1054}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894573349384, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A4CE7427-97C8-5F51-9633-FB73C9EC09FD','1054','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706894573349384','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A4CE7427-97C8-5F51-9633-FB73C9EC09FD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A4CE7427-97C8-5F51-9633-FB73C9EC09FD','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A4CE7427-97C8-5F51-9633-FB73C9EC09FD','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3D3BECCE-7EFE-5213-83A3-1E3215B000FA', 'sequence': {'long': 1055}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894573349384, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3D3BECCE-7EFE-5213-83A3-1E3215B000FA','1055','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706894573349384','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3D3BECCE-7EFE-5213-83A3-1E3215B000FA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3D3BECCE-7EFE-5213-83A3-1E3215B000FA','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3D3BECCE-7EFE-5213-83A3-1E3215B000FA','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '40662013-1092-5A4D-B5C4-58A982E52595', 'sequence': {'long': 1056}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5688A865-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894813349153, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'40662013-1092-5A4D-B5C4-58A982E52595','1056','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5688A865-36C2-11E8-BF66-D9AA8AFF4A69','1522706894813349153','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'40662013-1092-5A4D-B5C4-58A982E52595','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'40662013-1092-5A4D-B5C4-58A982E52595','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'40662013-1092-5A4D-B5C4-58A982E52595','5688A865-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '950DCE6A-B792-5026-9E82-F552CA6E4C26', 'sequence': {'long': 1057}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5688A914-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894813349153, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'950DCE6A-B792-5026-9E82-F552CA6E4C26','1057','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5688A914-36C2-11E8-BF66-D9AA8AFF4A69','1522706894813349153','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'950DCE6A-B792-5026-9E82-F552CA6E4C26','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'950DCE6A-B792-5026-9E82-F552CA6E4C26','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'950DCE6A-B792-5026-9E82-F552CA6E4C26','5688A914-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '572141DC-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'572141DC-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'572141DC-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'572141DC-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '57214134-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'57214134-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'57214134-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'57214134-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A7D1F4E8-435C-5DB2-8F3A-CE864A57BEE7', 'sequence': {'long': 1058}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '57214134-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '572141DC-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706894813349153, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A7D1F4E8-435C-5DB2-8F3A-CE864A57BEE7','1058','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','57214134-36C2-11E8-BF66-D9AA8AFF4A69','572141DC-36C2-11E8-BF66-D9AA8AFF4A69','1522706894813349153','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A7D1F4E8-435C-5DB2-8F3A-CE864A57BEE7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A7D1F4E8-435C-5DB2-8F3A-CE864A57BEE7','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A7D1F4E8-435C-5DB2-8F3A-CE864A57BEE7','57214134-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'A7D1F4E8-435C-5DB2-8F3A-CE864A57BEE7','572141DC-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B8D00D9B-505B-5525-B289-7FBF448A891A', 'sequence': {'long': 1059}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894813349153, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B8D00D9B-505B-5525-B289-7FBF448A891A','1059','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706894813349153','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B8D00D9B-505B-5525-B289-7FBF448A891A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B8D00D9B-505B-5525-B289-7FBF448A891A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BF997B0E-E2B8-5D40-86B3-2EA612F3C09E', 'sequence': {'long': 1060}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894813349153, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BF997B0E-E2B8-5D40-86B3-2EA612F3C09E','1060','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706894813349153','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BF997B0E-E2B8-5D40-86B3-2EA612F3C09E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BF997B0E-E2B8-5D40-86B3-2EA612F3C09E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2B716CF0-E543-503E-974C-A6EE23009836', 'sequence': {'long': 1061}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894813349153, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2B716CF0-E543-503E-974C-A6EE23009836','1061','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706894813349153','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2B716CF0-E543-503E-974C-A6EE23009836','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2B716CF0-E543-503E-974C-A6EE23009836','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D48F4024-A6C1-5380-AE90-EAE67EF1E7CA', 'sequence': {'long': 1062}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706894813349153, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D48F4024-A6C1-5380-AE90-EAE67EF1E7CA','1062','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706894813349153','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D48F4024-A6C1-5380-AE90-EAE67EF1E7CA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D48F4024-A6C1-5380-AE90-EAE67EF1E7CA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6BDC9C39-2788-56BD-93F9-AD57F42B63E3', 'sequence': {'long': 1063}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895293349560, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6BDC9C39-2788-56BD-93F9-AD57F42B63E3','1063','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706895293349560','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6BDC9C39-2788-56BD-93F9-AD57F42B63E3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6BDC9C39-2788-56BD-93F9-AD57F42B63E3','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6BDC9C39-2788-56BD-93F9-AD57F42B63E3','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AD1BD9A3-7C55-5D1F-BC33-BC87AF5F18BB', 'sequence': {'long': 1064}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895293349560, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AD1BD9A3-7C55-5D1F-BC33-BC87AF5F18BB','1064','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706895293349560','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AD1BD9A3-7C55-5D1F-BC33-BC87AF5F18BB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AD1BD9A3-7C55-5D1F-BC33-BC87AF5F18BB','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AD1BD9A3-7C55-5D1F-BC33-BC87AF5F18BB','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '744BC447-8E80-537A-84D2-6B700A96E545', 'sequence': {'long': 1065}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895513353468, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'744BC447-8E80-537A-84D2-6B700A96E545','1065','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706895513353468','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'744BC447-8E80-537A-84D2-6B700A96E545','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'744BC447-8E80-537A-84D2-6B700A96E545','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'744BC447-8E80-537A-84D2-6B700A96E545','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A0160BB4-F06F-57DF-A205-67B1454632B6', 'sequence': {'long': 1066}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895513353468, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A0160BB4-F06F-57DF-A205-67B1454632B6','1066','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706895513353468','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A0160BB4-F06F-57DF-A205-67B1454632B6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A0160BB4-F06F-57DF-A205-67B1454632B6','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A0160BB4-F06F-57DF-A205-67B1454632B6','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '26DADA63-60C8-5D82-8F51-C57D4F9DC5C0', 'sequence': {'long': 1067}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895603352671, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'26DADA63-60C8-5D82-8F51-C57D4F9DC5C0','1067','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706895603352671','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'26DADA63-60C8-5D82-8F51-C57D4F9DC5C0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'26DADA63-60C8-5D82-8F51-C57D4F9DC5C0','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'26DADA63-60C8-5D82-8F51-C57D4F9DC5C0','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6328CBA8-2AE3-5913-BFBB-04A7D8C8AE74', 'sequence': {'long': 1068}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895613355562, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6328CBA8-2AE3-5913-BFBB-04A7D8C8AE74','1068','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706895613355562','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6328CBA8-2AE3-5913-BFBB-04A7D8C8AE74','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6328CBA8-2AE3-5913-BFBB-04A7D8C8AE74','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6328CBA8-2AE3-5913-BFBB-04A7D8C8AE74','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B060C817-6966-5A8D-8CCF-04A9264AE2EE', 'sequence': {'long': 1069}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '57214134-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895813350579, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B060C817-6966-5A8D-8CCF-04A9264AE2EE','1069','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','57214134-36C2-11E8-BF66-D9AA8AFF4A69','1522706895813350579','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B060C817-6966-5A8D-8CCF-04A9264AE2EE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B060C817-6966-5A8D-8CCF-04A9264AE2EE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B060C817-6966-5A8D-8CCF-04A9264AE2EE','57214134-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7DECF62F-C55B-50C2-861F-631D323F42E8', 'sequence': {'long': 1070}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '572141DC-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895813350579, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7DECF62F-C55B-50C2-861F-631D323F42E8','1070','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','572141DC-36C2-11E8-BF66-D9AA8AFF4A69','1522706895813350579','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7DECF62F-C55B-50C2-861F-631D323F42E8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7DECF62F-C55B-50C2-861F-631D323F42E8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7DECF62F-C55B-50C2-861F-631D323F42E8','572141DC-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '57B9D582-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'57B9D582-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'57B9D582-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'57B9D582-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '57B9D463-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'57B9D463-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'57B9D463-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'57B9D463-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D1D25726-275F-5F4E-AA62-41173A41A281', 'sequence': {'long': 1071}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '57B9D463-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '57B9D582-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706895813350579, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D1D25726-275F-5F4E-AA62-41173A41A281','1071','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','57B9D463-36C2-11E8-BF66-D9AA8AFF4A69','57B9D582-36C2-11E8-BF66-D9AA8AFF4A69','1522706895813350579','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D1D25726-275F-5F4E-AA62-41173A41A281','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D1D25726-275F-5F4E-AA62-41173A41A281','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D1D25726-275F-5F4E-AA62-41173A41A281','57B9D463-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'D1D25726-275F-5F4E-AA62-41173A41A281','57B9D582-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AB4D8A14-6C7A-5858-AC94-A886550ECFD2', 'sequence': {'long': 1072}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895813350579, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AB4D8A14-6C7A-5858-AC94-A886550ECFD2','1072','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706895813350579','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AB4D8A14-6C7A-5858-AC94-A886550ECFD2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AB4D8A14-6C7A-5858-AC94-A886550ECFD2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '77DAF58F-FF23-599A-B077-6DCDBE749C76', 'sequence': {'long': 1073}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895813350579, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'77DAF58F-FF23-599A-B077-6DCDBE749C76','1073','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706895813350579','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'77DAF58F-FF23-599A-B077-6DCDBE749C76','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'77DAF58F-FF23-599A-B077-6DCDBE749C76','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FA20A8E0-3769-5C75-B7A8-309A3A6EF255', 'sequence': {'long': 1074}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895813350579, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FA20A8E0-3769-5C75-B7A8-309A3A6EF255','1074','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706895813350579','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FA20A8E0-3769-5C75-B7A8-309A3A6EF255','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FA20A8E0-3769-5C75-B7A8-309A3A6EF255','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3D02A33D-6523-5207-8E27-3A1785AD1702', 'sequence': {'long': 1075}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895813350579, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3D02A33D-6523-5207-8E27-3A1785AD1702','1075','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706895813350579','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3D02A33D-6523-5207-8E27-3A1785AD1702','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3D02A33D-6523-5207-8E27-3A1785AD1702','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '63411CD7-3E40-5C1A-8DB7-56705DC02804', 'sequence': {'long': 1076}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895883352162, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'63411CD7-3E40-5C1A-8DB7-56705DC02804','1076','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706895883352162','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'63411CD7-3E40-5C1A-8DB7-56705DC02804','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'63411CD7-3E40-5C1A-8DB7-56705DC02804','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'63411CD7-3E40-5C1A-8DB7-56705DC02804','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '3A627CD6-EA6F-9551-AFEA-34F521950B0B', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'3A627CD6-EA6F-9551-AFEA-34F521950B0B','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3A627CD6-EA6F-9551-AFEA-34F521950B0B','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3A627CD6-EA6F-9551-AFEA-34F521950B0B','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3422A6C2-A3C3-5051-8534-42239A10026F', 'sequence': {'long': 1077}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': {'string': '/usr/home/darpa/ta1-integration-cadets/translator/./'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895883352162, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3422A6C2-A3C3-5051-8534-42239A10026F','1077','EVENT_OPEN','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','/usr/home/darpa/ta1-integration-cadets/translator/./','1522706895883352162','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3422A6C2-A3C3-5051-8534-42239A10026F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3422A6C2-A3C3-5051-8534-42239A10026F','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3422A6C2-A3C3-5051-8534-42239A10026F','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5746218E-39F5-5F52-BF0E-6E83D320C4F1', 'sequence': {'long': 1078}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895883352162, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5746218E-39F5-5F52-BF0E-6E83D320C4F1','1078','EVENT_CLOSE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','1522706895883352162','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5746218E-39F5-5F52-BF0E-6E83D320C4F1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5746218E-39F5-5F52-BF0E-6E83D320C4F1','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5746218E-39F5-5F52-BF0E-6E83D320C4F1','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C3CBC1D1-0878-59DC-9ED5-5879E1891927', 'sequence': {'long': 1079}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706895883352162, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C3CBC1D1-0878-59DC-9ED5-5879E1891927','1079','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706895883352162','aue_write','11','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C3CBC1D1-0878-59DC-9ED5-5879E1891927','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C3CBC1D1-0878-59DC-9ED5-5879E1891927','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C3CBC1D1-0878-59DC-9ED5-5879E1891927','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '81E86AF7-58AC-54CB-B1B9-6A7D35BEE2EB', 'sequence': {'long': 1080}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '57B9D463-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896803351945, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'81E86AF7-58AC-54CB-B1B9-6A7D35BEE2EB','1080','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','57B9D463-36C2-11E8-BF66-D9AA8AFF4A69','1522706896803351945','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'81E86AF7-58AC-54CB-B1B9-6A7D35BEE2EB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'81E86AF7-58AC-54CB-B1B9-6A7D35BEE2EB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'81E86AF7-58AC-54CB-B1B9-6A7D35BEE2EB','57B9D463-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DDC19A03-1B9F-5818-9FE6-3D79FCE79002', 'sequence': {'long': 1081}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '57B9D582-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896803351945, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DDC19A03-1B9F-5818-9FE6-3D79FCE79002','1081','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','57B9D582-36C2-11E8-BF66-D9AA8AFF4A69','1522706896803351945','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DDC19A03-1B9F-5818-9FE6-3D79FCE79002','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DDC19A03-1B9F-5818-9FE6-3D79FCE79002','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DDC19A03-1B9F-5818-9FE6-3D79FCE79002','57B9D582-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5851076F-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5851076F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5851076F-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5851076F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '585106BD-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'585106BD-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'585106BD-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'585106BD-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '599BE8D2-5800-5E65-A485-1403F7FC3867', 'sequence': {'long': 1082}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585106BD-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5851076F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706896803351945, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'599BE8D2-5800-5E65-A485-1403F7FC3867','1082','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','585106BD-36C2-11E8-BF66-D9AA8AFF4A69','5851076F-36C2-11E8-BF66-D9AA8AFF4A69','1522706896803351945','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'599BE8D2-5800-5E65-A485-1403F7FC3867','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'599BE8D2-5800-5E65-A485-1403F7FC3867','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'599BE8D2-5800-5E65-A485-1403F7FC3867','585106BD-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'599BE8D2-5800-5E65-A485-1403F7FC3867','5851076F-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3932C09B-B21D-5E1E-AD4D-9DE6325C77D3', 'sequence': {'long': 1083}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896803351945, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3932C09B-B21D-5E1E-AD4D-9DE6325C77D3','1083','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706896803351945','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3932C09B-B21D-5E1E-AD4D-9DE6325C77D3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3932C09B-B21D-5E1E-AD4D-9DE6325C77D3','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9E4B2C99-5744-5090-8EDB-C972D1D74184', 'sequence': {'long': 1084}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896803351945, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9E4B2C99-5744-5090-8EDB-C972D1D74184','1084','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706896803351945','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9E4B2C99-5744-5090-8EDB-C972D1D74184','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9E4B2C99-5744-5090-8EDB-C972D1D74184','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4500B90A-C485-50C0-BDF1-8FC2D11112FF', 'sequence': {'long': 1085}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896803351945, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4500B90A-C485-50C0-BDF1-8FC2D11112FF','1085','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706896803351945','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4500B90A-C485-50C0-BDF1-8FC2D11112FF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4500B90A-C485-50C0-BDF1-8FC2D11112FF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '801F1A8B-647C-57E3-A6B8-FDA27E549381', 'sequence': {'long': 1086}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896803351945, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'801F1A8B-647C-57E3-A6B8-FDA27E549381','1086','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706896803351945','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'801F1A8B-647C-57E3-A6B8-FDA27E549381','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'801F1A8B-647C-57E3-A6B8-FDA27E549381','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '410ABC30-F083-5A89-8DCD-7FEFD0BB6A35', 'sequence': {'long': 1087}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'410ABC30-F083-5A89-8DCD-7FEFD0BB6A35','1087','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706896893352198','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'410ABC30-F083-5A89-8DCD-7FEFD0BB6A35','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'410ABC30-F083-5A89-8DCD-7FEFD0BB6A35','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'410ABC30-F083-5A89-8DCD-7FEFD0BB6A35','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B2E9C3CF-20A5-51C3-8C3B-967B5134ABCF', 'sequence': {'long': 1088}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B2E9C3CF-20A5-51C3-8C3B-967B5134ABCF','1088','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706896893352198','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B2E9C3CF-20A5-51C3-8C3B-967B5134ABCF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B2E9C3CF-20A5-51C3-8C3B-967B5134ABCF','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B2E9C3CF-20A5-51C3-8C3B-967B5134ABCF','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2810, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706896893352198, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'585F4106-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2810','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706896893352198','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'585F4106-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'585F4106-36C2-11E8-BF66-D9AA8AFF4A69','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'585F4106-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'585F4106-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '31F9FD30-9F56-53B1-AD33-CD94174CDDFA', 'sequence': {'long': 1089}, 'type': 'EVENT_FORK', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2810', 'exec': 'sh', 'arg_pid': '2810', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'31F9FD30-9F56-53B1-AD33-CD94174CDDFA','1089','EVENT_FORK','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','1522706896893352198','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2810','sh','2810','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'31F9FD30-9F56-53B1-AD33-CD94174CDDFA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'31F9FD30-9F56-53B1-AD33-CD94174CDDFA','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'31F9FD30-9F56-53B1-AD33-CD94174CDDFA','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '8DD7360A-9046-5A55-8690-D3BFE55A3BF2', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'8DD7360A-9046-5A55-8690-D3BFE55A3BF2','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8DD7360A-9046-5A55-8690-D3BFE55A3BF2','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8DD7360A-9046-5A55-8690-D3BFE55A3BF2','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '832FD2A8-D3F4-5EF1-9EDA-E76B5FB82BEE', 'sequence': {'long': 1090}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '8DD7360A-9046-5A55-8690-D3BFE55A3BF2'}, 'predicateObjectPath': {'string': '/usr/bin/less'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'less translator.py', 'return_value': '-1', 'exec': 'sh', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'832FD2A8-D3F4-5EF1-9EDA-E76B5FB82BEE','1090','EVENT_EXECUTE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','8DD7360A-9046-5A55-8690-D3BFE55A3BF2','/usr/bin/less','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706896893352198','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','less translator.py','-1','sh','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'832FD2A8-D3F4-5EF1-9EDA-E76B5FB82BEE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'832FD2A8-D3F4-5EF1-9EDA-E76B5FB82BEE','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'832FD2A8-D3F4-5EF1-9EDA-E76B5FB82BEE','8DD7360A-9046-5A55-8690-D3BFE55A3BF2','affects'),(nextval('edge_number_seq'),'832FD2A8-D3F4-5EF1-9EDA-E76B5FB82BEE','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F81FFEF0-B85A-5472-9281-0E929D940406', 'sequence': {'long': 1091}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F81FFEF0-B85A-5472-9281-0E929D940406','1091','EVENT_OPEN','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706896893352198','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F81FFEF0-B85A-5472-9281-0E929D940406','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F81FFEF0-B85A-5472-9281-0E929D940406','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F81FFEF0-B85A-5472-9281-0E929D940406','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3B32B305-2203-505A-B818-79E1C75A3974', 'sequence': {'long': 1092}, 'type': 'EVENT_READ', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3B32B305-2203-505A-B818-79E1C75A3974','1092','EVENT_READ','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706896893352198','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3B32B305-2203-505A-B818-79E1C75A3974','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3B32B305-2203-505A-B818-79E1C75A3974','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3B32B305-2203-505A-B818-79E1C75A3974','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '96A6D1B7-B07A-5943-8F09-83C5E01E47A8', 'sequence': {'long': 1093}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'96A6D1B7-B07A-5943-8F09-83C5E01E47A8','1093','EVENT_CLOSE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706896893352198','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'96A6D1B7-B07A-5943-8F09-83C5E01E47A8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'96A6D1B7-B07A-5943-8F09-83C5E01E47A8','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'96A6D1B7-B07A-5943-8F09-83C5E01E47A8','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '65B923AD-6EE2-59C4-885D-770F7ADFF541', 'sequence': {'long': 1094}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'65B923AD-6EE2-59C4-885D-770F7ADFF541','1094','EVENT_OPEN','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706896893352198','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'65B923AD-6EE2-59C4-885D-770F7ADFF541','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'65B923AD-6EE2-59C4-885D-770F7ADFF541','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'65B923AD-6EE2-59C4-885D-770F7ADFF541','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4D74B1A7-0130-591C-9F5D-5D699AEF9EC7', 'sequence': {'long': 1095}, 'type': 'EVENT_READ', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4D74B1A7-0130-591C-9F5D-5D699AEF9EC7','1095','EVENT_READ','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706896893352198','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4D74B1A7-0130-591C-9F5D-5D699AEF9EC7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4D74B1A7-0130-591C-9F5D-5D699AEF9EC7','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4D74B1A7-0130-591C-9F5D-5D699AEF9EC7','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '04B6825C-4836-5902-AB10-6D28B441A864', 'sequence': {'long': 1096}, 'type': 'EVENT_READ', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'04B6825C-4836-5902-AB10-6D28B441A864','1096','EVENT_READ','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706896893352198','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'04B6825C-4836-5902-AB10-6D28B441A864','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'04B6825C-4836-5902-AB10-6D28B441A864','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'04B6825C-4836-5902-AB10-6D28B441A864','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8888FEBB-EF93-59D9-9386-9DD0693FA9F4', 'sequence': {'long': 1097}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8888FEBB-EF93-59D9-9386-9DD0693FA9F4','1097','EVENT_CLOSE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706896893352198','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8888FEBB-EF93-59D9-9386-9DD0693FA9F4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8888FEBB-EF93-59D9-9386-9DD0693FA9F4','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8888FEBB-EF93-59D9-9386-9DD0693FA9F4','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6B526C00-7924-5CA4-8409-FE12716EE530', 'sequence': {'long': 1098}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': {'string': '/lib/libncursesw.so.8'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896893352198, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6B526C00-7924-5CA4-8409-FE12716EE530','1098','EVENT_OPEN','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','/lib/libncursesw.so.8','1522706896893352198','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6B526C00-7924-5CA4-8409-FE12716EE530','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6B526C00-7924-5CA4-8409-FE12716EE530','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6B526C00-7924-5CA4-8409-FE12716EE530','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1B8202C7-F871-5851-A00E-059C800C7552', 'sequence': {'long': 1099}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1B8202C7-F871-5851-A00E-059C800C7552','1099','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706896903351999','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1B8202C7-F871-5851-A00E-059C800C7552','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1B8202C7-F871-5851-A00E-059C800C7552','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1B8202C7-F871-5851-A00E-059C800C7552','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6EFC8F71-7B84-59F2-8159-2992C63F6ED9', 'sequence': {'long': 1100}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6EFC8F71-7B84-59F2-8159-2992C63F6ED9','1100','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706896903351999','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6EFC8F71-7B84-59F2-8159-2992C63F6ED9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6EFC8F71-7B84-59F2-8159-2992C63F6ED9','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6EFC8F71-7B84-59F2-8159-2992C63F6ED9','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '10D14ADE-9EE1-5C19-A07F-97F45991B13E', 'sequence': {'long': 1101}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8704000}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'10D14ADE-9EE1-5C19-A07F-97F45991B13E','1101','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706896903351999','aue_mmap','8704000','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'10D14ADE-9EE1-5C19-A07F-97F45991B13E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'10D14ADE-9EE1-5C19-A07F-97F45991B13E','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'10D14ADE-9EE1-5C19-A07F-97F45991B13E','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '469A7C36-14BE-5F8A-8175-22EE4D5D9422', 'sequence': {'long': 1102}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8704000}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'469A7C36-14BE-5F8A-8175-22EE4D5D9422','1102','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706896903351999','aue_mmap','8704000','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'469A7C36-14BE-5F8A-8175-22EE4D5D9422','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'469A7C36-14BE-5F8A-8175-22EE4D5D9422','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'469A7C36-14BE-5F8A-8175-22EE4D5D9422','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5B7F849B-02D7-5515-8758-5D6DA918FBCD', 'sequence': {'long': 1103}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11161600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5B7F849B-02D7-5515-8758-5D6DA918FBCD','1103','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706896903351999','aue_mmap','11161600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5B7F849B-02D7-5515-8758-5D6DA918FBCD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5B7F849B-02D7-5515-8758-5D6DA918FBCD','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5B7F849B-02D7-5515-8758-5D6DA918FBCD','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6281D664-BDA3-5280-BB31-89A4A109D61B', 'sequence': {'long': 1104}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11161600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6281D664-BDA3-5280-BB31-89A4A109D61B','1104','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706896903351999','aue_mmap','11161600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6281D664-BDA3-5280-BB31-89A4A109D61B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6281D664-BDA3-5280-BB31-89A4A109D61B','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6281D664-BDA3-5280-BB31-89A4A109D61B','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '10337AFB-238E-53CA-A586-200105E04B75', 'sequence': {'long': 1105}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'10337AFB-238E-53CA-A586-200105E04B75','1105','EVENT_CLOSE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706896903351999','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'10337AFB-238E-53CA-A586-200105E04B75','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'10337AFB-238E-53CA-A586-200105E04B75','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'10337AFB-238E-53CA-A586-200105E04B75','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B06E715A-E493-5E85-A775-2A9246E1E593', 'sequence': {'long': 1106}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B06E715A-E493-5E85-A775-2A9246E1E593','1106','EVENT_OPEN','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706896903351999','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B06E715A-E493-5E85-A775-2A9246E1E593','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B06E715A-E493-5E85-A775-2A9246E1E593','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B06E715A-E493-5E85-A775-2A9246E1E593','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '90B5A2C8-A29B-5956-B4EE-B3E13BE9F47C', 'sequence': {'long': 1107}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'90B5A2C8-A29B-5956-B4EE-B3E13BE9F47C','1107','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706896903351999','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'90B5A2C8-A29B-5956-B4EE-B3E13BE9F47C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'90B5A2C8-A29B-5956-B4EE-B3E13BE9F47C','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'90B5A2C8-A29B-5956-B4EE-B3E13BE9F47C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C937EA88-5479-5756-B147-6B50419116A9', 'sequence': {'long': 1108}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C937EA88-5479-5756-B147-6B50419116A9','1108','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706896903351999','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C937EA88-5479-5756-B147-6B50419116A9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C937EA88-5479-5756-B147-6B50419116A9','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C937EA88-5479-5756-B147-6B50419116A9','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9156D8DD-E386-56DE-9A07-3E282C37629C', 'sequence': {'long': 1109}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11186176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9156D8DD-E386-56DE-9A07-3E282C37629C','1109','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706896903351999','aue_mmap','11186176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9156D8DD-E386-56DE-9A07-3E282C37629C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9156D8DD-E386-56DE-9A07-3E282C37629C','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9156D8DD-E386-56DE-9A07-3E282C37629C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '99942390-9FEA-5045-A80E-5C5851A5CB69', 'sequence': {'long': 1110}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11186176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'99942390-9FEA-5045-A80E-5C5851A5CB69','1110','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706896903351999','aue_mmap','11186176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'99942390-9FEA-5045-A80E-5C5851A5CB69','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'99942390-9FEA-5045-A80E-5C5851A5CB69','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'99942390-9FEA-5045-A80E-5C5851A5CB69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '11E4A74E-7446-5D78-BA2F-5DA531B0D12C', 'sequence': {'long': 1111}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15073280}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'11E4A74E-7446-5D78-BA2F-5DA531B0D12C','1111','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706896903351999','aue_mmap','15073280','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'11E4A74E-7446-5D78-BA2F-5DA531B0D12C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'11E4A74E-7446-5D78-BA2F-5DA531B0D12C','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'11E4A74E-7446-5D78-BA2F-5DA531B0D12C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8142F742-15FA-5C47-8D51-DB1469A65037', 'sequence': {'long': 1112}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15073280}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8142F742-15FA-5C47-8D51-DB1469A65037','1112','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706896903351999','aue_mmap','15073280','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8142F742-15FA-5C47-8D51-DB1469A65037','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8142F742-15FA-5C47-8D51-DB1469A65037','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8142F742-15FA-5C47-8D51-DB1469A65037','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9E81DE0B-BEE4-58C8-AA41-304D21D049E1', 'sequence': {'long': 1113}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9E81DE0B-BEE4-58C8-AA41-304D21D049E1','1113','EVENT_CLOSE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706896903351999','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9E81DE0B-BEE4-58C8-AA41-304D21D049E1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9E81DE0B-BEE4-58C8-AA41-304D21D049E1','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9E81DE0B-BEE4-58C8-AA41-304D21D049E1','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C1829A4B-F573-55F6-90F5-4C8546CA5898', 'sequence': {'long': 1114}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896903351999, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C1829A4B-F573-55F6-90F5-4C8546CA5898','1114','EVENT_OPEN','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706896903351999','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C1829A4B-F573-55F6-90F5-4C8546CA5898','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C1829A4B-F573-55F6-90F5-4C8546CA5898','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C1829A4B-F573-55F6-90F5-4C8546CA5898','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '765D036A-F518-5F18-86A4-FA90CDC76A15', 'sequence': {'long': 1115}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'765D036A-F518-5F18-86A4-FA90CDC76A15','1115','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706896913350699','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'765D036A-F518-5F18-86A4-FA90CDC76A15','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'765D036A-F518-5F18-86A4-FA90CDC76A15','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'765D036A-F518-5F18-86A4-FA90CDC76A15','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3AF99422-4686-5852-981B-F20CD8DD8E95', 'sequence': {'long': 1116}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3AF99422-4686-5852-981B-F20CD8DD8E95','1116','EVENT_MMAP','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706896913350699','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3AF99422-4686-5852-981B-F20CD8DD8E95','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3AF99422-4686-5852-981B-F20CD8DD8E95','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3AF99422-4686-5852-981B-F20CD8DD8E95','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '17358E93-A967-5C72-B584-5704D9E55A8A', 'sequence': {'long': 1117}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'17358E93-A967-5C72-B584-5704D9E55A8A','1117','EVENT_CLOSE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706896913350699','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'17358E93-A967-5C72-B584-5704D9E55A8A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'17358E93-A967-5C72-B584-5704D9E55A8A','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'17358E93-A967-5C72-B584-5704D9E55A8A','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F5DDDEEC-69E9-510A-9014-3A3272C695F2', 'sequence': {'long': 1118}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F5DDDEEC-69E9-510A-9014-3A3272C695F2','1118','EVENT_OPEN','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706896913350699','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F5DDDEEC-69E9-510A-9014-3A3272C695F2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F5DDDEEC-69E9-510A-9014-3A3272C695F2','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F5DDDEEC-69E9-510A-9014-3A3272C695F2','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9E80C3E8-EF96-5AE3-B450-50DDE35B77AA', 'sequence': {'long': 1119}, 'type': 'EVENT_READ', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9E80C3E8-EF96-5AE3-B450-50DDE35B77AA','1119','EVENT_READ','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706896913350699','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9E80C3E8-EF96-5AE3-B450-50DDE35B77AA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9E80C3E8-EF96-5AE3-B450-50DDE35B77AA','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9E80C3E8-EF96-5AE3-B450-50DDE35B77AA','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B5D4B3C4-13AF-53B7-B990-B035547B3695', 'sequence': {'long': 1120}, 'type': 'EVENT_READ', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B5D4B3C4-13AF-53B7-B990-B035547B3695','1120','EVENT_READ','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706896913350699','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B5D4B3C4-13AF-53B7-B990-B035547B3695','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B5D4B3C4-13AF-53B7-B990-B035547B3695','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B5D4B3C4-13AF-53B7-B990-B035547B3695','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '319779B2-6C14-57C6-A999-08009F5EE2D7', 'sequence': {'long': 1121}, 'type': 'EVENT_READ', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'319779B2-6C14-57C6-A999-08009F5EE2D7','1121','EVENT_READ','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706896913350699','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'319779B2-6C14-57C6-A999-08009F5EE2D7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'319779B2-6C14-57C6-A999-08009F5EE2D7','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'319779B2-6C14-57C6-A999-08009F5EE2D7','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B8E7725D-E396-579A-A275-34ECD7F4D886', 'sequence': {'long': 1122}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B8E7725D-E396-579A-A275-34ECD7F4D886','1122','EVENT_CLOSE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','1522706896913350699','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B8E7725D-E396-579A-A275-34ECD7F4D886','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B8E7725D-E396-579A-A275-34ECD7F4D886','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B8E7725D-E396-579A-A275-34ECD7F4D886','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'B2C3146A-9E38-5156-B89E-90E9A6513613', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'B2C3146A-9E38-5156-B89E-90E9A6513613','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B2C3146A-9E38-5156-B89E-90E9A6513613','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B2C3146A-9E38-5156-B89E-90E9A6513613','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '49331B7E-961B-5F0D-BF23-E31DEA65E06C', 'sequence': {'long': 1123}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'B2C3146A-9E38-5156-B89E-90E9A6513613'}, 'predicateObjectPath': {'string': '/home/darpa/.lesshst'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'49331B7E-961B-5F0D-BF23-E31DEA65E06C','1123','EVENT_OPEN','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','B2C3146A-9E38-5156-B89E-90E9A6513613','/home/darpa/.lesshst','1522706896913350699','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'49331B7E-961B-5F0D-BF23-E31DEA65E06C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'49331B7E-961B-5F0D-BF23-E31DEA65E06C','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'49331B7E-961B-5F0D-BF23-E31DEA65E06C','B2C3146A-9E38-5156-B89E-90E9A6513613','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '47A56B3C-4BB4-5CA4-A56C-15F9E990697D', 'sequence': {'long': 1124}, 'type': 'EVENT_READ', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'B2C3146A-9E38-5156-B89E-90E9A6513613'}, 'predicateObjectPath': {'string': '/home/darpa/.lesshst'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/home/darpa/.lesshst', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'47A56B3C-4BB4-5CA4-A56C-15F9E990697D','1124','EVENT_READ','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','B2C3146A-9E38-5156-B89E-90E9A6513613','/home/darpa/.lesshst','1522706896913350699','aue_read','56','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/home/darpa/.lesshst','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'47A56B3C-4BB4-5CA4-A56C-15F9E990697D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'47A56B3C-4BB4-5CA4-A56C-15F9E990697D','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'47A56B3C-4BB4-5CA4-A56C-15F9E990697D','B2C3146A-9E38-5156-B89E-90E9A6513613','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0EA22BED-4750-5E71-9215-68D674BF1620', 'sequence': {'long': 1125}, 'type': 'EVENT_READ', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'B2C3146A-9E38-5156-B89E-90E9A6513613'}, 'predicateObjectPath': {'string': '/home/darpa/.lesshst'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/home/darpa/.lesshst', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0EA22BED-4750-5E71-9215-68D674BF1620','1125','EVENT_READ','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','B2C3146A-9E38-5156-B89E-90E9A6513613','/home/darpa/.lesshst','1522706896913350699','aue_read','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/home/darpa/.lesshst','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0EA22BED-4750-5E71-9215-68D674BF1620','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0EA22BED-4750-5E71-9215-68D674BF1620','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0EA22BED-4750-5E71-9215-68D674BF1620','B2C3146A-9E38-5156-B89E-90E9A6513613','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8366B6E1-E244-5A97-B0FE-D8E223D66EBE', 'sequence': {'long': 1126}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'B2C3146A-9E38-5156-B89E-90E9A6513613'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896913350699, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8366B6E1-E244-5A97-B0FE-D8E223D66EBE','1126','EVENT_CLOSE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','B2C3146A-9E38-5156-B89E-90E9A6513613','1522706896913350699','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8366B6E1-E244-5A97-B0FE-D8E223D66EBE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8366B6E1-E244-5A97-B0FE-D8E223D66EBE','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8366B6E1-E244-5A97-B0FE-D8E223D66EBE','B2C3146A-9E38-5156-B89E-90E9A6513613','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2F204695-3FB8-5EFF-9F67-2890249C3F73', 'sequence': {'long': 1127}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2F204695-3FB8-5EFF-9F67-2890249C3F73','1127','EVENT_OPEN','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706896923354829','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2F204695-3FB8-5EFF-9F67-2890249C3F73','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2F204695-3FB8-5EFF-9F67-2890249C3F73','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2F204695-3FB8-5EFF-9F67-2890249C3F73','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '169FA52D-7ECD-245E-8D7E-99F27E24D953', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'169FA52D-7ECD-245E-8D7E-99F27E24D953','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'169FA52D-7ECD-245E-8D7E-99F27E24D953','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'169FA52D-7ECD-245E-8D7E-99F27E24D953','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C7C267F3-DAC3-5BE3-9EEC-4733D47CC23F', 'sequence': {'long': 1128}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '169FA52D-7ECD-245E-8D7E-99F27E24D953'}, 'predicateObjectPath': {'string': '/usr/home/darpa/ta1-integration-cadets/translator/translator.py'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '4', 'return_value': '4', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C7C267F3-DAC3-5BE3-9EEC-4733D47CC23F','1128','EVENT_OPEN','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','169FA52D-7ECD-245E-8D7E-99F27E24D953','/usr/home/darpa/ta1-integration-cadets/translator/translator.py','1522706896923354829','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','4','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C7C267F3-DAC3-5BE3-9EEC-4733D47CC23F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C7C267F3-DAC3-5BE3-9EEC-4733D47CC23F','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C7C267F3-DAC3-5BE3-9EEC-4733D47CC23F','169FA52D-7ECD-245E-8D7E-99F27E24D953','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FD3A3521-C74D-5A4A-9353-F28AE372EB88', 'sequence': {'long': 1129}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '169FA52D-7ECD-245E-8D7E-99F27E24D953'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FD3A3521-C74D-5A4A-9353-F28AE372EB88','1129','EVENT_LSEEK','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','169FA52D-7ECD-245E-8D7E-99F27E24D953','1522706896923354829','aue_lseek','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FD3A3521-C74D-5A4A-9353-F28AE372EB88','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FD3A3521-C74D-5A4A-9353-F28AE372EB88','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FD3A3521-C74D-5A4A-9353-F28AE372EB88','169FA52D-7ECD-245E-8D7E-99F27E24D953','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '49459D77-B78E-5CE4-B92D-C822CB636BAD', 'sequence': {'long': 1130}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '169FA52D-7ECD-245E-8D7E-99F27E24D953'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'49459D77-B78E-5CE4-B92D-C822CB636BAD','1130','EVENT_LSEEK','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','169FA52D-7ECD-245E-8D7E-99F27E24D953','1522706896923354829','aue_lseek','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'49459D77-B78E-5CE4-B92D-C822CB636BAD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'49459D77-B78E-5CE4-B92D-C822CB636BAD','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'49459D77-B78E-5CE4-B92D-C822CB636BAD','169FA52D-7ECD-245E-8D7E-99F27E24D953','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2971DC2D-8587-512A-BD11-157E1D105F36', 'sequence': {'long': 1131}, 'type': 'EVENT_READ', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '169FA52D-7ECD-245E-8D7E-99F27E24D953'}, 'predicateObjectPath': {'string': 'translator.py'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 256}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'translator.py', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2971DC2D-8587-512A-BD11-157E1D105F36','1131','EVENT_READ','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','169FA52D-7ECD-245E-8D7E-99F27E24D953','translator.py','1522706896923354829','aue_read','256','83c8ed1f-5045-dbcd-b39f-918f0df4f851','translator.py','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2971DC2D-8587-512A-BD11-157E1D105F36','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2971DC2D-8587-512A-BD11-157E1D105F36','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2971DC2D-8587-512A-BD11-157E1D105F36','169FA52D-7ECD-245E-8D7E-99F27E24D953','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6FAE02D1-455D-51C6-A610-59C5A4887006', 'sequence': {'long': 1132}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '169FA52D-7ECD-245E-8D7E-99F27E24D953'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6FAE02D1-455D-51C6-A610-59C5A4887006','1132','EVENT_LSEEK','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','169FA52D-7ECD-245E-8D7E-99F27E24D953','1522706896923354829','aue_lseek','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6FAE02D1-455D-51C6-A610-59C5A4887006','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6FAE02D1-455D-51C6-A610-59C5A4887006','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6FAE02D1-455D-51C6-A610-59C5A4887006','169FA52D-7ECD-245E-8D7E-99F27E24D953','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D0E18352-D678-50D7-B908-DEDCA5B4F4D2', 'sequence': {'long': 1133}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '169FA52D-7ECD-245E-8D7E-99F27E24D953'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D0E18352-D678-50D7-B908-DEDCA5B4F4D2','1133','EVENT_LSEEK','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','169FA52D-7ECD-245E-8D7E-99F27E24D953','1522706896923354829','aue_lseek','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D0E18352-D678-50D7-B908-DEDCA5B4F4D2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D0E18352-D678-50D7-B908-DEDCA5B4F4D2','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D0E18352-D678-50D7-B908-DEDCA5B4F4D2','169FA52D-7ECD-245E-8D7E-99F27E24D953','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B205B5C8-28E9-57B1-8A5D-600E32548E1D', 'sequence': {'long': 1134}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B205B5C8-28E9-57B1-8A5D-600E32548E1D','1134','EVENT_WRITE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706896923354829','aue_write','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B205B5C8-28E9-57B1-8A5D-600E32548E1D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B205B5C8-28E9-57B1-8A5D-600E32548E1D','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B205B5C8-28E9-57B1-8A5D-600E32548E1D','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3625EB6-1B6A-5161-A745-D50E17D135DD', 'sequence': {'long': 1135}, 'type': 'EVENT_READ', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '169FA52D-7ECD-245E-8D7E-99F27E24D953'}, 'predicateObjectPath': {'string': 'translator.py'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8192}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'translator.py', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3625EB6-1B6A-5161-A745-D50E17D135DD','1135','EVENT_READ','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','169FA52D-7ECD-245E-8D7E-99F27E24D953','translator.py','1522706896923354829','aue_read','8192','83c8ed1f-5045-dbcd-b39f-918f0df4f851','translator.py','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3625EB6-1B6A-5161-A745-D50E17D135DD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3625EB6-1B6A-5161-A745-D50E17D135DD','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B3625EB6-1B6A-5161-A745-D50E17D135DD','169FA52D-7ECD-245E-8D7E-99F27E24D953','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CBE41AAA-2820-5A54-9242-4B09D1251F28', 'sequence': {'long': 1136}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1023}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CBE41AAA-2820-5A54-9242-4B09D1251F28','1136','EVENT_WRITE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706896923354829','aue_write','1023','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CBE41AAA-2820-5A54-9242-4B09D1251F28','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CBE41AAA-2820-5A54-9242-4B09D1251F28','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CBE41AAA-2820-5A54-9242-4B09D1251F28','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '32223E48-CD7C-525F-B6A9-27FA13297B11', 'sequence': {'long': 1137}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1023}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'32223E48-CD7C-525F-B6A9-27FA13297B11','1137','EVENT_WRITE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706896923354829','aue_write','1023','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'32223E48-CD7C-525F-B6A9-27FA13297B11','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'32223E48-CD7C-525F-B6A9-27FA13297B11','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'32223E48-CD7C-525F-B6A9-27FA13297B11','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4E7A7911-F7FF-5BB9-A917-9693304DE315', 'sequence': {'long': 1138}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706896923354829, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 695}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4E7A7911-F7FF-5BB9-A917-9693304DE315','1138','EVENT_WRITE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706896923354829','aue_write','695','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4E7A7911-F7FF-5BB9-A917-9693304DE315','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4E7A7911-F7FF-5BB9-A917-9693304DE315','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4E7A7911-F7FF-5BB9-A917-9693304DE315','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C6F70BE4-25B6-5525-960B-85531B90A338', 'sequence': {'long': 1139}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585106BD-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706897803350471, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C6F70BE4-25B6-5525-960B-85531B90A338','1139','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','585106BD-36C2-11E8-BF66-D9AA8AFF4A69','1522706897803350471','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C6F70BE4-25B6-5525-960B-85531B90A338','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C6F70BE4-25B6-5525-960B-85531B90A338','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C6F70BE4-25B6-5525-960B-85531B90A338','585106BD-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FFE9BA4F-CC2B-59CE-B244-9A4AD8331538', 'sequence': {'long': 1140}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5851076F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706897803350471, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FFE9BA4F-CC2B-59CE-B244-9A4AD8331538','1140','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5851076F-36C2-11E8-BF66-D9AA8AFF4A69','1522706897803350471','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FFE9BA4F-CC2B-59CE-B244-9A4AD8331538','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FFE9BA4F-CC2B-59CE-B244-9A4AD8331538','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FFE9BA4F-CC2B-59CE-B244-9A4AD8331538','5851076F-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '58E97C6D-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'58E97C6D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'58E97C6D-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'58E97C6D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '58E97B66-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'58E97B66-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'58E97B66-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'58E97B66-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6778FB8A-361E-54DF-8CD8-322BC0B34673', 'sequence': {'long': 1141}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '58E97B66-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '58E97C6D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706897803350471, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6778FB8A-361E-54DF-8CD8-322BC0B34673','1141','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','58E97B66-36C2-11E8-BF66-D9AA8AFF4A69','58E97C6D-36C2-11E8-BF66-D9AA8AFF4A69','1522706897803350471','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6778FB8A-361E-54DF-8CD8-322BC0B34673','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6778FB8A-361E-54DF-8CD8-322BC0B34673','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6778FB8A-361E-54DF-8CD8-322BC0B34673','58E97B66-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'6778FB8A-361E-54DF-8CD8-322BC0B34673','58E97C6D-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5CAD1D27-7391-5AEF-8917-662C4E5FB372', 'sequence': {'long': 1142}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706897803350471, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5CAD1D27-7391-5AEF-8917-662C4E5FB372','1142','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706897803350471','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5CAD1D27-7391-5AEF-8917-662C4E5FB372','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5CAD1D27-7391-5AEF-8917-662C4E5FB372','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2C7ECFBB-421D-5BFF-8D88-A59CD08A61BD', 'sequence': {'long': 1143}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706897803350471, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2C7ECFBB-421D-5BFF-8D88-A59CD08A61BD','1143','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706897803350471','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2C7ECFBB-421D-5BFF-8D88-A59CD08A61BD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2C7ECFBB-421D-5BFF-8D88-A59CD08A61BD','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D6AAC500-8E4A-5493-91CC-2AD40E8DA000', 'sequence': {'long': 1144}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706897803350471, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D6AAC500-8E4A-5493-91CC-2AD40E8DA000','1144','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706897803350471','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D6AAC500-8E4A-5493-91CC-2AD40E8DA000','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D6AAC500-8E4A-5493-91CC-2AD40E8DA000','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9457CD06-BC9F-5506-8DC6-97BCAB45E12D', 'sequence': {'long': 1145}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706897803350471, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9457CD06-BC9F-5506-8DC6-97BCAB45E12D','1145','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706897803350471','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9457CD06-BC9F-5506-8DC6-97BCAB45E12D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9457CD06-BC9F-5506-8DC6-97BCAB45E12D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A33E84CC-9E27-5155-A608-3115BA45C1A0', 'sequence': {'long': 1146}, 'type': 'EVENT_READ', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706897923350385, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A33E84CC-9E27-5155-A608-3115BA45C1A0','1146','EVENT_READ','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706897923350385','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A33E84CC-9E27-5155-A608-3115BA45C1A0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A33E84CC-9E27-5155-A608-3115BA45C1A0','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A33E84CC-9E27-5155-A608-3115BA45C1A0','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '20DDB27B-A5B9-5388-875E-5D0134149AEB', 'sequence': {'long': 1147}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '169FA52D-7ECD-245E-8D7E-99F27E24D953'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706897923350385, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'20DDB27B-A5B9-5388-875E-5D0134149AEB','1147','EVENT_CLOSE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','169FA52D-7ECD-245E-8D7E-99F27E24D953','1522706897923350385','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'20DDB27B-A5B9-5388-875E-5D0134149AEB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'20DDB27B-A5B9-5388-875E-5D0134149AEB','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'20DDB27B-A5B9-5388-875E-5D0134149AEB','169FA52D-7ECD-245E-8D7E-99F27E24D953','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '09AD55A7-8302-5526-88C0-9D52CB6B328E', 'sequence': {'long': 1148}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706897923350385, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'09AD55A7-8302-5526-88C0-9D52CB6B328E','1148','EVENT_WRITE','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706897923350385','aue_write','11','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'09AD55A7-8302-5526-88C0-9D52CB6B328E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'09AD55A7-8302-5526-88C0-9D52CB6B328E','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'09AD55A7-8302-5526-88C0-9D52CB6B328E','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '63E58C27-0D69-57D4-A34A-BF9C6B0550FB', 'sequence': {'long': 1149}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100116}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '585F4106-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706897923350385, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'63E58C27-0D69-57D4-A34A-BF9C6B0550FB','1149','EVENT_EXIT','100116','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','1522706897923350385','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'63E58C27-0D69-57D4-A34A-BF9C6B0550FB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'63E58C27-0D69-57D4-A34A-BF9C6B0550FB','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'63E58C27-0D69-57D4-A34A-BF9C6B0550FB','585F4106-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1250F976-5EDB-54D2-999A-883897AC86AC', 'sequence': {'long': 1150}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706897923350385, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1250F976-5EDB-54D2-999A-883897AC86AC','1150','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706897923350385','aue_write','2','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1250F976-5EDB-54D2-999A-883897AC86AC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1250F976-5EDB-54D2-999A-883897AC86AC','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1250F976-5EDB-54D2-999A-883897AC86AC','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '44F9646B-FF63-5DC2-A393-D867899ED5DE', 'sequence': {'long': 1151}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '58E97B66-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706898803349557, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'44F9646B-FF63-5DC2-A393-D867899ED5DE','1151','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','58E97B66-36C2-11E8-BF66-D9AA8AFF4A69','1522706898803349557','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'44F9646B-FF63-5DC2-A393-D867899ED5DE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'44F9646B-FF63-5DC2-A393-D867899ED5DE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'44F9646B-FF63-5DC2-A393-D867899ED5DE','58E97B66-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C752FDEB-030F-5CEB-910C-AB537F40B5B6', 'sequence': {'long': 1152}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '58E97C6D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706898803349557, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C752FDEB-030F-5CEB-910C-AB537F40B5B6','1152','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','58E97C6D-36C2-11E8-BF66-D9AA8AFF4A69','1522706898803349557','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C752FDEB-030F-5CEB-910C-AB537F40B5B6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C752FDEB-030F-5CEB-910C-AB537F40B5B6','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C752FDEB-030F-5CEB-910C-AB537F40B5B6','58E97C6D-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '598357B7-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'598357B7-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'598357B7-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'598357B7-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5983569E-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5983569E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5983569E-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5983569E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6049E400-3601-59D5-A344-581C04A16211', 'sequence': {'long': 1153}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5983569E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '598357B7-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706898813350477, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6049E400-3601-59D5-A344-581C04A16211','1153','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5983569E-36C2-11E8-BF66-D9AA8AFF4A69','598357B7-36C2-11E8-BF66-D9AA8AFF4A69','1522706898813350477','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6049E400-3601-59D5-A344-581C04A16211','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6049E400-3601-59D5-A344-581C04A16211','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6049E400-3601-59D5-A344-581C04A16211','5983569E-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'6049E400-3601-59D5-A344-581C04A16211','598357B7-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CABD6CBF-F9AD-5FCC-8539-98FD897B0A0E', 'sequence': {'long': 1154}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706898813350477, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CABD6CBF-F9AD-5FCC-8539-98FD897B0A0E','1154','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706898813350477','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CABD6CBF-F9AD-5FCC-8539-98FD897B0A0E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CABD6CBF-F9AD-5FCC-8539-98FD897B0A0E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D2BDFDA6-B779-5996-A3BC-53003AD5CCD8', 'sequence': {'long': 1155}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706898813350477, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D2BDFDA6-B779-5996-A3BC-53003AD5CCD8','1155','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706898813350477','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D2BDFDA6-B779-5996-A3BC-53003AD5CCD8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D2BDFDA6-B779-5996-A3BC-53003AD5CCD8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ED35EA07-E0A3-51D2-905D-5B3BFBB47549', 'sequence': {'long': 1156}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706898813350477, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ED35EA07-E0A3-51D2-905D-5B3BFBB47549','1156','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706898813350477','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ED35EA07-E0A3-51D2-905D-5B3BFBB47549','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ED35EA07-E0A3-51D2-905D-5B3BFBB47549','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AD727E57-080E-5705-982D-30908AD61888', 'sequence': {'long': 1157}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706898813350477, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AD727E57-080E-5705-982D-30908AD61888','1157','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706898813350477','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AD727E57-080E-5705-982D-30908AD61888','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AD727E57-080E-5705-982D-30908AD61888','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F60ED742-093A-5C9E-9865-CBF1954ACC3B', 'sequence': {'long': 1158}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899273352794, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F60ED742-093A-5C9E-9865-CBF1954ACC3B','1158','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706899273352794','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F60ED742-093A-5C9E-9865-CBF1954ACC3B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F60ED742-093A-5C9E-9865-CBF1954ACC3B','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F60ED742-093A-5C9E-9865-CBF1954ACC3B','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C5D3330C-3898-533F-8EE3-4D00231E26FB', 'sequence': {'long': 1159}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899283344714, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C5D3330C-3898-533F-8EE3-4D00231E26FB','1159','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706899283344714','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C5D3330C-3898-533F-8EE3-4D00231E26FB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C5D3330C-3898-533F-8EE3-4D00231E26FB','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C5D3330C-3898-533F-8EE3-4D00231E26FB','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BD358AC2-1AD8-5D41-8AAA-42A9A33A194B', 'sequence': {'long': 1160}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899363349557, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BD358AC2-1AD8-5D41-8AAA-42A9A33A194B','1160','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706899363349557','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BD358AC2-1AD8-5D41-8AAA-42A9A33A194B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BD358AC2-1AD8-5D41-8AAA-42A9A33A194B','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BD358AC2-1AD8-5D41-8AAA-42A9A33A194B','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1D0F9E62-391E-58FE-9C2A-8E23F73DED94', 'sequence': {'long': 1161}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899363349557, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1D0F9E62-391E-58FE-9C2A-8E23F73DED94','1161','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706899363349557','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1D0F9E62-391E-58FE-9C2A-8E23F73DED94','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1D0F9E62-391E-58FE-9C2A-8E23F73DED94','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1D0F9E62-391E-58FE-9C2A-8E23F73DED94','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C7681A9E-8D17-5A5D-87FD-6F2C0350D32E', 'sequence': {'long': 1162}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C7681A9E-8D17-5A5D-87FD-6F2C0350D32E','1162','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706899433350150','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C7681A9E-8D17-5A5D-87FD-6F2C0350D32E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C7681A9E-8D17-5A5D-87FD-6F2C0350D32E','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C7681A9E-8D17-5A5D-87FD-6F2C0350D32E','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B766FC94-4368-5F06-BD47-277850104DB8', 'sequence': {'long': 1163}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B766FC94-4368-5F06-BD47-277850104DB8','1163','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706899433350150','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B766FC94-4368-5F06-BD47-277850104DB8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B766FC94-4368-5F06-BD47-277850104DB8','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B766FC94-4368-5F06-BD47-277850104DB8','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2811, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706899433350150, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'59E27464-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2811','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706899433350150','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'59E27464-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'59E27464-36C2-11E8-BF66-D9AA8AFF4A69','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'59E27464-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'59E27464-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '74FFC126-D4D0-5921-89C7-65F22A09686F', 'sequence': {'long': 1164}, 'type': 'EVENT_FORK', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2811', 'exec': 'sh', 'arg_pid': '2811', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'74FFC126-D4D0-5921-89C7-65F22A09686F','1164','EVENT_FORK','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','1522706899433350150','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2811','sh','2811','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'74FFC126-D4D0-5921-89C7-65F22A09686F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'74FFC126-D4D0-5921-89C7-65F22A09686F','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'74FFC126-D4D0-5921-89C7-65F22A09686F','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '4437AF3A-467E-435C-BE46-1F783C43A407', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'4437AF3A-467E-435C-BE46-1F783C43A407','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4437AF3A-467E-435C-BE46-1F783C43A407','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4437AF3A-467E-435C-BE46-1F783C43A407','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '721546CA-0089-5669-A8BE-0D3624C1B7B3', 'sequence': {'long': 1165}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4437AF3A-467E-435C-BE46-1F783C43A407'}, 'predicateObjectPath': {'string': '/bin/ls'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'ls', 'return_value': '-1', 'exec': 'sh', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'721546CA-0089-5669-A8BE-0D3624C1B7B3','1165','EVENT_EXECUTE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','4437AF3A-467E-435C-BE46-1F783C43A407','/bin/ls','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706899433350150','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','ls','-1','sh','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'721546CA-0089-5669-A8BE-0D3624C1B7B3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'721546CA-0089-5669-A8BE-0D3624C1B7B3','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'721546CA-0089-5669-A8BE-0D3624C1B7B3','4437AF3A-467E-435C-BE46-1F783C43A407','affects'),(nextval('edge_number_seq'),'721546CA-0089-5669-A8BE-0D3624C1B7B3','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7E2BB9E8-0948-58DB-AEC1-29CBC2602365', 'sequence': {'long': 1166}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7E2BB9E8-0948-58DB-AEC1-29CBC2602365','1166','EVENT_OPEN','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706899433350150','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7E2BB9E8-0948-58DB-AEC1-29CBC2602365','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7E2BB9E8-0948-58DB-AEC1-29CBC2602365','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7E2BB9E8-0948-58DB-AEC1-29CBC2602365','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D8FC700F-28F2-55F8-997A-5F0F91CC567A', 'sequence': {'long': 1167}, 'type': 'EVENT_READ', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D8FC700F-28F2-55F8-997A-5F0F91CC567A','1167','EVENT_READ','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706899433350150','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D8FC700F-28F2-55F8-997A-5F0F91CC567A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D8FC700F-28F2-55F8-997A-5F0F91CC567A','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D8FC700F-28F2-55F8-997A-5F0F91CC567A','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EF8EB6A3-E94A-50A4-92F7-888BB743A3AE', 'sequence': {'long': 1168}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EF8EB6A3-E94A-50A4-92F7-888BB743A3AE','1168','EVENT_CLOSE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706899433350150','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EF8EB6A3-E94A-50A4-92F7-888BB743A3AE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EF8EB6A3-E94A-50A4-92F7-888BB743A3AE','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EF8EB6A3-E94A-50A4-92F7-888BB743A3AE','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B55A7250-579B-51EE-B2F1-8675111EF645', 'sequence': {'long': 1169}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B55A7250-579B-51EE-B2F1-8675111EF645','1169','EVENT_OPEN','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706899433350150','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B55A7250-579B-51EE-B2F1-8675111EF645','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B55A7250-579B-51EE-B2F1-8675111EF645','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B55A7250-579B-51EE-B2F1-8675111EF645','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A509522B-4E0D-549E-85AB-18AFE4DAAF56', 'sequence': {'long': 1170}, 'type': 'EVENT_READ', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A509522B-4E0D-549E-85AB-18AFE4DAAF56','1170','EVENT_READ','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706899433350150','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A509522B-4E0D-549E-85AB-18AFE4DAAF56','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A509522B-4E0D-549E-85AB-18AFE4DAAF56','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A509522B-4E0D-549E-85AB-18AFE4DAAF56','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3BF546FC-9F3F-589C-A09E-AF2F2EB17D6F', 'sequence': {'long': 1171}, 'type': 'EVENT_READ', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3BF546FC-9F3F-589C-A09E-AF2F2EB17D6F','1171','EVENT_READ','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706899433350150','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3BF546FC-9F3F-589C-A09E-AF2F2EB17D6F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3BF546FC-9F3F-589C-A09E-AF2F2EB17D6F','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3BF546FC-9F3F-589C-A09E-AF2F2EB17D6F','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CBAE213D-5B25-52E0-B0C4-2A1AA8020DCE', 'sequence': {'long': 1172}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CBAE213D-5B25-52E0-B0C4-2A1AA8020DCE','1172','EVENT_CLOSE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706899433350150','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CBAE213D-5B25-52E0-B0C4-2A1AA8020DCE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CBAE213D-5B25-52E0-B0C4-2A1AA8020DCE','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CBAE213D-5B25-52E0-B0C4-2A1AA8020DCE','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D73A3B6-89C1-502D-B791-5872EB4A9BF2', 'sequence': {'long': 1173}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': {'string': '/lib/libxo.so.0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D73A3B6-89C1-502D-B791-5872EB4A9BF2','1173','EVENT_OPEN','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','/lib/libxo.so.0','1522706899433350150','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D73A3B6-89C1-502D-B791-5872EB4A9BF2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D73A3B6-89C1-502D-B791-5872EB4A9BF2','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7D73A3B6-89C1-502D-B791-5872EB4A9BF2','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ADCC1A98-B0BC-5420-A5AE-8D45C6F57E92', 'sequence': {'long': 1174}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6594560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'ADCC1A98-B0BC-5420-A5AE-8D45C6F57E92','1174','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706899433350150','aue_mmap','6594560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','ls','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ADCC1A98-B0BC-5420-A5AE-8D45C6F57E92','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ADCC1A98-B0BC-5420-A5AE-8D45C6F57E92','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ADCC1A98-B0BC-5420-A5AE-8D45C6F57E92','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D369ADBA-6EDE-5D3F-9899-F597DD421139', 'sequence': {'long': 1175}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6594560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D369ADBA-6EDE-5D3F-9899-F597DD421139','1175','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706899433350150','aue_mmap','6594560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','ls','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D369ADBA-6EDE-5D3F-9899-F597DD421139','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D369ADBA-6EDE-5D3F-9899-F597DD421139','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D369ADBA-6EDE-5D3F-9899-F597DD421139','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6061C6D6-504B-5EEA-8F21-A283BEB4E354', 'sequence': {'long': 1176}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8568832}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6061C6D6-504B-5EEA-8F21-A283BEB4E354','1176','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706899433350150','aue_mmap','8568832','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','ls','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6061C6D6-504B-5EEA-8F21-A283BEB4E354','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6061C6D6-504B-5EEA-8F21-A283BEB4E354','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6061C6D6-504B-5EEA-8F21-A283BEB4E354','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A681D852-4513-5785-9AC3-690A3406950C', 'sequence': {'long': 1177}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8568832}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A681D852-4513-5785-9AC3-690A3406950C','1177','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706899433350150','aue_mmap','8568832','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','ls','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A681D852-4513-5785-9AC3-690A3406950C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A681D852-4513-5785-9AC3-690A3406950C','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A681D852-4513-5785-9AC3-690A3406950C','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '531797EE-48DF-5A7C-8A96-DA9517331260', 'sequence': {'long': 1178}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10780672}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'531797EE-48DF-5A7C-8A96-DA9517331260','1178','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706899433350150','aue_mmap','10780672','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','ls','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'531797EE-48DF-5A7C-8A96-DA9517331260','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'531797EE-48DF-5A7C-8A96-DA9517331260','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'531797EE-48DF-5A7C-8A96-DA9517331260','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '016483D5-FF69-5A6E-BD70-97C0D8156C7C', 'sequence': {'long': 1179}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10780672}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'016483D5-FF69-5A6E-BD70-97C0D8156C7C','1179','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706899433350150','aue_mmap','10780672','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','ls','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'016483D5-FF69-5A6E-BD70-97C0D8156C7C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'016483D5-FF69-5A6E-BD70-97C0D8156C7C','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'016483D5-FF69-5A6E-BD70-97C0D8156C7C','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '25D80F80-BD05-5826-AC90-151AC443544E', 'sequence': {'long': 1180}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899433350150, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'25D80F80-BD05-5826-AC90-151AC443544E','1180','EVENT_CLOSE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706899433350150','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'25D80F80-BD05-5826-AC90-151AC443544E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'25D80F80-BD05-5826-AC90-151AC443544E','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'25D80F80-BD05-5826-AC90-151AC443544E','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2F7B0905-4F9E-53B2-AAFD-2A400D375B80', 'sequence': {'long': 1181}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': {'string': '/lib/libutil.so.9'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899453351221, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2F7B0905-4F9E-53B2-AAFD-2A400D375B80','1181','EVENT_OPEN','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','/lib/libutil.so.9','1522706899453351221','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2F7B0905-4F9E-53B2-AAFD-2A400D375B80','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2F7B0905-4F9E-53B2-AAFD-2A400D375B80','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2F7B0905-4F9E-53B2-AAFD-2A400D375B80','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7DE91367-F8EE-5B9F-887C-29853ACC3B37', 'sequence': {'long': 1182}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899453351221, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6594560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7DE91367-F8EE-5B9F-887C-29853ACC3B37','1182','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706899453351221','aue_mmap','6594560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','ls','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7DE91367-F8EE-5B9F-887C-29853ACC3B37','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7DE91367-F8EE-5B9F-887C-29853ACC3B37','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7DE91367-F8EE-5B9F-887C-29853ACC3B37','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C5D6B9CE-AF3B-53A2-A052-F72A57F20F4E', 'sequence': {'long': 1183}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899453351221, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6594560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C5D6B9CE-AF3B-53A2-A052-F72A57F20F4E','1183','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706899453351221','aue_mmap','6594560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','ls','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C5D6B9CE-AF3B-53A2-A052-F72A57F20F4E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C5D6B9CE-AF3B-53A2-A052-F72A57F20F4E','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C5D6B9CE-AF3B-53A2-A052-F72A57F20F4E','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '07D2F4EC-1CA2-5005-8E64-06EA559563CE', 'sequence': {'long': 1184}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899453351221, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10784768}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'07D2F4EC-1CA2-5005-8E64-06EA559563CE','1184','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706899453351221','aue_mmap','10784768','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','ls','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'07D2F4EC-1CA2-5005-8E64-06EA559563CE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'07D2F4EC-1CA2-5005-8E64-06EA559563CE','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'07D2F4EC-1CA2-5005-8E64-06EA559563CE','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '78AB64DD-2A03-5EAC-9FE3-1866A599D21F', 'sequence': {'long': 1185}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899453351221, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10784768}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'78AB64DD-2A03-5EAC-9FE3-1866A599D21F','1185','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706899453351221','aue_mmap','10784768','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','ls','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'78AB64DD-2A03-5EAC-9FE3-1866A599D21F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'78AB64DD-2A03-5EAC-9FE3-1866A599D21F','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'78AB64DD-2A03-5EAC-9FE3-1866A599D21F','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '254547BC-ED3A-51BC-B7A1-6A8CF96F4E16', 'sequence': {'long': 1186}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899453351221, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12951552}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'254547BC-ED3A-51BC-B7A1-6A8CF96F4E16','1186','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706899453351221','aue_mmap','12951552','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','ls','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'254547BC-ED3A-51BC-B7A1-6A8CF96F4E16','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'254547BC-ED3A-51BC-B7A1-6A8CF96F4E16','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'254547BC-ED3A-51BC-B7A1-6A8CF96F4E16','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AEBF6F98-49D1-5A6B-A2E0-DC33B61550DF', 'sequence': {'long': 1187}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899453351221, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12951552}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'AEBF6F98-49D1-5A6B-A2E0-DC33B61550DF','1187','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706899453351221','aue_mmap','12951552','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','ls','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AEBF6F98-49D1-5A6B-A2E0-DC33B61550DF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AEBF6F98-49D1-5A6B-A2E0-DC33B61550DF','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AEBF6F98-49D1-5A6B-A2E0-DC33B61550DF','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '959B63EA-E26A-5500-939A-E828E638F443', 'sequence': {'long': 1188}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899453351221, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'959B63EA-E26A-5500-939A-E828E638F443','1188','EVENT_CLOSE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706899453351221','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'959B63EA-E26A-5500-939A-E828E638F443','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'959B63EA-E26A-5500-939A-E828E638F443','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'959B63EA-E26A-5500-939A-E828E638F443','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '541F40B2-F61E-50AF-A1BC-A6810F16FF91', 'sequence': {'long': 1189}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': {'string': '/lib/libncursesw.so.8'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'541F40B2-F61E-50AF-A1BC-A6810F16FF91','1189','EVENT_OPEN','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','/lib/libncursesw.so.8','1522706899463354431','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'541F40B2-F61E-50AF-A1BC-A6810F16FF91','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'541F40B2-F61E-50AF-A1BC-A6810F16FF91','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'541F40B2-F61E-50AF-A1BC-A6810F16FF91','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2165DF31-E7C0-5B6E-A918-16887EF7D746', 'sequence': {'long': 1190}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6594560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2165DF31-E7C0-5B6E-A918-16887EF7D746','1190','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706899463354431','aue_mmap','6594560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','ls','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2165DF31-E7C0-5B6E-A918-16887EF7D746','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2165DF31-E7C0-5B6E-A918-16887EF7D746','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2165DF31-E7C0-5B6E-A918-16887EF7D746','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0413484C-ACCE-5C72-BB17-A837D4DE3C3A', 'sequence': {'long': 1191}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6594560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'0413484C-ACCE-5C72-BB17-A837D4DE3C3A','1191','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706899463354431','aue_mmap','6594560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','ls','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0413484C-ACCE-5C72-BB17-A837D4DE3C3A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0413484C-ACCE-5C72-BB17-A837D4DE3C3A','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0413484C-ACCE-5C72-BB17-A837D4DE3C3A','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0838AB28-7E1D-5810-9B23-1EBE936AAB42', 'sequence': {'long': 1192}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12963840}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'0838AB28-7E1D-5810-9B23-1EBE936AAB42','1192','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706899463354431','aue_mmap','12963840','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','ls','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0838AB28-7E1D-5810-9B23-1EBE936AAB42','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0838AB28-7E1D-5810-9B23-1EBE936AAB42','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0838AB28-7E1D-5810-9B23-1EBE936AAB42','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '45165A6B-E2CB-5CF1-B229-17673931E03D', 'sequence': {'long': 1193}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12963840}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'45165A6B-E2CB-5CF1-B229-17673931E03D','1193','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706899463354431','aue_mmap','12963840','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','ls','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'45165A6B-E2CB-5CF1-B229-17673931E03D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'45165A6B-E2CB-5CF1-B229-17673931E03D','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'45165A6B-E2CB-5CF1-B229-17673931E03D','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F372FBB2-A03A-56DB-92A7-A10F84727E41', 'sequence': {'long': 1194}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15421440}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F372FBB2-A03A-56DB-92A7-A10F84727E41','1194','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706899463354431','aue_mmap','15421440','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','ls','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F372FBB2-A03A-56DB-92A7-A10F84727E41','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F372FBB2-A03A-56DB-92A7-A10F84727E41','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F372FBB2-A03A-56DB-92A7-A10F84727E41','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C6673710-37EA-54C5-AB03-A1A37E6234D2', 'sequence': {'long': 1195}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15421440}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C6673710-37EA-54C5-AB03-A1A37E6234D2','1195','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706899463354431','aue_mmap','15421440','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','ls','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C6673710-37EA-54C5-AB03-A1A37E6234D2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C6673710-37EA-54C5-AB03-A1A37E6234D2','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C6673710-37EA-54C5-AB03-A1A37E6234D2','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5C47954C-54F1-5F32-BFE6-FA955C4D0D5E', 'sequence': {'long': 1196}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5C47954C-54F1-5F32-BFE6-FA955C4D0D5E','1196','EVENT_CLOSE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706899463354431','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5C47954C-54F1-5F32-BFE6-FA955C4D0D5E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5C47954C-54F1-5F32-BFE6-FA955C4D0D5E','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5C47954C-54F1-5F32-BFE6-FA955C4D0D5E','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CE6704EB-F7A0-5376-8471-FFC2B0211D29', 'sequence': {'long': 1197}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CE6704EB-F7A0-5376-8471-FFC2B0211D29','1197','EVENT_OPEN','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706899463354431','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CE6704EB-F7A0-5376-8471-FFC2B0211D29','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CE6704EB-F7A0-5376-8471-FFC2B0211D29','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CE6704EB-F7A0-5376-8471-FFC2B0211D29','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C6837BB7-4435-59BE-AB22-6F350C20F76A', 'sequence': {'long': 1198}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6594560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C6837BB7-4435-59BE-AB22-6F350C20F76A','1198','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706899463354431','aue_mmap','6594560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','ls','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C6837BB7-4435-59BE-AB22-6F350C20F76A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C6837BB7-4435-59BE-AB22-6F350C20F76A','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C6837BB7-4435-59BE-AB22-6F350C20F76A','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BE975F2D-5A10-5FBD-92E3-29BFFC68E380', 'sequence': {'long': 1199}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6594560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'BE975F2D-5A10-5FBD-92E3-29BFFC68E380','1199','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706899463354431','aue_mmap','6594560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','ls','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BE975F2D-5A10-5FBD-92E3-29BFFC68E380','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BE975F2D-5A10-5FBD-92E3-29BFFC68E380','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BE975F2D-5A10-5FBD-92E3-29BFFC68E380','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8F233478-DE07-5E20-AFE8-2BCAD72F9F05', 'sequence': {'long': 1200}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15446016}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8F233478-DE07-5E20-AFE8-2BCAD72F9F05','1200','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706899463354431','aue_mmap','15446016','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','ls','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8F233478-DE07-5E20-AFE8-2BCAD72F9F05','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8F233478-DE07-5E20-AFE8-2BCAD72F9F05','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8F233478-DE07-5E20-AFE8-2BCAD72F9F05','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '29797C7B-1260-5F6D-9453-DFC0CFE77A33', 'sequence': {'long': 1201}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15446016}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'29797C7B-1260-5F6D-9453-DFC0CFE77A33','1201','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706899463354431','aue_mmap','15446016','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','ls','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'29797C7B-1260-5F6D-9453-DFC0CFE77A33','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'29797C7B-1260-5F6D-9453-DFC0CFE77A33','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'29797C7B-1260-5F6D-9453-DFC0CFE77A33','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FA8A3730-A692-51C3-B163-B193EE34E19B', 'sequence': {'long': 1202}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19333120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'FA8A3730-A692-51C3-B163-B193EE34E19B','1202','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706899463354431','aue_mmap','19333120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','ls','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FA8A3730-A692-51C3-B163-B193EE34E19B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FA8A3730-A692-51C3-B163-B193EE34E19B','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FA8A3730-A692-51C3-B163-B193EE34E19B','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5EC9B1F0-CD39-50C2-80E3-B353C78035F7', 'sequence': {'long': 1203}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19333120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5EC9B1F0-CD39-50C2-80E3-B353C78035F7','1203','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706899463354431','aue_mmap','19333120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','ls','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5EC9B1F0-CD39-50C2-80E3-B353C78035F7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5EC9B1F0-CD39-50C2-80E3-B353C78035F7','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5EC9B1F0-CD39-50C2-80E3-B353C78035F7','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BB63F4CA-A98D-54AD-BF22-52069AC557D1', 'sequence': {'long': 1204}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899463354431, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BB63F4CA-A98D-54AD-BF22-52069AC557D1','1204','EVENT_CLOSE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706899463354431','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BB63F4CA-A98D-54AD-BF22-52069AC557D1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BB63F4CA-A98D-54AD-BF22-52069AC557D1','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BB63F4CA-A98D-54AD-BF22-52069AC557D1','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B91712EC-A0D0-5BD1-B82D-42807034547B', 'sequence': {'long': 1205}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B91712EC-A0D0-5BD1-B82D-42807034547B','1205','EVENT_OPEN','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706899473351481','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B91712EC-A0D0-5BD1-B82D-42807034547B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B91712EC-A0D0-5BD1-B82D-42807034547B','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B91712EC-A0D0-5BD1-B82D-42807034547B','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3D6308DC-9807-58E1-9BC3-4CE6D8E2DDE7', 'sequence': {'long': 1206}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6594560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3D6308DC-9807-58E1-9BC3-4CE6D8E2DDE7','1206','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706899473351481','aue_mmap','6594560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','ls','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3D6308DC-9807-58E1-9BC3-4CE6D8E2DDE7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3D6308DC-9807-58E1-9BC3-4CE6D8E2DDE7','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3D6308DC-9807-58E1-9BC3-4CE6D8E2DDE7','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A9B3B943-15E9-51A7-8F25-FD88C2EF274E', 'sequence': {'long': 1207}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6594560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'ls', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A9B3B943-15E9-51A7-8F25-FD88C2EF274E','1207','EVENT_MMAP','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706899473351481','aue_mmap','6594560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','ls','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A9B3B943-15E9-51A7-8F25-FD88C2EF274E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A9B3B943-15E9-51A7-8F25-FD88C2EF274E','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A9B3B943-15E9-51A7-8F25-FD88C2EF274E','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3D2926C8-3A6F-5B3B-8DF6-93AD8A224F8B', 'sequence': {'long': 1208}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3D2926C8-3A6F-5B3B-8DF6-93AD8A224F8B','1208','EVENT_CLOSE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706899473351481','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3D2926C8-3A6F-5B3B-8DF6-93AD8A224F8B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3D2926C8-3A6F-5B3B-8DF6-93AD8A224F8B','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3D2926C8-3A6F-5B3B-8DF6-93AD8A224F8B','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DF53ECFC-3474-5452-A218-73BD4242E380', 'sequence': {'long': 1209}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': {'string': '/usr/home/darpa/ta1-integration-cadets/translator/.'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DF53ECFC-3474-5452-A218-73BD4242E380','1209','EVENT_OPEN','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','/usr/home/darpa/ta1-integration-cadets/translator/.','1522706899473351481','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DF53ECFC-3474-5452-A218-73BD4242E380','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DF53ECFC-3474-5452-A218-73BD4242E380','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DF53ECFC-3474-5452-A218-73BD4242E380','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B04DC7AE-F3D6-5B25-B8B3-E0F7A260B43E', 'sequence': {'long': 1210}, 'type': 'EVENT_MODIFY_PROCESS', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_fchdir'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B04DC7AE-F3D6-5B25-B8B3-E0F7A260B43E','1210','EVENT_MODIFY_PROCESS','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','1522706899473351481','aue_fchdir','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B04DC7AE-F3D6-5B25-B8B3-E0F7A260B43E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B04DC7AE-F3D6-5B25-B8B3-E0F7A260B43E','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B04DC7AE-F3D6-5B25-B8B3-E0F7A260B43E','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'B04DC7AE-F3D6-5B25-B8B3-E0F7A260B43E','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D495F3A1-AB83-5CAA-9DDC-D78CD5D83B99', 'sequence': {'long': 1211}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': {'string': '/usr/home/darpa/ta1-integration-cadets/translator/.'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '4', 'return_value': '4', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D495F3A1-AB83-5CAA-9DDC-D78CD5D83B99','1211','EVENT_OPEN','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','/usr/home/darpa/ta1-integration-cadets/translator/.','1522706899473351481','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','4','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D495F3A1-AB83-5CAA-9DDC-D78CD5D83B99','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D495F3A1-AB83-5CAA-9DDC-D78CD5D83B99','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D495F3A1-AB83-5CAA-9DDC-D78CD5D83B99','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B13D1F05-267A-546B-AE8B-7FCA33F7738D', 'sequence': {'long': 1212}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': {'string': '/usr/home/darpa/ta1-integration-cadets/translator/.'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '5', 'return_value': '5', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B13D1F05-267A-546B-AE8B-7FCA33F7738D','1212','EVENT_OPEN','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','/usr/home/darpa/ta1-integration-cadets/translator/.','1522706899473351481','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','5','5','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B13D1F05-267A-546B-AE8B-7FCA33F7738D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B13D1F05-267A-546B-AE8B-7FCA33F7738D','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B13D1F05-267A-546B-AE8B-7FCA33F7738D','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '16C3AE06-DC8D-514C-A137-2BCD7B44E8B0', 'sequence': {'long': 1213}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '5', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'16C3AE06-DC8D-514C-A137-2BCD7B44E8B0','1213','EVENT_CLOSE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','1522706899473351481','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','5','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'16C3AE06-DC8D-514C-A137-2BCD7B44E8B0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'16C3AE06-DC8D-514C-A137-2BCD7B44E8B0','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'16C3AE06-DC8D-514C-A137-2BCD7B44E8B0','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A1DF763C-668C-5898-9C71-49FBA1971356', 'sequence': {'long': 1214}, 'type': 'EVENT_MODIFY_PROCESS', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_fchdir'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A1DF763C-668C-5898-9C71-49FBA1971356','1214','EVENT_MODIFY_PROCESS','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','1522706899473351481','aue_fchdir','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A1DF763C-668C-5898-9C71-49FBA1971356','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A1DF763C-668C-5898-9C71-49FBA1971356','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A1DF763C-668C-5898-9C71-49FBA1971356','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'A1DF763C-668C-5898-9C71-49FBA1971356','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F3DB3771-67AA-52C3-A9ED-B6151D4841FB', 'sequence': {'long': 1215}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F3DB3771-67AA-52C3-A9ED-B6151D4841FB','1215','EVENT_CLOSE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','1522706899473351481','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F3DB3771-67AA-52C3-A9ED-B6151D4841FB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F3DB3771-67AA-52C3-A9ED-B6151D4841FB','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F3DB3771-67AA-52C3-A9ED-B6151D4841FB','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '15A1A3B6-C726-5881-99A7-ECF0932A970F', 'sequence': {'long': 1216}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'15A1A3B6-C726-5881-99A7-ECF0932A970F','1216','EVENT_WRITE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706899473351481','aue_write','80','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'15A1A3B6-C726-5881-99A7-ECF0932A970F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'15A1A3B6-C726-5881-99A7-ECF0932A970F','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'15A1A3B6-C726-5881-99A7-ECF0932A970F','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A0BFD01C-FB49-5926-8361-E4A8FF96EEC6', 'sequence': {'long': 1217}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A0BFD01C-FB49-5926-8361-E4A8FF96EEC6','1217','EVENT_WRITE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706899473351481','aue_write','83','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A0BFD01C-FB49-5926-8361-E4A8FF96EEC6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A0BFD01C-FB49-5926-8361-E4A8FF96EEC6','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A0BFD01C-FB49-5926-8361-E4A8FF96EEC6','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3C728928-573F-536E-92B9-89D91ED0A7AA', 'sequence': {'long': 1218}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899473351481, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 50}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3C728928-573F-536E-92B9-89D91ED0A7AA','1218','EVENT_WRITE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706899473351481','aue_write','50','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3C728928-573F-536E-92B9-89D91ED0A7AA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3C728928-573F-536E-92B9-89D91ED0A7AA','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3C728928-573F-536E-92B9-89D91ED0A7AA','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '59D497CE-338F-51EF-851B-8E0717C37BCB', 'sequence': {'long': 1219}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899483351052, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 61}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'59D497CE-338F-51EF-851B-8E0717C37BCB','1219','EVENT_WRITE','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706899483351052','aue_write','61','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'59D497CE-338F-51EF-851B-8E0717C37BCB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'59D497CE-338F-51EF-851B-8E0717C37BCB','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'59D497CE-338F-51EF-851B-8E0717C37BCB','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8E4F8B08-068C-5D0C-9E61-596291019C08', 'sequence': {'long': 1220}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100196}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '59E27464-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899483351052, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'ls', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8E4F8B08-068C-5D0C-9E61-596291019C08','1220','EVENT_EXIT','100196','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','1522706899483351052','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','ls','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8E4F8B08-068C-5D0C-9E61-596291019C08','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8E4F8B08-068C-5D0C-9E61-596291019C08','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8E4F8B08-068C-5D0C-9E61-596291019C08','59E27464-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3899B46D-1098-5CBC-A076-201280BC9492', 'sequence': {'long': 1221}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899483351052, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3899B46D-1098-5CBC-A076-201280BC9492','1221','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706899483351052','aue_write','2','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3899B46D-1098-5CBC-A076-201280BC9492','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3899B46D-1098-5CBC-A076-201280BC9492','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3899B46D-1098-5CBC-A076-201280BC9492','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '55F7FE72-2843-5E61-AC50-F73AB3826591', 'sequence': {'long': 1222}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5983569E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899813354604, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'55F7FE72-2843-5E61-AC50-F73AB3826591','1222','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5983569E-36C2-11E8-BF66-D9AA8AFF4A69','1522706899813354604','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'55F7FE72-2843-5E61-AC50-F73AB3826591','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'55F7FE72-2843-5E61-AC50-F73AB3826591','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'55F7FE72-2843-5E61-AC50-F73AB3826591','5983569E-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '91C2548C-4093-599B-98AC-0C55642B1878', 'sequence': {'long': 1223}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '598357B7-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899813354604, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'91C2548C-4093-599B-98AC-0C55642B1878','1223','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','598357B7-36C2-11E8-BF66-D9AA8AFF4A69','1522706899813354604','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'91C2548C-4093-599B-98AC-0C55642B1878','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'91C2548C-4093-599B-98AC-0C55642B1878','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'91C2548C-4093-599B-98AC-0C55642B1878','598357B7-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5A1C3307-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5A1C3307-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5A1C3307-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5A1C3307-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5A1C3255-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5A1C3255-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5A1C3255-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5A1C3255-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AB73EBD1-D555-5286-B95D-462B632E17FE', 'sequence': {'long': 1224}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5A1C3255-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5A1C3307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706899813354604, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AB73EBD1-D555-5286-B95D-462B632E17FE','1224','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5A1C3255-36C2-11E8-BF66-D9AA8AFF4A69','5A1C3307-36C2-11E8-BF66-D9AA8AFF4A69','1522706899813354604','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AB73EBD1-D555-5286-B95D-462B632E17FE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AB73EBD1-D555-5286-B95D-462B632E17FE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AB73EBD1-D555-5286-B95D-462B632E17FE','5A1C3255-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'AB73EBD1-D555-5286-B95D-462B632E17FE','5A1C3307-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '64A362F8-81D1-50A1-9AB1-3DA4CF1E6628', 'sequence': {'long': 1225}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899813354604, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'64A362F8-81D1-50A1-9AB1-3DA4CF1E6628','1225','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706899813354604','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'64A362F8-81D1-50A1-9AB1-3DA4CF1E6628','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'64A362F8-81D1-50A1-9AB1-3DA4CF1E6628','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BDD9D651-B220-5106-B469-EFF9911E9B17', 'sequence': {'long': 1226}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899813354604, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BDD9D651-B220-5106-B469-EFF9911E9B17','1226','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706899813354604','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BDD9D651-B220-5106-B469-EFF9911E9B17','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BDD9D651-B220-5106-B469-EFF9911E9B17','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2709E9CE-C456-5AE3-8375-1F01BC1664E5', 'sequence': {'long': 1227}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899813354604, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2709E9CE-C456-5AE3-8375-1F01BC1664E5','1227','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706899813354604','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2709E9CE-C456-5AE3-8375-1F01BC1664E5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2709E9CE-C456-5AE3-8375-1F01BC1664E5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8D06DEB1-06A8-5656-9D9E-4B910CFBF5AA', 'sequence': {'long': 1228}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706899813354604, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8D06DEB1-06A8-5656-9D9E-4B910CFBF5AA','1228','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706899813354604','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8D06DEB1-06A8-5656-9D9E-4B910CFBF5AA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8D06DEB1-06A8-5656-9D9E-4B910CFBF5AA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5EECB17A-1794-529F-B319-AC41FACB8B49', 'sequence': {'long': 1229}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900033349722, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5EECB17A-1794-529F-B319-AC41FACB8B49','1229','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706900033349722','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5EECB17A-1794-529F-B319-AC41FACB8B49','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5EECB17A-1794-529F-B319-AC41FACB8B49','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5EECB17A-1794-529F-B319-AC41FACB8B49','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '10D31046-1A84-5463-A093-F5A17603FF7C', 'sequence': {'long': 1230}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900033349722, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'10D31046-1A84-5463-A093-F5A17603FF7C','1230','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706900033349722','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'10D31046-1A84-5463-A093-F5A17603FF7C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'10D31046-1A84-5463-A093-F5A17603FF7C','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'10D31046-1A84-5463-A093-F5A17603FF7C','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0A648DD2-BE68-5954-BBA7-4904634FF63B', 'sequence': {'long': 1231}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900103352564, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0A648DD2-BE68-5954-BBA7-4904634FF63B','1231','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706900103352564','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0A648DD2-BE68-5954-BBA7-4904634FF63B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0A648DD2-BE68-5954-BBA7-4904634FF63B','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0A648DD2-BE68-5954-BBA7-4904634FF63B','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BFE20806-8E50-5389-92F6-AAF2FD578296', 'sequence': {'long': 1232}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900103352564, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BFE20806-8E50-5389-92F6-AAF2FD578296','1232','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706900103352564','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BFE20806-8E50-5389-92F6-AAF2FD578296','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BFE20806-8E50-5389-92F6-AAF2FD578296','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BFE20806-8E50-5389-92F6-AAF2FD578296','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F89561F1-45C3-5DC2-86F8-58DB6E289C3B', 'sequence': {'long': 1233}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900473350428, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F89561F1-45C3-5DC2-86F8-58DB6E289C3B','1233','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706900473350428','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F89561F1-45C3-5DC2-86F8-58DB6E289C3B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F89561F1-45C3-5DC2-86F8-58DB6E289C3B','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F89561F1-45C3-5DC2-86F8-58DB6E289C3B','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7E24762E-8451-5A01-9D33-62B8D54EB601', 'sequence': {'long': 1234}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900473350428, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7E24762E-8451-5A01-9D33-62B8D54EB601','1234','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706900473350428','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7E24762E-8451-5A01-9D33-62B8D54EB601','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7E24762E-8451-5A01-9D33-62B8D54EB601','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7E24762E-8451-5A01-9D33-62B8D54EB601','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7E0EB1EB-26BA-5F7E-8DE4-01F8FCA18AC9', 'sequence': {'long': 1235}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900613355302, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7E0EB1EB-26BA-5F7E-8DE4-01F8FCA18AC9','1235','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706900613355302','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7E0EB1EB-26BA-5F7E-8DE4-01F8FCA18AC9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7E0EB1EB-26BA-5F7E-8DE4-01F8FCA18AC9','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7E0EB1EB-26BA-5F7E-8DE4-01F8FCA18AC9','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0DA95DF3-35B0-5E70-8572-E5CD0E2E3CBC', 'sequence': {'long': 1236}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900613355302, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0DA95DF3-35B0-5E70-8572-E5CD0E2E3CBC','1236','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706900613355302','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0DA95DF3-35B0-5E70-8572-E5CD0E2E3CBC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0DA95DF3-35B0-5E70-8572-E5CD0E2E3CBC','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0DA95DF3-35B0-5E70-8572-E5CD0E2E3CBC','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D39E6A10-6CCB-5E06-84D3-9F392580F173', 'sequence': {'long': 1237}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900703361006, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D39E6A10-6CCB-5E06-84D3-9F392580F173','1237','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706900703361006','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D39E6A10-6CCB-5E06-84D3-9F392580F173','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D39E6A10-6CCB-5E06-84D3-9F392580F173','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D39E6A10-6CCB-5E06-84D3-9F392580F173','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F34AA9EA-6313-5E97-B45B-99868EE2CFDE', 'sequence': {'long': 1238}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900703361006, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F34AA9EA-6313-5E97-B45B-99868EE2CFDE','1238','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706900703361006','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F34AA9EA-6313-5E97-B45B-99868EE2CFDE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F34AA9EA-6313-5E97-B45B-99868EE2CFDE','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F34AA9EA-6313-5E97-B45B-99868EE2CFDE','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FE12C6BA-22CD-56BA-951C-5911368C0C15', 'sequence': {'long': 1239}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5A1C3255-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900803350799, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FE12C6BA-22CD-56BA-951C-5911368C0C15','1239','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5A1C3255-36C2-11E8-BF66-D9AA8AFF4A69','1522706900803350799','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FE12C6BA-22CD-56BA-951C-5911368C0C15','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FE12C6BA-22CD-56BA-951C-5911368C0C15','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FE12C6BA-22CD-56BA-951C-5911368C0C15','5A1C3255-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8F23F6EC-1FDA-5ADF-A821-64D8754E9FC7', 'sequence': {'long': 1240}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5A1C3307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900803350799, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8F23F6EC-1FDA-5ADF-A821-64D8754E9FC7','1240','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5A1C3307-36C2-11E8-BF66-D9AA8AFF4A69','1522706900803350799','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8F23F6EC-1FDA-5ADF-A821-64D8754E9FC7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8F23F6EC-1FDA-5ADF-A821-64D8754E9FC7','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8F23F6EC-1FDA-5ADF-A821-64D8754E9FC7','5A1C3307-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5AB3709A-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5AB3709A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5AB3709A-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5AB3709A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5AB36F97-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5AB36F97-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5AB36F97-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5AB36F97-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FB014374-A290-58E7-A80E-01F3E6146213', 'sequence': {'long': 1241}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5AB36F97-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5AB3709A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706900803350799, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FB014374-A290-58E7-A80E-01F3E6146213','1241','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5AB36F97-36C2-11E8-BF66-D9AA8AFF4A69','5AB3709A-36C2-11E8-BF66-D9AA8AFF4A69','1522706900803350799','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FB014374-A290-58E7-A80E-01F3E6146213','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FB014374-A290-58E7-A80E-01F3E6146213','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FB014374-A290-58E7-A80E-01F3E6146213','5AB36F97-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'FB014374-A290-58E7-A80E-01F3E6146213','5AB3709A-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8A6BFBBD-741E-507D-8A4F-743BE35977EA', 'sequence': {'long': 1242}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900803350799, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8A6BFBBD-741E-507D-8A4F-743BE35977EA','1242','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706900803350799','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8A6BFBBD-741E-507D-8A4F-743BE35977EA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8A6BFBBD-741E-507D-8A4F-743BE35977EA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2A712EF7-475B-5BF7-AABE-5401D19D9774', 'sequence': {'long': 1243}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900803350799, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2A712EF7-475B-5BF7-AABE-5401D19D9774','1243','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706900803350799','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2A712EF7-475B-5BF7-AABE-5401D19D9774','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2A712EF7-475B-5BF7-AABE-5401D19D9774','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BFB4CD01-DA11-5909-ABC9-8DD9A2709F82', 'sequence': {'long': 1244}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900803350799, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BFB4CD01-DA11-5909-ABC9-8DD9A2709F82','1244','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706900803350799','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BFB4CD01-DA11-5909-ABC9-8DD9A2709F82','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BFB4CD01-DA11-5909-ABC9-8DD9A2709F82','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DCD00445-3152-5280-98EC-D214C61AE9BE', 'sequence': {'long': 1245}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706900803350799, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DCD00445-3152-5280-98EC-D214C61AE9BE','1245','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706900803350799','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DCD00445-3152-5280-98EC-D214C61AE9BE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DCD00445-3152-5280-98EC-D214C61AE9BE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6C6FC24B-42C0-5459-9942-7A59CBDD4D30', 'sequence': {'long': 1246}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901253351856, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6C6FC24B-42C0-5459-9942-7A59CBDD4D30','1246','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706901253351856','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6C6FC24B-42C0-5459-9942-7A59CBDD4D30','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6C6FC24B-42C0-5459-9942-7A59CBDD4D30','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6C6FC24B-42C0-5459-9942-7A59CBDD4D30','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CCF149F3-AE08-5C99-82EB-5FA4889B332B', 'sequence': {'long': 1247}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901253351856, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CCF149F3-AE08-5C99-82EB-5FA4889B332B','1247','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706901253351856','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CCF149F3-AE08-5C99-82EB-5FA4889B332B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CCF149F3-AE08-5C99-82EB-5FA4889B332B','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CCF149F3-AE08-5C99-82EB-5FA4889B332B','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0E00C675-ADFF-58DF-8085-269020EBDCAE', 'sequence': {'long': 1248}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901323349798, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0E00C675-ADFF-58DF-8085-269020EBDCAE','1248','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706901323349798','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0E00C675-ADFF-58DF-8085-269020EBDCAE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0E00C675-ADFF-58DF-8085-269020EBDCAE','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0E00C675-ADFF-58DF-8085-269020EBDCAE','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '22FD1CD3-BDBD-525B-A683-35EAD2E4BB51', 'sequence': {'long': 1249}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901323349798, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'22FD1CD3-BDBD-525B-A683-35EAD2E4BB51','1249','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706901323349798','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'22FD1CD3-BDBD-525B-A683-35EAD2E4BB51','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'22FD1CD3-BDBD-525B-A683-35EAD2E4BB51','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'22FD1CD3-BDBD-525B-A683-35EAD2E4BB51','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2534F09C-F3F3-5208-A077-F6BFB71CEDD2', 'sequence': {'long': 1250}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901573351447, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2534F09C-F3F3-5208-A077-F6BFB71CEDD2','1250','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706901573351447','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2534F09C-F3F3-5208-A077-F6BFB71CEDD2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2534F09C-F3F3-5208-A077-F6BFB71CEDD2','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2534F09C-F3F3-5208-A077-F6BFB71CEDD2','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2AB1EDA7-ADF1-5E45-A781-2BDE9C04E68A', 'sequence': {'long': 1251}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': {'string': '/usr/home/darpa/ta1-integration-cadets/translator/./'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901573351447, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2AB1EDA7-ADF1-5E45-A781-2BDE9C04E68A','1251','EVENT_OPEN','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','/usr/home/darpa/ta1-integration-cadets/translator/./','1522706901573351447','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2AB1EDA7-ADF1-5E45-A781-2BDE9C04E68A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2AB1EDA7-ADF1-5E45-A781-2BDE9C04E68A','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2AB1EDA7-ADF1-5E45-A781-2BDE9C04E68A','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '51B93D52-F3D6-5A5C-BCE9-399BA3C03003', 'sequence': {'long': 1252}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901573351447, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'51B93D52-F3D6-5A5C-BCE9-399BA3C03003','1252','EVENT_CLOSE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','1522706901573351447','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'51B93D52-F3D6-5A5C-BCE9-399BA3C03003','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'51B93D52-F3D6-5A5C-BCE9-399BA3C03003','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'51B93D52-F3D6-5A5C-BCE9-399BA3C03003','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BBCF97E9-25CD-52DE-B19B-35C22B74050B', 'sequence': {'long': 1253}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901573351447, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 5}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BBCF97E9-25CD-52DE-B19B-35C22B74050B','1253','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706901573351447','aue_write','5','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BBCF97E9-25CD-52DE-B19B-35C22B74050B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BBCF97E9-25CD-52DE-B19B-35C22B74050B','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BBCF97E9-25CD-52DE-B19B-35C22B74050B','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C1BC40DE-8BD6-5D4A-8BFF-E5618C79B022', 'sequence': {'long': 1254}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5AB36F97-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901803350256, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C1BC40DE-8BD6-5D4A-8BFF-E5618C79B022','1254','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5AB36F97-36C2-11E8-BF66-D9AA8AFF4A69','1522706901803350256','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C1BC40DE-8BD6-5D4A-8BFF-E5618C79B022','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C1BC40DE-8BD6-5D4A-8BFF-E5618C79B022','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C1BC40DE-8BD6-5D4A-8BFF-E5618C79B022','5AB36F97-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AC16CD81-9320-5E2D-B175-D203E7A08789', 'sequence': {'long': 1255}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5AB3709A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901803350256, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AC16CD81-9320-5E2D-B175-D203E7A08789','1255','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5AB3709A-36C2-11E8-BF66-D9AA8AFF4A69','1522706901803350256','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AC16CD81-9320-5E2D-B175-D203E7A08789','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AC16CD81-9320-5E2D-B175-D203E7A08789','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AC16CD81-9320-5E2D-B175-D203E7A08789','5AB3709A-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5B4BD778-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5B4BD778-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5B4BD778-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5B4BD778-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5B4BD6CE-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5B4BD6CE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5B4BD6CE-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5B4BD6CE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '76FBC350-D806-58D8-A933-0EB0444889C0', 'sequence': {'long': 1256}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5B4BD6CE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5B4BD778-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706901803350256, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'76FBC350-D806-58D8-A933-0EB0444889C0','1256','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5B4BD6CE-36C2-11E8-BF66-D9AA8AFF4A69','5B4BD778-36C2-11E8-BF66-D9AA8AFF4A69','1522706901803350256','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'76FBC350-D806-58D8-A933-0EB0444889C0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'76FBC350-D806-58D8-A933-0EB0444889C0','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'76FBC350-D806-58D8-A933-0EB0444889C0','5B4BD6CE-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'76FBC350-D806-58D8-A933-0EB0444889C0','5B4BD778-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A2950986-4053-5D24-A0B7-7EB8BD9FD53F', 'sequence': {'long': 1257}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901803350256, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A2950986-4053-5D24-A0B7-7EB8BD9FD53F','1257','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706901803350256','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A2950986-4053-5D24-A0B7-7EB8BD9FD53F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A2950986-4053-5D24-A0B7-7EB8BD9FD53F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4F5CC9E9-149E-566A-AA38-1C792922067C', 'sequence': {'long': 1258}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901803350256, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4F5CC9E9-149E-566A-AA38-1C792922067C','1258','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706901803350256','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4F5CC9E9-149E-566A-AA38-1C792922067C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4F5CC9E9-149E-566A-AA38-1C792922067C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '320F0EFD-9BDA-5F55-9485-A942060998E8', 'sequence': {'long': 1259}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901803350256, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'320F0EFD-9BDA-5F55-9485-A942060998E8','1259','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706901803350256','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'320F0EFD-9BDA-5F55-9485-A942060998E8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'320F0EFD-9BDA-5F55-9485-A942060998E8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '82C8B82E-ABA6-53A8-8172-6571E2EEA0E0', 'sequence': {'long': 1260}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706901803350256, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'82C8B82E-ABA6-53A8-8172-6571E2EEA0E0','1260','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706901803350256','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'82C8B82E-ABA6-53A8-8172-6571E2EEA0E0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'82C8B82E-ABA6-53A8-8172-6571E2EEA0E0','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1E66903B-A799-556D-959A-F7616AC47AB1', 'sequence': {'long': 1261}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706902583352904, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1E66903B-A799-556D-959A-F7616AC47AB1','1261','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706902583352904','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1E66903B-A799-556D-959A-F7616AC47AB1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1E66903B-A799-556D-959A-F7616AC47AB1','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1E66903B-A799-556D-959A-F7616AC47AB1','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '28B5879A-6B54-5928-9B3B-B3ADA4D696D0', 'sequence': {'long': 1262}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706902583352904, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'28B5879A-6B54-5928-9B3B-B3ADA4D696D0','1262','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706902583352904','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'28B5879A-6B54-5928-9B3B-B3ADA4D696D0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'28B5879A-6B54-5928-9B3B-B3ADA4D696D0','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'28B5879A-6B54-5928-9B3B-B3ADA4D696D0','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '956C3E0F-AC9B-5206-88D5-994587884DDB', 'sequence': {'long': 1263}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5B4BD6CE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706902813350542, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'956C3E0F-AC9B-5206-88D5-994587884DDB','1263','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5B4BD6CE-36C2-11E8-BF66-D9AA8AFF4A69','1522706902813350542','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'956C3E0F-AC9B-5206-88D5-994587884DDB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'956C3E0F-AC9B-5206-88D5-994587884DDB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'956C3E0F-AC9B-5206-88D5-994587884DDB','5B4BD6CE-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EE9CBBE8-498E-599E-8B54-67E0C9B8D58E', 'sequence': {'long': 1264}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5B4BD778-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706902813350542, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EE9CBBE8-498E-599E-8B54-67E0C9B8D58E','1264','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5B4BD778-36C2-11E8-BF66-D9AA8AFF4A69','1522706902813350542','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EE9CBBE8-498E-599E-8B54-67E0C9B8D58E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EE9CBBE8-498E-599E-8B54-67E0C9B8D58E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EE9CBBE8-498E-599E-8B54-67E0C9B8D58E','5B4BD778-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5BE60BA4-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5BE60BA4-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5BE60BA4-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5BE60BA4-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5BE60A9B-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5BE60A9B-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5BE60A9B-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5BE60A9B-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C6564EC4-35E6-54CC-8E3C-7C462D2615DC', 'sequence': {'long': 1265}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5BE60A9B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5BE60BA4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706902813350542, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C6564EC4-35E6-54CC-8E3C-7C462D2615DC','1265','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5BE60A9B-36C2-11E8-BF66-D9AA8AFF4A69','5BE60BA4-36C2-11E8-BF66-D9AA8AFF4A69','1522706902813350542','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C6564EC4-35E6-54CC-8E3C-7C462D2615DC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C6564EC4-35E6-54CC-8E3C-7C462D2615DC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C6564EC4-35E6-54CC-8E3C-7C462D2615DC','5BE60A9B-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'C6564EC4-35E6-54CC-8E3C-7C462D2615DC','5BE60BA4-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '48AF752F-75AE-597C-9763-589403F5769F', 'sequence': {'long': 1266}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706902813350542, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'48AF752F-75AE-597C-9763-589403F5769F','1266','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706902813350542','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'48AF752F-75AE-597C-9763-589403F5769F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'48AF752F-75AE-597C-9763-589403F5769F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '48AE662B-6852-5234-AB5A-B1F44DE4731B', 'sequence': {'long': 1267}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706902813350542, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'48AE662B-6852-5234-AB5A-B1F44DE4731B','1267','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706902813350542','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'48AE662B-6852-5234-AB5A-B1F44DE4731B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'48AE662B-6852-5234-AB5A-B1F44DE4731B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2E3F0466-0C62-5C48-8023-3F25E55CAE50', 'sequence': {'long': 1268}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706902813350542, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2E3F0466-0C62-5C48-8023-3F25E55CAE50','1268','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706902813350542','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2E3F0466-0C62-5C48-8023-3F25E55CAE50','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2E3F0466-0C62-5C48-8023-3F25E55CAE50','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5DA6FD37-0F22-55D4-8FF4-6A778CD9B61A', 'sequence': {'long': 1269}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706902813350542, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5DA6FD37-0F22-55D4-8FF4-6A778CD9B61A','1269','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706902813350542','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5DA6FD37-0F22-55D4-8FF4-6A778CD9B61A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5DA6FD37-0F22-55D4-8FF4-6A778CD9B61A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '845C686B-945F-5314-A07A-04ED519E799D', 'sequence': {'long': 1270}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903183351105, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'845C686B-945F-5314-A07A-04ED519E799D','1270','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706903183351105','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'845C686B-945F-5314-A07A-04ED519E799D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'845C686B-945F-5314-A07A-04ED519E799D','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'845C686B-945F-5314-A07A-04ED519E799D','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B21D459B-E497-53D9-87A0-66FCEECF5BED', 'sequence': {'long': 1271}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903183351105, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B21D459B-E497-53D9-87A0-66FCEECF5BED','1271','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706903183351105','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B21D459B-E497-53D9-87A0-66FCEECF5BED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B21D459B-E497-53D9-87A0-66FCEECF5BED','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B21D459B-E497-53D9-87A0-66FCEECF5BED','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '274164F7-8EA9-5188-9FAD-D829795F62F3', 'sequence': {'long': 1272}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903263350618, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'274164F7-8EA9-5188-9FAD-D829795F62F3','1272','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706903263350618','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'274164F7-8EA9-5188-9FAD-D829795F62F3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'274164F7-8EA9-5188-9FAD-D829795F62F3','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'274164F7-8EA9-5188-9FAD-D829795F62F3','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3D43A01B-52A4-560D-8054-60EB4BAF45A2', 'sequence': {'long': 1273}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': {'string': '/usr/home/darpa/ta1-integration-cadets/translator/./'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903263350618, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3D43A01B-52A4-560D-8054-60EB4BAF45A2','1273','EVENT_OPEN','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','/usr/home/darpa/ta1-integration-cadets/translator/./','1522706903263350618','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3D43A01B-52A4-560D-8054-60EB4BAF45A2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3D43A01B-52A4-560D-8054-60EB4BAF45A2','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3D43A01B-52A4-560D-8054-60EB4BAF45A2','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7838FBBC-9997-581A-9874-BF12AE90F535', 'sequence': {'long': 1274}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903263350618, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7838FBBC-9997-581A-9874-BF12AE90F535','1274','EVENT_CLOSE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','1522706903263350618','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7838FBBC-9997-581A-9874-BF12AE90F535','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7838FBBC-9997-581A-9874-BF12AE90F535','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7838FBBC-9997-581A-9874-BF12AE90F535','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '241BB73A-40D3-5BAC-AE8A-94D0C48D0F44', 'sequence': {'long': 1275}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903613353851, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'241BB73A-40D3-5BAC-AE8A-94D0C48D0F44','1275','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706903613353851','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'241BB73A-40D3-5BAC-AE8A-94D0C48D0F44','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'241BB73A-40D3-5BAC-AE8A-94D0C48D0F44','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'241BB73A-40D3-5BAC-AE8A-94D0C48D0F44','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7C971411-FAFE-5158-99E7-7724457EB508', 'sequence': {'long': 1276}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903613353851, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7C971411-FAFE-5158-99E7-7724457EB508','1276','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706903613353851','aue_write','4','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7C971411-FAFE-5158-99E7-7724457EB508','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7C971411-FAFE-5158-99E7-7724457EB508','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7C971411-FAFE-5158-99E7-7724457EB508','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AFFA67F2-7EF3-5A03-A937-6BBAE6D126D9', 'sequence': {'long': 1277}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903783350307, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AFFA67F2-7EF3-5A03-A937-6BBAE6D126D9','1277','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706903783350307','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AFFA67F2-7EF3-5A03-A937-6BBAE6D126D9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AFFA67F2-7EF3-5A03-A937-6BBAE6D126D9','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AFFA67F2-7EF3-5A03-A937-6BBAE6D126D9','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '054B1E8B-E87A-5275-A785-AEAA14173A30', 'sequence': {'long': 1278}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903783350307, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'054B1E8B-E87A-5275-A785-AEAA14173A30','1278','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706903783350307','aue_write','4','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'054B1E8B-E87A-5275-A785-AEAA14173A30','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'054B1E8B-E87A-5275-A785-AEAA14173A30','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'054B1E8B-E87A-5275-A785-AEAA14173A30','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FA7A6DA7-DA1B-55B7-A6E8-EDCC8B40273C', 'sequence': {'long': 1279}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5BE60A9B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903803350598, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FA7A6DA7-DA1B-55B7-A6E8-EDCC8B40273C','1279','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5BE60A9B-36C2-11E8-BF66-D9AA8AFF4A69','1522706903803350598','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FA7A6DA7-DA1B-55B7-A6E8-EDCC8B40273C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FA7A6DA7-DA1B-55B7-A6E8-EDCC8B40273C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FA7A6DA7-DA1B-55B7-A6E8-EDCC8B40273C','5BE60A9B-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '130BA2FF-FDFD-54A7-879B-04FFF35D5E41', 'sequence': {'long': 1280}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5BE60BA4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903803350598, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'130BA2FF-FDFD-54A7-879B-04FFF35D5E41','1280','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5BE60BA4-36C2-11E8-BF66-D9AA8AFF4A69','1522706903803350598','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'130BA2FF-FDFD-54A7-879B-04FFF35D5E41','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'130BA2FF-FDFD-54A7-879B-04FFF35D5E41','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'130BA2FF-FDFD-54A7-879B-04FFF35D5E41','5BE60BA4-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5C7DA1D7-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5C7DA1D7-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5C7DA1D7-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5C7DA1D7-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5C7DA0D2-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5C7DA0D2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5C7DA0D2-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5C7DA0D2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C4F23964-EA73-5B4D-9062-03008F0A7521', 'sequence': {'long': 1281}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5C7DA0D2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5C7DA1D7-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706903803350598, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C4F23964-EA73-5B4D-9062-03008F0A7521','1281','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5C7DA0D2-36C2-11E8-BF66-D9AA8AFF4A69','5C7DA1D7-36C2-11E8-BF66-D9AA8AFF4A69','1522706903803350598','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C4F23964-EA73-5B4D-9062-03008F0A7521','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C4F23964-EA73-5B4D-9062-03008F0A7521','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C4F23964-EA73-5B4D-9062-03008F0A7521','5C7DA0D2-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'C4F23964-EA73-5B4D-9062-03008F0A7521','5C7DA1D7-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3F461983-9E90-5AB2-8659-F49CCD07A3CB', 'sequence': {'long': 1282}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903803350598, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3F461983-9E90-5AB2-8659-F49CCD07A3CB','1282','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706903803350598','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3F461983-9E90-5AB2-8659-F49CCD07A3CB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3F461983-9E90-5AB2-8659-F49CCD07A3CB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '488AD6AE-BBA6-5CF3-B5C1-0F868AD0AA64', 'sequence': {'long': 1283}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903803350598, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'488AD6AE-BBA6-5CF3-B5C1-0F868AD0AA64','1283','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706903803350598','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'488AD6AE-BBA6-5CF3-B5C1-0F868AD0AA64','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'488AD6AE-BBA6-5CF3-B5C1-0F868AD0AA64','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A35E815A-0A8D-5CE9-AA65-8F15AEA0DE6F', 'sequence': {'long': 1284}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903803350598, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A35E815A-0A8D-5CE9-AA65-8F15AEA0DE6F','1284','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706903803350598','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A35E815A-0A8D-5CE9-AA65-8F15AEA0DE6F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A35E815A-0A8D-5CE9-AA65-8F15AEA0DE6F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '681F7F3E-83B7-5091-A7CF-86BCEC777DDF', 'sequence': {'long': 1285}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903803350598, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'681F7F3E-83B7-5091-A7CF-86BCEC777DDF','1285','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706903803350598','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'681F7F3E-83B7-5091-A7CF-86BCEC777DDF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'681F7F3E-83B7-5091-A7CF-86BCEC777DDF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.NetFlowObject': {'uuid': '71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'localAddress': '10.0.6.23', 'localPort': 123, 'remoteAddress': '10.0.4.1', 'remotePort': 123, 'ipProtocol': None, 'fileDescriptor': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO netflowobject (line, uuid,baseObject_hostId,localAddress,localPort,remoteAddress,remotePort) VALUES (nextval('line_number_seq'),'71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','10.0.6.23','123','10.0.4.1','123');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69','NetFlowObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '718516D0-3678-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 755, 'parentSubject': None, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '7DCA248E-1BBA-59F5-9227-B25D5F253594', 'startTimestampNanos': 0, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'718516D0-3678-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','755','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','7DCA248E-1BBA-59F5-9227-B25D5F253594','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'718516D0-3678-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'718516D0-3678-11E8-BF66-D9AA8AFF4A69','7DCA248E-1BBA-59F5-9227-B25D5F253594','hasLocalPrincipal'),(nextval('edge_number_seq'),'718516D0-3678-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '42DBF82E-B32B-5624-A4D4-F401232D163D', 'sequence': {'long': 1286}, 'type': 'EVENT_SENDTO', 'threadId': {'int': 100131}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718516D0-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903903351631, 'name': {'string': 'aue_sendto'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 48}, 'programPoint': None, 'properties': {'map': {'address': '10.0.4.1', 'port': '123', 'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_msgid': '180143985094820055', 'fd': '23', 'exec': 'ntpd', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_address,properties_map_port,properties_map_host,properties_map_ret_msgid,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'42DBF82E-B32B-5624-A4D4-F401232D163D','1286','EVENT_SENDTO','100131','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','718516D0-3678-11E8-BF66-D9AA8AFF4A69','71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69','1522706903903351631','aue_sendto','48','10.0.4.1','123','83c8ed1f-5045-dbcd-b39f-918f0df4f851','180143985094820055','23','ntpd','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'42DBF82E-B32B-5624-A4D4-F401232D163D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'42DBF82E-B32B-5624-A4D4-F401232D163D','718516D0-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'42DBF82E-B32B-5624-A4D4-F401232D163D','71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.NetFlowObject': {'uuid': '25251C47-2F6D-529A-99DD-164B02137950', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'localAddress': '10.0.6.23', 'localPort': 123, 'remoteAddress': '10.0.4.1', 'remotePort': 123, 'ipProtocol': None, 'fileDescriptor': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO netflowobject (line, uuid,baseObject_hostId,localAddress,localPort,remoteAddress,remotePort) VALUES (nextval('line_number_seq'),'25251C47-2F6D-529A-99DD-164B02137950','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','10.0.6.23','123','10.0.4.1','123');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'25251C47-2F6D-529A-99DD-164B02137950','NetFlowObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'25251C47-2F6D-529A-99DD-164B02137950','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AEF240B6-7BC6-5704-8375-694FEAD9570F', 'sequence': {'long': 1287}, 'type': 'EVENT_ADD_OBJECT_ATTRIBUTE', 'threadId': {'int': 100064}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': None, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '25251C47-2F6D-529A-99DD-164B02137950'}, 'predicateObject2Path': None, 'timestampNanos': 1522706903903351631, 'name': None, 'parameters': None, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,predicateObject_UUID,predicateObject2_UUID,timestampNanos) VALUES (nextval('line_number_seq'),'AEF240B6-7BC6-5704-8375-694FEAD9570F','1287','EVENT_ADD_OBJECT_ATTRIBUTE','100064','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69','25251C47-2F6D-529A-99DD-164B02137950','1522706903903351631');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AEF240B6-7BC6-5704-8375-694FEAD9570F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AEF240B6-7BC6-5704-8375-694FEAD9570F','71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'AEF240B6-7BC6-5704-8375-694FEAD9570F','25251C47-2F6D-529A-99DD-164B02137950','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '41776715-343C-5DF1-AF2E-E007249997BB', 'sequence': {'long': 1288}, 'type': 'EVENT_RECVMSG', 'threadId': {'int': 100131}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718516D0-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903903351631, 'name': {'string': 'aue_recvmsg'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 48}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'address': '10.0.4.1', 'port': '123', 'fd': '23', 'exec': 'ntpd', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_address,properties_map_port,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'41776715-343C-5DF1-AF2E-E007249997BB','1288','EVENT_RECVMSG','100131','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','718516D0-3678-11E8-BF66-D9AA8AFF4A69','71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69','1522706903903351631','aue_recvmsg','48','83c8ed1f-5045-dbcd-b39f-918f0df4f851','10.0.4.1','123','23','ntpd','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'41776715-343C-5DF1-AF2E-E007249997BB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'41776715-343C-5DF1-AF2E-E007249997BB','718516D0-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'41776715-343C-5DF1-AF2E-E007249997BB','71A3EC7D-3678-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A14A0F99-ED8E-59D1-86D7-D9B18D08698E', 'sequence': {'long': 1289}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903913351592, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A14A0F99-ED8E-59D1-86D7-D9B18D08698E','1289','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706903913351592','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A14A0F99-ED8E-59D1-86D7-D9B18D08698E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A14A0F99-ED8E-59D1-86D7-D9B18D08698E','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A14A0F99-ED8E-59D1-86D7-D9B18D08698E','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '758A3C66-0DD9-53BA-B4E9-19AF5DBF79C8', 'sequence': {'long': 1290}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706903913351592, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'758A3C66-0DD9-53BA-B4E9-19AF5DBF79C8','1290','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706903913351592','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'758A3C66-0DD9-53BA-B4E9-19AF5DBF79C8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'758A3C66-0DD9-53BA-B4E9-19AF5DBF79C8','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'758A3C66-0DD9-53BA-B4E9-19AF5DBF79C8','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BDB693D7-22B6-51DB-9CA3-0E008C67F823', 'sequence': {'long': 1291}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904003349935, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BDB693D7-22B6-51DB-9CA3-0E008C67F823','1291','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706904003349935','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BDB693D7-22B6-51DB-9CA3-0E008C67F823','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BDB693D7-22B6-51DB-9CA3-0E008C67F823','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BDB693D7-22B6-51DB-9CA3-0E008C67F823','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F29833B7-F0D4-5B2D-8DCA-593DC49007BF', 'sequence': {'long': 1292}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': {'string': '/usr/home/darpa/ta1-integration-cadets/translator/./'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904003349935, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F29833B7-F0D4-5B2D-8DCA-593DC49007BF','1292','EVENT_OPEN','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','/usr/home/darpa/ta1-integration-cadets/translator/./','1522706904003349935','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F29833B7-F0D4-5B2D-8DCA-593DC49007BF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F29833B7-F0D4-5B2D-8DCA-593DC49007BF','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F29833B7-F0D4-5B2D-8DCA-593DC49007BF','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8C28944C-CDF2-5600-8F73-E76FCEE8C21B', 'sequence': {'long': 1293}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '3A627CD6-EA6F-9551-AFEA-34F521950B0B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904003349935, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8C28944C-CDF2-5600-8F73-E76FCEE8C21B','1293','EVENT_CLOSE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','3A627CD6-EA6F-9551-AFEA-34F521950B0B','1522706904003349935','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8C28944C-CDF2-5600-8F73-E76FCEE8C21B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8C28944C-CDF2-5600-8F73-E76FCEE8C21B','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8C28944C-CDF2-5600-8F73-E76FCEE8C21B','3A627CD6-EA6F-9551-AFEA-34F521950B0B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6BAFAF4E-0BBE-5E7A-B194-2D7B4A63F099', 'sequence': {'long': 1294}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904003349935, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6BAFAF4E-0BBE-5E7A-B194-2D7B4A63F099','1294','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706904003349935','aue_write','2','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6BAFAF4E-0BBE-5E7A-B194-2D7B4A63F099','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6BAFAF4E-0BBE-5E7A-B194-2D7B4A63F099','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6BAFAF4E-0BBE-5E7A-B194-2D7B4A63F099','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6AB87C5C-3555-5DBB-8038-BB2656124DCF', 'sequence': {'long': 1295}, 'type': 'EVENT_READ', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '0', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6AB87C5C-3555-5DBB-8038-BB2656124DCF','1295','EVENT_READ','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706904563350625','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','0','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6AB87C5C-3555-5DBB-8038-BB2656124DCF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6AB87C5C-3555-5DBB-8038-BB2656124DCF','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6AB87C5C-3555-5DBB-8038-BB2656124DCF','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '23B37233-09F8-5DB3-92AE-D700312FC703', 'sequence': {'long': 1296}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'23B37233-09F8-5DB3-92AE-D700312FC703','1296','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706904563350625','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'23B37233-09F8-5DB3-92AE-D700312FC703','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'23B37233-09F8-5DB3-92AE-D700312FC703','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'23B37233-09F8-5DB3-92AE-D700312FC703','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2812, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706904563350625, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2812','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706904563350625','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '02F68E3C-87A8-589E-AAAE-7227ACA1A9D0', 'sequence': {'long': 1297}, 'type': 'EVENT_FORK', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2812', 'exec': 'sh', 'arg_pid': '2812', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'02F68E3C-87A8-589E-AAAE-7227ACA1A9D0','1297','EVENT_FORK','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','1522706904563350625','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2812','sh','2812','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'02F68E3C-87A8-589E-AAAE-7227ACA1A9D0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'02F68E3C-87A8-589E-AAAE-7227ACA1A9D0','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'02F68E3C-87A8-589E-AAAE-7227ACA1A9D0','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B157B124-F26F-54E0-8663-5FD9CE74CBFC', 'sequence': {'long': 1298}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '8DD7360A-9046-5A55-8690-D3BFE55A3BF2'}, 'predicateObjectPath': {'string': '/usr/bin/less'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'less kafka.sh', 'return_value': '-1', 'exec': 'sh', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B157B124-F26F-54E0-8663-5FD9CE74CBFC','1298','EVENT_EXECUTE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','8DD7360A-9046-5A55-8690-D3BFE55A3BF2','/usr/bin/less','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706904563350625','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','less kafka.sh','-1','sh','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B157B124-F26F-54E0-8663-5FD9CE74CBFC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B157B124-F26F-54E0-8663-5FD9CE74CBFC','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B157B124-F26F-54E0-8663-5FD9CE74CBFC','8DD7360A-9046-5A55-8690-D3BFE55A3BF2','affects'),(nextval('edge_number_seq'),'B157B124-F26F-54E0-8663-5FD9CE74CBFC','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B445B875-7490-540B-8F92-E61E88000C72', 'sequence': {'long': 1299}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B445B875-7490-540B-8F92-E61E88000C72','1299','EVENT_OPEN','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706904563350625','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B445B875-7490-540B-8F92-E61E88000C72','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B445B875-7490-540B-8F92-E61E88000C72','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B445B875-7490-540B-8F92-E61E88000C72','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '299AE24F-096E-5632-8123-4271EC2DB134', 'sequence': {'long': 1300}, 'type': 'EVENT_READ', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'299AE24F-096E-5632-8123-4271EC2DB134','1300','EVENT_READ','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706904563350625','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'299AE24F-096E-5632-8123-4271EC2DB134','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'299AE24F-096E-5632-8123-4271EC2DB134','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'299AE24F-096E-5632-8123-4271EC2DB134','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B482C731-4872-518F-8011-4E70B7B8FB43', 'sequence': {'long': 1301}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B482C731-4872-518F-8011-4E70B7B8FB43','1301','EVENT_CLOSE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706904563350625','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B482C731-4872-518F-8011-4E70B7B8FB43','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B482C731-4872-518F-8011-4E70B7B8FB43','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B482C731-4872-518F-8011-4E70B7B8FB43','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7DC1DA43-BFF4-5403-9669-8D86A1BBFE7B', 'sequence': {'long': 1302}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7DC1DA43-BFF4-5403-9669-8D86A1BBFE7B','1302','EVENT_OPEN','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706904563350625','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7DC1DA43-BFF4-5403-9669-8D86A1BBFE7B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7DC1DA43-BFF4-5403-9669-8D86A1BBFE7B','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7DC1DA43-BFF4-5403-9669-8D86A1BBFE7B','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '515271E1-3F46-5F4C-83AF-66C6A0E5AA47', 'sequence': {'long': 1303}, 'type': 'EVENT_READ', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'515271E1-3F46-5F4C-83AF-66C6A0E5AA47','1303','EVENT_READ','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706904563350625','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'515271E1-3F46-5F4C-83AF-66C6A0E5AA47','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'515271E1-3F46-5F4C-83AF-66C6A0E5AA47','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'515271E1-3F46-5F4C-83AF-66C6A0E5AA47','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0E11FC49-6896-5D4D-921D-397A6B84D406', 'sequence': {'long': 1304}, 'type': 'EVENT_READ', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0E11FC49-6896-5D4D-921D-397A6B84D406','1304','EVENT_READ','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706904563350625','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0E11FC49-6896-5D4D-921D-397A6B84D406','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0E11FC49-6896-5D4D-921D-397A6B84D406','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0E11FC49-6896-5D4D-921D-397A6B84D406','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '95103D89-4F86-5C27-B086-4E08AC791061', 'sequence': {'long': 1305}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'95103D89-4F86-5C27-B086-4E08AC791061','1305','EVENT_CLOSE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706904563350625','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'95103D89-4F86-5C27-B086-4E08AC791061','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'95103D89-4F86-5C27-B086-4E08AC791061','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'95103D89-4F86-5C27-B086-4E08AC791061','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '77EE6328-4884-5802-BBAE-9D02BE7C6207', 'sequence': {'long': 1306}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': {'string': '/lib/libncursesw.so.8'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904563350625, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'77EE6328-4884-5802-BBAE-9D02BE7C6207','1306','EVENT_OPEN','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','/lib/libncursesw.so.8','1522706904563350625','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'77EE6328-4884-5802-BBAE-9D02BE7C6207','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'77EE6328-4884-5802-BBAE-9D02BE7C6207','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'77EE6328-4884-5802-BBAE-9D02BE7C6207','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '88B48B47-D677-5A39-8827-937E445F6438', 'sequence': {'long': 1307}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'88B48B47-D677-5A39-8827-937E445F6438','1307','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706904573353856','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'88B48B47-D677-5A39-8827-937E445F6438','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'88B48B47-D677-5A39-8827-937E445F6438','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'88B48B47-D677-5A39-8827-937E445F6438','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E0973779-0215-5E1E-B323-2B3984AAE8E5', 'sequence': {'long': 1308}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E0973779-0215-5E1E-B323-2B3984AAE8E5','1308','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706904573353856','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E0973779-0215-5E1E-B323-2B3984AAE8E5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E0973779-0215-5E1E-B323-2B3984AAE8E5','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E0973779-0215-5E1E-B323-2B3984AAE8E5','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '20E8D1F3-3C34-59E1-AB9D-C0737C37E070', 'sequence': {'long': 1309}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8704000}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'20E8D1F3-3C34-59E1-AB9D-C0737C37E070','1309','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706904573353856','aue_mmap','8704000','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'20E8D1F3-3C34-59E1-AB9D-C0737C37E070','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'20E8D1F3-3C34-59E1-AB9D-C0737C37E070','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'20E8D1F3-3C34-59E1-AB9D-C0737C37E070','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4C0B2B23-0320-50DF-B53C-695EE9296514', 'sequence': {'long': 1310}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8704000}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'4C0B2B23-0320-50DF-B53C-695EE9296514','1310','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706904573353856','aue_mmap','8704000','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4C0B2B23-0320-50DF-B53C-695EE9296514','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4C0B2B23-0320-50DF-B53C-695EE9296514','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4C0B2B23-0320-50DF-B53C-695EE9296514','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D810018B-2C64-5351-97E7-0421AC687D28', 'sequence': {'long': 1311}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11161600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D810018B-2C64-5351-97E7-0421AC687D28','1311','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706904573353856','aue_mmap','11161600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D810018B-2C64-5351-97E7-0421AC687D28','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D810018B-2C64-5351-97E7-0421AC687D28','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D810018B-2C64-5351-97E7-0421AC687D28','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CAFA9D90-96D3-5373-AC39-A94561ED980F', 'sequence': {'long': 1312}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11161600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'CAFA9D90-96D3-5373-AC39-A94561ED980F','1312','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706904573353856','aue_mmap','11161600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','less','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CAFA9D90-96D3-5373-AC39-A94561ED980F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CAFA9D90-96D3-5373-AC39-A94561ED980F','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CAFA9D90-96D3-5373-AC39-A94561ED980F','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '39426523-2804-5B22-BB22-A03B4F04D638', 'sequence': {'long': 1313}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'39426523-2804-5B22-BB22-A03B4F04D638','1313','EVENT_CLOSE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706904573353856','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'39426523-2804-5B22-BB22-A03B4F04D638','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'39426523-2804-5B22-BB22-A03B4F04D638','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'39426523-2804-5B22-BB22-A03B4F04D638','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C5DC3042-08DE-5045-AC59-5B059035BCAD', 'sequence': {'long': 1314}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C5DC3042-08DE-5045-AC59-5B059035BCAD','1314','EVENT_OPEN','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706904573353856','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C5DC3042-08DE-5045-AC59-5B059035BCAD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C5DC3042-08DE-5045-AC59-5B059035BCAD','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C5DC3042-08DE-5045-AC59-5B059035BCAD','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A80B0F72-32D6-5C2D-8C9A-AB5CFD5ED534', 'sequence': {'long': 1315}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A80B0F72-32D6-5C2D-8C9A-AB5CFD5ED534','1315','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706904573353856','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A80B0F72-32D6-5C2D-8C9A-AB5CFD5ED534','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A80B0F72-32D6-5C2D-8C9A-AB5CFD5ED534','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A80B0F72-32D6-5C2D-8C9A-AB5CFD5ED534','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '869D7AF7-FC74-527E-B620-C9F7BF5C0F86', 'sequence': {'long': 1316}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'869D7AF7-FC74-527E-B620-C9F7BF5C0F86','1316','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706904573353856','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'869D7AF7-FC74-527E-B620-C9F7BF5C0F86','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'869D7AF7-FC74-527E-B620-C9F7BF5C0F86','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'869D7AF7-FC74-527E-B620-C9F7BF5C0F86','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '64C099E1-61C5-503D-9D97-E973B1E32150', 'sequence': {'long': 1317}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11186176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'64C099E1-61C5-503D-9D97-E973B1E32150','1317','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706904573353856','aue_mmap','11186176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'64C099E1-61C5-503D-9D97-E973B1E32150','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'64C099E1-61C5-503D-9D97-E973B1E32150','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'64C099E1-61C5-503D-9D97-E973B1E32150','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2FB6240E-1532-57E2-B41A-22504D17A448', 'sequence': {'long': 1318}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11186176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2FB6240E-1532-57E2-B41A-22504D17A448','1318','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706904573353856','aue_mmap','11186176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'', ''PROT_EXEC'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2FB6240E-1532-57E2-B41A-22504D17A448','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2FB6240E-1532-57E2-B41A-22504D17A448','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2FB6240E-1532-57E2-B41A-22504D17A448','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '35FA7C48-531F-5CEE-8E9D-2D1CB5B146BC', 'sequence': {'long': 1319}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15073280}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'35FA7C48-531F-5CEE-8E9D-2D1CB5B146BC','1319','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706904573353856','aue_mmap','15073280','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'35FA7C48-531F-5CEE-8E9D-2D1CB5B146BC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'35FA7C48-531F-5CEE-8E9D-2D1CB5B146BC','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'35FA7C48-531F-5CEE-8E9D-2D1CB5B146BC','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BD7FEB0C-25BB-50A4-A2E3-B4BABBE9E007', 'sequence': {'long': 1320}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15073280}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'BD7FEB0C-25BB-50A4-A2E3-B4BABBE9E007','1320','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706904573353856','aue_mmap','15073280','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','less','[''PROT_READ'', ''PROT_WRITE'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BD7FEB0C-25BB-50A4-A2E3-B4BABBE9E007','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BD7FEB0C-25BB-50A4-A2E3-B4BABBE9E007','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BD7FEB0C-25BB-50A4-A2E3-B4BABBE9E007','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4A771FD5-96BD-5864-84C6-749E4A631865', 'sequence': {'long': 1321}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4A771FD5-96BD-5864-84C6-749E4A631865','1321','EVENT_CLOSE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706904573353856','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4A771FD5-96BD-5864-84C6-749E4A631865','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4A771FD5-96BD-5864-84C6-749E4A631865','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4A771FD5-96BD-5864-84C6-749E4A631865','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '88DDC054-4399-5D3B-8897-85C259DF0A18', 'sequence': {'long': 1322}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'88DDC054-4399-5D3B-8897-85C259DF0A18','1322','EVENT_OPEN','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706904573353856','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'88DDC054-4399-5D3B-8897-85C259DF0A18','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'88DDC054-4399-5D3B-8897-85C259DF0A18','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'88DDC054-4399-5D3B-8897-85C259DF0A18','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F285B0CC-0636-57FA-9BF5-15A969FD3499', 'sequence': {'long': 1323}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F285B0CC-0636-57FA-9BF5-15A969FD3499','1323','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706904573353856','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F285B0CC-0636-57FA-9BF5-15A969FD3499','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F285B0CC-0636-57FA-9BF5-15A969FD3499','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F285B0CC-0636-57FA-9BF5-15A969FD3499','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0D73AE4A-2717-5B57-95CD-A6F2BF3FA091', 'sequence': {'long': 1324}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904573353856, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6729728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'less', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'0D73AE4A-2717-5B57-95CD-A6F2BF3FA091','1324','EVENT_MMAP','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706904573353856','aue_mmap','6729728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','less','[''PROT_READ'']','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0D73AE4A-2717-5B57-95CD-A6F2BF3FA091','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0D73AE4A-2717-5B57-95CD-A6F2BF3FA091','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0D73AE4A-2717-5B57-95CD-A6F2BF3FA091','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FE690C4B-6A0C-5253-93D3-4B5EE28DDDC4', 'sequence': {'long': 1325}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FE690C4B-6A0C-5253-93D3-4B5EE28DDDC4','1325','EVENT_CLOSE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706904583349436','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FE690C4B-6A0C-5253-93D3-4B5EE28DDDC4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FE690C4B-6A0C-5253-93D3-4B5EE28DDDC4','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FE690C4B-6A0C-5253-93D3-4B5EE28DDDC4','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '23BB07E7-46E9-57F2-AAF0-6AEEBD41E0E2', 'sequence': {'long': 1326}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'23BB07E7-46E9-57F2-AAF0-6AEEBD41E0E2','1326','EVENT_OPEN','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706904583349436','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'23BB07E7-46E9-57F2-AAF0-6AEEBD41E0E2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'23BB07E7-46E9-57F2-AAF0-6AEEBD41E0E2','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'23BB07E7-46E9-57F2-AAF0-6AEEBD41E0E2','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2C4F835B-559D-575B-8202-DFEC74CD3BAA', 'sequence': {'long': 1327}, 'type': 'EVENT_READ', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2C4F835B-559D-575B-8202-DFEC74CD3BAA','1327','EVENT_READ','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706904583349436','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2C4F835B-559D-575B-8202-DFEC74CD3BAA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2C4F835B-559D-575B-8202-DFEC74CD3BAA','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2C4F835B-559D-575B-8202-DFEC74CD3BAA','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2E335668-9B9C-5921-8415-A2CBE2A20230', 'sequence': {'long': 1328}, 'type': 'EVENT_READ', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2E335668-9B9C-5921-8415-A2CBE2A20230','1328','EVENT_READ','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706904583349436','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2E335668-9B9C-5921-8415-A2CBE2A20230','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2E335668-9B9C-5921-8415-A2CBE2A20230','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2E335668-9B9C-5921-8415-A2CBE2A20230','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '602003AA-AE96-5EE7-AF57-86717A32FA33', 'sequence': {'long': 1329}, 'type': 'EVENT_READ', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'602003AA-AE96-5EE7-AF57-86717A32FA33','1329','EVENT_READ','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706904583349436','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'602003AA-AE96-5EE7-AF57-86717A32FA33','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'602003AA-AE96-5EE7-AF57-86717A32FA33','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'602003AA-AE96-5EE7-AF57-86717A32FA33','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '89590C32-0778-5952-ADEE-350DAD2B655E', 'sequence': {'long': 1330}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'89590C32-0778-5952-ADEE-350DAD2B655E','1330','EVENT_CLOSE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','1522706904583349436','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'89590C32-0778-5952-ADEE-350DAD2B655E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'89590C32-0778-5952-ADEE-350DAD2B655E','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'89590C32-0778-5952-ADEE-350DAD2B655E','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '970DB073-36DA-581A-ACF3-1F12200DD4E0', 'sequence': {'long': 1331}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'B2C3146A-9E38-5156-B89E-90E9A6513613'}, 'predicateObjectPath': {'string': '/home/darpa/.lesshst'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'970DB073-36DA-581A-ACF3-1F12200DD4E0','1331','EVENT_OPEN','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','B2C3146A-9E38-5156-B89E-90E9A6513613','/home/darpa/.lesshst','1522706904583349436','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'970DB073-36DA-581A-ACF3-1F12200DD4E0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'970DB073-36DA-581A-ACF3-1F12200DD4E0','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'970DB073-36DA-581A-ACF3-1F12200DD4E0','B2C3146A-9E38-5156-B89E-90E9A6513613','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5BF11BBB-EF37-5E34-9A2F-DC6BABBB0971', 'sequence': {'long': 1332}, 'type': 'EVENT_READ', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'B2C3146A-9E38-5156-B89E-90E9A6513613'}, 'predicateObjectPath': {'string': '/home/darpa/.lesshst'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/home/darpa/.lesshst', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5BF11BBB-EF37-5E34-9A2F-DC6BABBB0971','1332','EVENT_READ','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','B2C3146A-9E38-5156-B89E-90E9A6513613','/home/darpa/.lesshst','1522706904583349436','aue_read','56','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/home/darpa/.lesshst','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5BF11BBB-EF37-5E34-9A2F-DC6BABBB0971','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5BF11BBB-EF37-5E34-9A2F-DC6BABBB0971','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5BF11BBB-EF37-5E34-9A2F-DC6BABBB0971','B2C3146A-9E38-5156-B89E-90E9A6513613','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7DD3E7C5-4FDC-58CE-BBF3-D376D24AED2C', 'sequence': {'long': 1333}, 'type': 'EVENT_READ', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'B2C3146A-9E38-5156-B89E-90E9A6513613'}, 'predicateObjectPath': {'string': '/home/darpa/.lesshst'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/home/darpa/.lesshst', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7DD3E7C5-4FDC-58CE-BBF3-D376D24AED2C','1333','EVENT_READ','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','B2C3146A-9E38-5156-B89E-90E9A6513613','/home/darpa/.lesshst','1522706904583349436','aue_read','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/home/darpa/.lesshst','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7DD3E7C5-4FDC-58CE-BBF3-D376D24AED2C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7DD3E7C5-4FDC-58CE-BBF3-D376D24AED2C','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7DD3E7C5-4FDC-58CE-BBF3-D376D24AED2C','B2C3146A-9E38-5156-B89E-90E9A6513613','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BA54E3C3-6B6C-5CD6-9F63-689317FEE89D', 'sequence': {'long': 1334}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'B2C3146A-9E38-5156-B89E-90E9A6513613'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BA54E3C3-6B6C-5CD6-9F63-689317FEE89D','1334','EVENT_CLOSE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','B2C3146A-9E38-5156-B89E-90E9A6513613','1522706904583349436','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BA54E3C3-6B6C-5CD6-9F63-689317FEE89D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BA54E3C3-6B6C-5CD6-9F63-689317FEE89D','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BA54E3C3-6B6C-5CD6-9F63-689317FEE89D','B2C3146A-9E38-5156-B89E-90E9A6513613','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C5D994AC-4E4C-56E8-BA83-F87138812748', 'sequence': {'long': 1335}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C5D994AC-4E4C-56E8-BA83-F87138812748','1335','EVENT_OPEN','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706904583349436','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C5D994AC-4E4C-56E8-BA83-F87138812748','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C5D994AC-4E4C-56E8-BA83-F87138812748','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C5D994AC-4E4C-56E8-BA83-F87138812748','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': 'E8937A0F-3389-E159-8933-7B9A99E19EDB', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'E8937A0F-3389-E159-8933-7B9A99E19EDB','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E8937A0F-3389-E159-8933-7B9A99E19EDB','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E8937A0F-3389-E159-8933-7B9A99E19EDB','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C0A6F4D4-803B-5663-9321-DC2816350A58', 'sequence': {'long': 1336}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'E8937A0F-3389-E159-8933-7B9A99E19EDB'}, 'predicateObjectPath': {'string': '/usr/home/darpa/ta1-integration-cadets/translator/kafka.sh'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904583349436, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '4', 'return_value': '4', 'fd': '-100', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C0A6F4D4-803B-5663-9321-DC2816350A58','1336','EVENT_OPEN','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','E8937A0F-3389-E159-8933-7B9A99E19EDB','/usr/home/darpa/ta1-integration-cadets/translator/kafka.sh','1522706904583349436','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','4','-100','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C0A6F4D4-803B-5663-9321-DC2816350A58','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C0A6F4D4-803B-5663-9321-DC2816350A58','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C0A6F4D4-803B-5663-9321-DC2816350A58','E8937A0F-3389-E159-8933-7B9A99E19EDB','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EC970020-3C40-5978-B286-A99836CD295C', 'sequence': {'long': 1337}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'E8937A0F-3389-E159-8933-7B9A99E19EDB'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904593356696, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EC970020-3C40-5978-B286-A99836CD295C','1337','EVENT_LSEEK','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','E8937A0F-3389-E159-8933-7B9A99E19EDB','1522706904593356696','aue_lseek','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EC970020-3C40-5978-B286-A99836CD295C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EC970020-3C40-5978-B286-A99836CD295C','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EC970020-3C40-5978-B286-A99836CD295C','E8937A0F-3389-E159-8933-7B9A99E19EDB','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CCEA3255-7701-516E-AAE7-C891AF970133', 'sequence': {'long': 1338}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'E8937A0F-3389-E159-8933-7B9A99E19EDB'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904593356696, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CCEA3255-7701-516E-AAE7-C891AF970133','1338','EVENT_LSEEK','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','E8937A0F-3389-E159-8933-7B9A99E19EDB','1522706904593356696','aue_lseek','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CCEA3255-7701-516E-AAE7-C891AF970133','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CCEA3255-7701-516E-AAE7-C891AF970133','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CCEA3255-7701-516E-AAE7-C891AF970133','E8937A0F-3389-E159-8933-7B9A99E19EDB','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8DD44701-382A-57D1-927D-615E6E4B43B6', 'sequence': {'long': 1339}, 'type': 'EVENT_READ', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'E8937A0F-3389-E159-8933-7B9A99E19EDB'}, 'predicateObjectPath': {'string': 'kafka.sh'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904593356696, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 256}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kafka.sh', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8DD44701-382A-57D1-927D-615E6E4B43B6','1339','EVENT_READ','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','E8937A0F-3389-E159-8933-7B9A99E19EDB','kafka.sh','1522706904593356696','aue_read','256','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kafka.sh','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8DD44701-382A-57D1-927D-615E6E4B43B6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8DD44701-382A-57D1-927D-615E6E4B43B6','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8DD44701-382A-57D1-927D-615E6E4B43B6','E8937A0F-3389-E159-8933-7B9A99E19EDB','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F0EC3273-2583-55FD-92AC-95DCD7BC7695', 'sequence': {'long': 1340}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'E8937A0F-3389-E159-8933-7B9A99E19EDB'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904593356696, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F0EC3273-2583-55FD-92AC-95DCD7BC7695','1340','EVENT_LSEEK','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','E8937A0F-3389-E159-8933-7B9A99E19EDB','1522706904593356696','aue_lseek','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F0EC3273-2583-55FD-92AC-95DCD7BC7695','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F0EC3273-2583-55FD-92AC-95DCD7BC7695','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F0EC3273-2583-55FD-92AC-95DCD7BC7695','E8937A0F-3389-E159-8933-7B9A99E19EDB','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9FA5FBCB-7359-50EF-8163-0952D51D7CFD', 'sequence': {'long': 1341}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'E8937A0F-3389-E159-8933-7B9A99E19EDB'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904593356696, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9FA5FBCB-7359-50EF-8163-0952D51D7CFD','1341','EVENT_LSEEK','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','E8937A0F-3389-E159-8933-7B9A99E19EDB','1522706904593356696','aue_lseek','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9FA5FBCB-7359-50EF-8163-0952D51D7CFD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9FA5FBCB-7359-50EF-8163-0952D51D7CFD','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9FA5FBCB-7359-50EF-8163-0952D51D7CFD','E8937A0F-3389-E159-8933-7B9A99E19EDB','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '13C0F61D-A0FD-599C-B6E7-0ACFA12D8473', 'sequence': {'long': 1342}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904593356696, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'13C0F61D-A0FD-599C-B6E7-0ACFA12D8473','1342','EVENT_WRITE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706904593356696','aue_write','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'13C0F61D-A0FD-599C-B6E7-0ACFA12D8473','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'13C0F61D-A0FD-599C-B6E7-0ACFA12D8473','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'13C0F61D-A0FD-599C-B6E7-0ACFA12D8473','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '035F908E-0753-5A44-95FE-32DD9B6170D9', 'sequence': {'long': 1343}, 'type': 'EVENT_READ', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'E8937A0F-3389-E159-8933-7B9A99E19EDB'}, 'predicateObjectPath': {'string': 'kafka.sh'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904593356696, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 842}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kafka.sh', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'035F908E-0753-5A44-95FE-32DD9B6170D9','1343','EVENT_READ','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','E8937A0F-3389-E159-8933-7B9A99E19EDB','kafka.sh','1522706904593356696','aue_read','842','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kafka.sh','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'035F908E-0753-5A44-95FE-32DD9B6170D9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'035F908E-0753-5A44-95FE-32DD9B6170D9','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'035F908E-0753-5A44-95FE-32DD9B6170D9','E8937A0F-3389-E159-8933-7B9A99E19EDB','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '54A745F4-8A09-54BD-9BE8-7A100B921053', 'sequence': {'long': 1344}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904593356696, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 898}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'54A745F4-8A09-54BD-9BE8-7A100B921053','1344','EVENT_WRITE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706904593356696','aue_write','898','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54A745F4-8A09-54BD-9BE8-7A100B921053','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54A745F4-8A09-54BD-9BE8-7A100B921053','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'54A745F4-8A09-54BD-9BE8-7A100B921053','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '170AAFB7-E74F-50CA-9603-5C1B13E6185A', 'sequence': {'long': 1345}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5C7DA0D2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904793355973, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'170AAFB7-E74F-50CA-9603-5C1B13E6185A','1345','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5C7DA0D2-36C2-11E8-BF66-D9AA8AFF4A69','1522706904793355973','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'170AAFB7-E74F-50CA-9603-5C1B13E6185A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'170AAFB7-E74F-50CA-9603-5C1B13E6185A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'170AAFB7-E74F-50CA-9603-5C1B13E6185A','5C7DA0D2-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E616502B-8CE6-5702-9450-828C136B2C52', 'sequence': {'long': 1346}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5C7DA1D7-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904803353644, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E616502B-8CE6-5702-9450-828C136B2C52','1346','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5C7DA1D7-36C2-11E8-BF66-D9AA8AFF4A69','1522706904803353644','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E616502B-8CE6-5702-9450-828C136B2C52','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E616502B-8CE6-5702-9450-828C136B2C52','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E616502B-8CE6-5702-9450-828C136B2C52','5C7DA1D7-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5D157356-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5D157356-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5D157356-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5D157356-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5D1572A9-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5D1572A9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5D1572A9-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5D1572A9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3DEA6250-13AE-51C5-ADDA-26A0B22009C5', 'sequence': {'long': 1347}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5D1572A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5D157356-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706904803353644, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3DEA6250-13AE-51C5-ADDA-26A0B22009C5','1347','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5D1572A9-36C2-11E8-BF66-D9AA8AFF4A69','5D157356-36C2-11E8-BF66-D9AA8AFF4A69','1522706904803353644','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3DEA6250-13AE-51C5-ADDA-26A0B22009C5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3DEA6250-13AE-51C5-ADDA-26A0B22009C5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3DEA6250-13AE-51C5-ADDA-26A0B22009C5','5D1572A9-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'3DEA6250-13AE-51C5-ADDA-26A0B22009C5','5D157356-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '96ED9F2A-E05B-5897-8AD8-2497B9501616', 'sequence': {'long': 1348}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904803353644, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'96ED9F2A-E05B-5897-8AD8-2497B9501616','1348','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706904803353644','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'96ED9F2A-E05B-5897-8AD8-2497B9501616','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'96ED9F2A-E05B-5897-8AD8-2497B9501616','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '56F39842-6EC4-5611-BE34-30E6E58BEDEE', 'sequence': {'long': 1349}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904803353644, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'56F39842-6EC4-5611-BE34-30E6E58BEDEE','1349','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706904803353644','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'56F39842-6EC4-5611-BE34-30E6E58BEDEE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'56F39842-6EC4-5611-BE34-30E6E58BEDEE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DAEC0E8C-1905-5EDF-9BC2-6DDB9967DF37', 'sequence': {'long': 1350}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904803353644, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DAEC0E8C-1905-5EDF-9BC2-6DDB9967DF37','1350','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706904803353644','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DAEC0E8C-1905-5EDF-9BC2-6DDB9967DF37','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DAEC0E8C-1905-5EDF-9BC2-6DDB9967DF37','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '702A6D41-95C9-58DE-A8B6-DDC2E757EBDF', 'sequence': {'long': 1351}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706904803353644, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'702A6D41-95C9-58DE-A8B6-DDC2E757EBDF','1351','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706904803353644','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'702A6D41-95C9-58DE-A8B6-DDC2E757EBDF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'702A6D41-95C9-58DE-A8B6-DDC2E757EBDF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '207C129A-B2E2-5119-91C2-6AA17FD41A5F', 'sequence': {'long': 1352}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5D1572A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706905813352970, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'207C129A-B2E2-5119-91C2-6AA17FD41A5F','1352','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5D1572A9-36C2-11E8-BF66-D9AA8AFF4A69','1522706905813352970','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'207C129A-B2E2-5119-91C2-6AA17FD41A5F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'207C129A-B2E2-5119-91C2-6AA17FD41A5F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'207C129A-B2E2-5119-91C2-6AA17FD41A5F','5D1572A9-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0EE0B765-3FCE-561E-9634-4BBED7B383F6', 'sequence': {'long': 1353}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5D157356-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706905813352970, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0EE0B765-3FCE-561E-9634-4BBED7B383F6','1353','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5D157356-36C2-11E8-BF66-D9AA8AFF4A69','1522706905813352970','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0EE0B765-3FCE-561E-9634-4BBED7B383F6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0EE0B765-3FCE-561E-9634-4BBED7B383F6','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0EE0B765-3FCE-561E-9634-4BBED7B383F6','5D157356-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5DAFEAA4-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5DAFEAA4-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5DAFEAA4-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5DAFEAA4-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5DAFE993-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5DAFE993-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5DAFE993-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5DAFE993-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '79C3283B-0C08-5B38-9E14-332FEB87764D', 'sequence': {'long': 1354}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5DAFE993-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5DAFEAA4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706905813352970, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'79C3283B-0C08-5B38-9E14-332FEB87764D','1354','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5DAFE993-36C2-11E8-BF66-D9AA8AFF4A69','5DAFEAA4-36C2-11E8-BF66-D9AA8AFF4A69','1522706905813352970','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'79C3283B-0C08-5B38-9E14-332FEB87764D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'79C3283B-0C08-5B38-9E14-332FEB87764D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'79C3283B-0C08-5B38-9E14-332FEB87764D','5DAFE993-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'79C3283B-0C08-5B38-9E14-332FEB87764D','5DAFEAA4-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '95E70D91-B06A-5F7E-A19C-0FA2F156A338', 'sequence': {'long': 1355}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706905813352970, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'95E70D91-B06A-5F7E-A19C-0FA2F156A338','1355','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706905813352970','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'95E70D91-B06A-5F7E-A19C-0FA2F156A338','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'95E70D91-B06A-5F7E-A19C-0FA2F156A338','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '442B5BFF-DCD6-527B-A8F5-6076A95B7CB9', 'sequence': {'long': 1356}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706905813352970, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'442B5BFF-DCD6-527B-A8F5-6076A95B7CB9','1356','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706905813352970','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'442B5BFF-DCD6-527B-A8F5-6076A95B7CB9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'442B5BFF-DCD6-527B-A8F5-6076A95B7CB9','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F840FEA2-4922-5041-8FD6-9A206BD1C18F', 'sequence': {'long': 1357}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706905813352970, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F840FEA2-4922-5041-8FD6-9A206BD1C18F','1357','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706905813352970','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F840FEA2-4922-5041-8FD6-9A206BD1C18F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F840FEA2-4922-5041-8FD6-9A206BD1C18F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1F9B6C64-E0C3-5A4F-ADA2-D5FFA7E17BCE', 'sequence': {'long': 1358}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706905813352970, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1F9B6C64-E0C3-5A4F-ADA2-D5FFA7E17BCE','1358','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706905813352970','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1F9B6C64-E0C3-5A4F-ADA2-D5FFA7E17BCE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1F9B6C64-E0C3-5A4F-ADA2-D5FFA7E17BCE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1250846C-D15B-56D0-884F-C3DD4E4FCB0A', 'sequence': {'long': 1359}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5DAFE993-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706906803349816, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1250846C-D15B-56D0-884F-C3DD4E4FCB0A','1359','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5DAFE993-36C2-11E8-BF66-D9AA8AFF4A69','1522706906803349816','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1250846C-D15B-56D0-884F-C3DD4E4FCB0A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1250846C-D15B-56D0-884F-C3DD4E4FCB0A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1250846C-D15B-56D0-884F-C3DD4E4FCB0A','5DAFE993-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '402042C2-A841-5913-AB7D-613A37932827', 'sequence': {'long': 1360}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5DAFEAA4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706906803349816, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'402042C2-A841-5913-AB7D-613A37932827','1360','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5DAFEAA4-36C2-11E8-BF66-D9AA8AFF4A69','1522706906803349816','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'402042C2-A841-5913-AB7D-613A37932827','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'402042C2-A841-5913-AB7D-613A37932827','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'402042C2-A841-5913-AB7D-613A37932827','5DAFEAA4-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5E46E443-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5E46E443-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5E46E443-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5E46E443-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5E46E333-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5E46E333-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5E46E333-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5E46E333-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8168C25C-E51E-5095-9AFF-C721FA0C074B', 'sequence': {'long': 1361}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5E46E333-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5E46E443-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706906803349816, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8168C25C-E51E-5095-9AFF-C721FA0C074B','1361','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5E46E333-36C2-11E8-BF66-D9AA8AFF4A69','5E46E443-36C2-11E8-BF66-D9AA8AFF4A69','1522706906803349816','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8168C25C-E51E-5095-9AFF-C721FA0C074B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8168C25C-E51E-5095-9AFF-C721FA0C074B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8168C25C-E51E-5095-9AFF-C721FA0C074B','5E46E333-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'8168C25C-E51E-5095-9AFF-C721FA0C074B','5E46E443-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BA8BC16D-2BD9-54C4-83EF-1A203E32AF65', 'sequence': {'long': 1362}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706906803349816, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BA8BC16D-2BD9-54C4-83EF-1A203E32AF65','1362','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706906803349816','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BA8BC16D-2BD9-54C4-83EF-1A203E32AF65','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BA8BC16D-2BD9-54C4-83EF-1A203E32AF65','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E6FC5379-FCCB-59CD-B266-3D59F5674A40', 'sequence': {'long': 1363}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706906803349816, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E6FC5379-FCCB-59CD-B266-3D59F5674A40','1363','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706906803349816','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E6FC5379-FCCB-59CD-B266-3D59F5674A40','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E6FC5379-FCCB-59CD-B266-3D59F5674A40','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '59E2DDA3-CCE9-5490-AF8E-3439A9F294DB', 'sequence': {'long': 1364}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706906803349816, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'59E2DDA3-CCE9-5490-AF8E-3439A9F294DB','1364','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706906803349816','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'59E2DDA3-CCE9-5490-AF8E-3439A9F294DB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'59E2DDA3-CCE9-5490-AF8E-3439A9F294DB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2232773E-EDEA-5BB4-BBDC-9E1A064895F7', 'sequence': {'long': 1365}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706906803349816, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2232773E-EDEA-5BB4-BBDC-9E1A064895F7','1365','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706906803349816','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2232773E-EDEA-5BB4-BBDC-9E1A064895F7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2232773E-EDEA-5BB4-BBDC-9E1A064895F7','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '84AF3E3A-F899-5E6F-8BD9-A96208F65FA2', 'sequence': {'long': 1366}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5E46E333-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706907813351023, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'84AF3E3A-F899-5E6F-8BD9-A96208F65FA2','1366','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5E46E333-36C2-11E8-BF66-D9AA8AFF4A69','1522706907813351023','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'84AF3E3A-F899-5E6F-8BD9-A96208F65FA2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'84AF3E3A-F899-5E6F-8BD9-A96208F65FA2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'84AF3E3A-F899-5E6F-8BD9-A96208F65FA2','5E46E333-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4FD10806-D0CC-5486-B9D1-92FB8AC75ADA', 'sequence': {'long': 1367}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5E46E443-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706907813351023, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4FD10806-D0CC-5486-B9D1-92FB8AC75ADA','1367','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5E46E443-36C2-11E8-BF66-D9AA8AFF4A69','1522706907813351023','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4FD10806-D0CC-5486-B9D1-92FB8AC75ADA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4FD10806-D0CC-5486-B9D1-92FB8AC75ADA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4FD10806-D0CC-5486-B9D1-92FB8AC75ADA','5E46E443-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5EE0E8E2-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5EE0E8E2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5EE0E8E2-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5EE0E8E2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5EE0E81E-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5EE0E81E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5EE0E81E-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5EE0E81E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '57060224-5848-5638-BDA9-1D0CD3EB0FB5', 'sequence': {'long': 1368}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5EE0E81E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5EE0E8E2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706907813351023, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'57060224-5848-5638-BDA9-1D0CD3EB0FB5','1368','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5EE0E81E-36C2-11E8-BF66-D9AA8AFF4A69','5EE0E8E2-36C2-11E8-BF66-D9AA8AFF4A69','1522706907813351023','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'57060224-5848-5638-BDA9-1D0CD3EB0FB5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'57060224-5848-5638-BDA9-1D0CD3EB0FB5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'57060224-5848-5638-BDA9-1D0CD3EB0FB5','5EE0E81E-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'57060224-5848-5638-BDA9-1D0CD3EB0FB5','5EE0E8E2-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8C2FAF75-00D4-511C-B6E5-5567E087BA9D', 'sequence': {'long': 1369}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706907813351023, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8C2FAF75-00D4-511C-B6E5-5567E087BA9D','1369','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706907813351023','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8C2FAF75-00D4-511C-B6E5-5567E087BA9D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8C2FAF75-00D4-511C-B6E5-5567E087BA9D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9CE15654-24C2-5158-9A6C-A6B5B535E33F', 'sequence': {'long': 1370}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706907813351023, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9CE15654-24C2-5158-9A6C-A6B5B535E33F','1370','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706907813351023','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9CE15654-24C2-5158-9A6C-A6B5B535E33F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9CE15654-24C2-5158-9A6C-A6B5B535E33F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B0E94D28-1D8E-56BB-B499-BEDA846425FA', 'sequence': {'long': 1371}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706907813351023, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B0E94D28-1D8E-56BB-B499-BEDA846425FA','1371','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706907813351023','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B0E94D28-1D8E-56BB-B499-BEDA846425FA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B0E94D28-1D8E-56BB-B499-BEDA846425FA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '822B0C55-C968-57CE-9D49-18297C1D7EA5', 'sequence': {'long': 1372}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706907813351023, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'822B0C55-C968-57CE-9D49-18297C1D7EA5','1372','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706907813351023','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'822B0C55-C968-57CE-9D49-18297C1D7EA5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'822B0C55-C968-57CE-9D49-18297C1D7EA5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D0358C17-DD65-56B4-9D22-263F16300037', 'sequence': {'long': 1373}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5EE0E81E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706908813350469, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D0358C17-DD65-56B4-9D22-263F16300037','1373','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5EE0E81E-36C2-11E8-BF66-D9AA8AFF4A69','1522706908813350469','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D0358C17-DD65-56B4-9D22-263F16300037','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D0358C17-DD65-56B4-9D22-263F16300037','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D0358C17-DD65-56B4-9D22-263F16300037','5EE0E81E-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '02E59957-8327-5AB8-B3B1-FE0B4929BEC1', 'sequence': {'long': 1374}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5EE0E8E2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706908813350469, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'02E59957-8327-5AB8-B3B1-FE0B4929BEC1','1374','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5EE0E8E2-36C2-11E8-BF66-D9AA8AFF4A69','1522706908813350469','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'02E59957-8327-5AB8-B3B1-FE0B4929BEC1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'02E59957-8327-5AB8-B3B1-FE0B4929BEC1','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'02E59957-8327-5AB8-B3B1-FE0B4929BEC1','5EE0E8E2-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5F7978FE-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5F7978FE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5F7978FE-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5F7978FE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '5F797851-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'5F797851-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5F797851-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5F797851-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8E7A9564-B5D2-52B3-98DE-5DFA6C21C30A', 'sequence': {'long': 1375}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5F797851-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '5F7978FE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706908813350469, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8E7A9564-B5D2-52B3-98DE-5DFA6C21C30A','1375','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5F797851-36C2-11E8-BF66-D9AA8AFF4A69','5F7978FE-36C2-11E8-BF66-D9AA8AFF4A69','1522706908813350469','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8E7A9564-B5D2-52B3-98DE-5DFA6C21C30A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8E7A9564-B5D2-52B3-98DE-5DFA6C21C30A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8E7A9564-B5D2-52B3-98DE-5DFA6C21C30A','5F797851-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'8E7A9564-B5D2-52B3-98DE-5DFA6C21C30A','5F7978FE-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '729F3E6A-27D7-5646-A16F-888D7115984B', 'sequence': {'long': 1376}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706908813350469, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'729F3E6A-27D7-5646-A16F-888D7115984B','1376','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706908813350469','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'729F3E6A-27D7-5646-A16F-888D7115984B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'729F3E6A-27D7-5646-A16F-888D7115984B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '25BEEEE9-8B42-5ECA-9748-9AACCDEAC72B', 'sequence': {'long': 1377}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706908813350469, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'25BEEEE9-8B42-5ECA-9748-9AACCDEAC72B','1377','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706908813350469','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'25BEEEE9-8B42-5ECA-9748-9AACCDEAC72B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'25BEEEE9-8B42-5ECA-9748-9AACCDEAC72B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '51708BA3-F4AC-5516-90A9-311495F948E6', 'sequence': {'long': 1378}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706908813350469, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'51708BA3-F4AC-5516-90A9-311495F948E6','1378','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706908813350469','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'51708BA3-F4AC-5516-90A9-311495F948E6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'51708BA3-F4AC-5516-90A9-311495F948E6','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '685A0FE5-114B-5697-A2E6-547F1142A296', 'sequence': {'long': 1379}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706908813350469, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'685A0FE5-114B-5697-A2E6-547F1142A296','1379','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706908813350469','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'685A0FE5-114B-5697-A2E6-547F1142A296','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'685A0FE5-114B-5697-A2E6-547F1142A296','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1CF28F73-BF7B-578E-BE02-0D1959B28D88', 'sequence': {'long': 1380}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5F797851-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706909813349425, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1CF28F73-BF7B-578E-BE02-0D1959B28D88','1380','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5F797851-36C2-11E8-BF66-D9AA8AFF4A69','1522706909813349425','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1CF28F73-BF7B-578E-BE02-0D1959B28D88','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1CF28F73-BF7B-578E-BE02-0D1959B28D88','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1CF28F73-BF7B-578E-BE02-0D1959B28D88','5F797851-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '67606818-2A6C-563B-A785-32F4DDF105BE', 'sequence': {'long': 1381}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5F7978FE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706909813349425, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'67606818-2A6C-563B-A785-32F4DDF105BE','1381','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','5F7978FE-36C2-11E8-BF66-D9AA8AFF4A69','1522706909813349425','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'67606818-2A6C-563B-A785-32F4DDF105BE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'67606818-2A6C-563B-A785-32F4DDF105BE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'67606818-2A6C-563B-A785-32F4DDF105BE','5F7978FE-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '60122AEC-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'60122AEC-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'60122AEC-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'60122AEC-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '601229D7-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'601229D7-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'601229D7-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'601229D7-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '56DBBF09-90D5-5C9F-BE5D-E4B2B56D24B5', 'sequence': {'long': 1382}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '601229D7-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '60122AEC-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706909813349425, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'56DBBF09-90D5-5C9F-BE5D-E4B2B56D24B5','1382','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','601229D7-36C2-11E8-BF66-D9AA8AFF4A69','60122AEC-36C2-11E8-BF66-D9AA8AFF4A69','1522706909813349425','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'56DBBF09-90D5-5C9F-BE5D-E4B2B56D24B5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'56DBBF09-90D5-5C9F-BE5D-E4B2B56D24B5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'56DBBF09-90D5-5C9F-BE5D-E4B2B56D24B5','601229D7-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'56DBBF09-90D5-5C9F-BE5D-E4B2B56D24B5','60122AEC-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0D02E654-48CB-56C9-9534-E0263D9ABD5A', 'sequence': {'long': 1383}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706909813349425, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0D02E654-48CB-56C9-9534-E0263D9ABD5A','1383','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706909813349425','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0D02E654-48CB-56C9-9534-E0263D9ABD5A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0D02E654-48CB-56C9-9534-E0263D9ABD5A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DEFF2340-0E6D-54C3-9526-B173AFA7A4E0', 'sequence': {'long': 1384}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706909813349425, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DEFF2340-0E6D-54C3-9526-B173AFA7A4E0','1384','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706909813349425','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DEFF2340-0E6D-54C3-9526-B173AFA7A4E0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DEFF2340-0E6D-54C3-9526-B173AFA7A4E0','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5E178D32-1061-5A69-84E9-0983137CF878', 'sequence': {'long': 1385}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706909813349425, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5E178D32-1061-5A69-84E9-0983137CF878','1385','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706909813349425','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5E178D32-1061-5A69-84E9-0983137CF878','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5E178D32-1061-5A69-84E9-0983137CF878','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CCEA3B2A-38A8-5F97-9307-7C08EA7DCD0C', 'sequence': {'long': 1386}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706909813349425, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CCEA3B2A-38A8-5F97-9307-7C08EA7DCD0C','1386','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706909813349425','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CCEA3B2A-38A8-5F97-9307-7C08EA7DCD0C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CCEA3B2A-38A8-5F97-9307-7C08EA7DCD0C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '606D7214-E7AC-5C01-960B-A19E6CFAFC37', 'sequence': {'long': 1387}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '601229D7-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706910813349101, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'606D7214-E7AC-5C01-960B-A19E6CFAFC37','1387','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','601229D7-36C2-11E8-BF66-D9AA8AFF4A69','1522706910813349101','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'606D7214-E7AC-5C01-960B-A19E6CFAFC37','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'606D7214-E7AC-5C01-960B-A19E6CFAFC37','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'606D7214-E7AC-5C01-960B-A19E6CFAFC37','601229D7-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5FBBD8D8-F5CB-5E0F-88F7-0D8E5B148DC8', 'sequence': {'long': 1388}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '60122AEC-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706910813349101, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5FBBD8D8-F5CB-5E0F-88F7-0D8E5B148DC8','1388','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','60122AEC-36C2-11E8-BF66-D9AA8AFF4A69','1522706910813349101','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5FBBD8D8-F5CB-5E0F-88F7-0D8E5B148DC8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5FBBD8D8-F5CB-5E0F-88F7-0D8E5B148DC8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5FBBD8D8-F5CB-5E0F-88F7-0D8E5B148DC8','60122AEC-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '60AAA8E1-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'60AAA8E1-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'60AAA8E1-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'60AAA8E1-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '60AAA82C-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'60AAA82C-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'60AAA82C-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'60AAA82C-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '935F62DB-E7B6-5BED-ACD0-EB8D55DFAAA0', 'sequence': {'long': 1389}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '60AAA82C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '60AAA8E1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706910813349101, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'935F62DB-E7B6-5BED-ACD0-EB8D55DFAAA0','1389','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','60AAA82C-36C2-11E8-BF66-D9AA8AFF4A69','60AAA8E1-36C2-11E8-BF66-D9AA8AFF4A69','1522706910813349101','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'935F62DB-E7B6-5BED-ACD0-EB8D55DFAAA0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'935F62DB-E7B6-5BED-ACD0-EB8D55DFAAA0','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'935F62DB-E7B6-5BED-ACD0-EB8D55DFAAA0','60AAA82C-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'935F62DB-E7B6-5BED-ACD0-EB8D55DFAAA0','60AAA8E1-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5139851B-D51D-55C9-AE69-1963CD6E22F8', 'sequence': {'long': 1390}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706910813349101, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5139851B-D51D-55C9-AE69-1963CD6E22F8','1390','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706910813349101','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5139851B-D51D-55C9-AE69-1963CD6E22F8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5139851B-D51D-55C9-AE69-1963CD6E22F8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '474602EB-A793-5270-B3AC-F0F8C86B20FB', 'sequence': {'long': 1391}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706910813349101, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'474602EB-A793-5270-B3AC-F0F8C86B20FB','1391','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706910813349101','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'474602EB-A793-5270-B3AC-F0F8C86B20FB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'474602EB-A793-5270-B3AC-F0F8C86B20FB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C014B028-E7C0-5CD7-8BF3-5AF0C1BA1B71', 'sequence': {'long': 1392}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706910813349101, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C014B028-E7C0-5CD7-8BF3-5AF0C1BA1B71','1392','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706910813349101','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C014B028-E7C0-5CD7-8BF3-5AF0C1BA1B71','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C014B028-E7C0-5CD7-8BF3-5AF0C1BA1B71','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '250EDBD9-3E72-5C4D-85BF-EFF5A8CEDB75', 'sequence': {'long': 1393}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706910813349101, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'250EDBD9-3E72-5C4D-85BF-EFF5A8CEDB75','1393','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706910813349101','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'250EDBD9-3E72-5C4D-85BF-EFF5A8CEDB75','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'250EDBD9-3E72-5C4D-85BF-EFF5A8CEDB75','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '12574240-EF30-5EC5-AC6D-EC9963853D3E', 'sequence': {'long': 1394}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '60AAA82C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706911813349677, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'12574240-EF30-5EC5-AC6D-EC9963853D3E','1394','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','60AAA82C-36C2-11E8-BF66-D9AA8AFF4A69','1522706911813349677','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'12574240-EF30-5EC5-AC6D-EC9963853D3E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'12574240-EF30-5EC5-AC6D-EC9963853D3E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'12574240-EF30-5EC5-AC6D-EC9963853D3E','60AAA82C-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '56A7D8C7-AC32-51AE-9DBB-971DD8B172B8', 'sequence': {'long': 1395}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '60AAA8E1-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706911813349677, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'56A7D8C7-AC32-51AE-9DBB-971DD8B172B8','1395','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','60AAA8E1-36C2-11E8-BF66-D9AA8AFF4A69','1522706911813349677','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'56A7D8C7-AC32-51AE-9DBB-971DD8B172B8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'56A7D8C7-AC32-51AE-9DBB-971DD8B172B8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'56A7D8C7-AC32-51AE-9DBB-971DD8B172B8','60AAA8E1-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '614340C9-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'614340C9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'614340C9-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'614340C9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '61434016-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'61434016-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'61434016-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'61434016-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '816C3572-66FD-5721-B86C-FE84FD7EB08E', 'sequence': {'long': 1396}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '61434016-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '614340C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706911813349677, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'816C3572-66FD-5721-B86C-FE84FD7EB08E','1396','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','61434016-36C2-11E8-BF66-D9AA8AFF4A69','614340C9-36C2-11E8-BF66-D9AA8AFF4A69','1522706911813349677','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'816C3572-66FD-5721-B86C-FE84FD7EB08E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'816C3572-66FD-5721-B86C-FE84FD7EB08E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'816C3572-66FD-5721-B86C-FE84FD7EB08E','61434016-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'816C3572-66FD-5721-B86C-FE84FD7EB08E','614340C9-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2A06B9E0-7F4D-506A-9DCA-502C14AAA65D', 'sequence': {'long': 1397}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706911813349677, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2A06B9E0-7F4D-506A-9DCA-502C14AAA65D','1397','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706911813349677','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2A06B9E0-7F4D-506A-9DCA-502C14AAA65D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2A06B9E0-7F4D-506A-9DCA-502C14AAA65D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CD6FAD89-79BB-5BB2-BC5F-939752A72050', 'sequence': {'long': 1398}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706911813349677, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CD6FAD89-79BB-5BB2-BC5F-939752A72050','1398','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706911813349677','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CD6FAD89-79BB-5BB2-BC5F-939752A72050','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CD6FAD89-79BB-5BB2-BC5F-939752A72050','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0D675A27-A639-50FF-A7B6-1B4664D1871E', 'sequence': {'long': 1399}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706911813349677, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0D675A27-A639-50FF-A7B6-1B4664D1871E','1399','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706911813349677','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0D675A27-A639-50FF-A7B6-1B4664D1871E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0D675A27-A639-50FF-A7B6-1B4664D1871E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '843BEF02-F8D7-5CA2-B241-55DFD6BF0EC8', 'sequence': {'long': 1400}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706911813349677, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'843BEF02-F8D7-5CA2-B241-55DFD6BF0EC8','1400','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706911813349677','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'843BEF02-F8D7-5CA2-B241-55DFD6BF0EC8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'843BEF02-F8D7-5CA2-B241-55DFD6BF0EC8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CCF10CBA-28CC-52C3-BE1A-EEE28E250520', 'sequence': {'long': 1401}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '61434016-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706912813354493, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CCF10CBA-28CC-52C3-BE1A-EEE28E250520','1401','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','61434016-36C2-11E8-BF66-D9AA8AFF4A69','1522706912813354493','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CCF10CBA-28CC-52C3-BE1A-EEE28E250520','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CCF10CBA-28CC-52C3-BE1A-EEE28E250520','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CCF10CBA-28CC-52C3-BE1A-EEE28E250520','61434016-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D916CE29-B2C6-58A0-9097-B09111D12156', 'sequence': {'long': 1402}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '614340C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706912813354493, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D916CE29-B2C6-58A0-9097-B09111D12156','1402','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','614340C9-36C2-11E8-BF66-D9AA8AFF4A69','1522706912813354493','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D916CE29-B2C6-58A0-9097-B09111D12156','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D916CE29-B2C6-58A0-9097-B09111D12156','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D916CE29-B2C6-58A0-9097-B09111D12156','614340C9-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '61DBD617-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'61DBD617-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'61DBD617-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'61DBD617-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '61DBD569-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'61DBD569-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'61DBD569-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'61DBD569-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0B5B4730-D578-5507-8BA9-879903A6E076', 'sequence': {'long': 1403}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '61DBD569-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '61DBD617-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706912813354493, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0B5B4730-D578-5507-8BA9-879903A6E076','1403','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','61DBD569-36C2-11E8-BF66-D9AA8AFF4A69','61DBD617-36C2-11E8-BF66-D9AA8AFF4A69','1522706912813354493','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0B5B4730-D578-5507-8BA9-879903A6E076','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0B5B4730-D578-5507-8BA9-879903A6E076','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0B5B4730-D578-5507-8BA9-879903A6E076','61DBD569-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'0B5B4730-D578-5507-8BA9-879903A6E076','61DBD617-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D0961C27-6D72-5C86-BB6A-9A4B91A50BBF', 'sequence': {'long': 1404}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706912813354493, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D0961C27-6D72-5C86-BB6A-9A4B91A50BBF','1404','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706912813354493','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D0961C27-6D72-5C86-BB6A-9A4B91A50BBF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D0961C27-6D72-5C86-BB6A-9A4B91A50BBF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2973AD77-2450-5C97-9E3F-A4E369D92C2B', 'sequence': {'long': 1405}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706912813354493, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2973AD77-2450-5C97-9E3F-A4E369D92C2B','1405','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706912813354493','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2973AD77-2450-5C97-9E3F-A4E369D92C2B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2973AD77-2450-5C97-9E3F-A4E369D92C2B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ECC60A51-8D72-52C0-9F0B-FBE132ED7BEE', 'sequence': {'long': 1406}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706912813354493, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ECC60A51-8D72-52C0-9F0B-FBE132ED7BEE','1406','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706912813354493','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ECC60A51-8D72-52C0-9F0B-FBE132ED7BEE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ECC60A51-8D72-52C0-9F0B-FBE132ED7BEE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A9946ED8-8F07-5E57-97F3-F38C363EA955', 'sequence': {'long': 1407}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706912813354493, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A9946ED8-8F07-5E57-97F3-F38C363EA955','1407','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706912813354493','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A9946ED8-8F07-5E57-97F3-F38C363EA955','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A9946ED8-8F07-5E57-97F3-F38C363EA955','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '28216253-8DC1-522D-8E74-B7FF6BB86F53', 'sequence': {'long': 1408}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '61DBD569-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706913813349379, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'28216253-8DC1-522D-8E74-B7FF6BB86F53','1408','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','61DBD569-36C2-11E8-BF66-D9AA8AFF4A69','1522706913813349379','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'28216253-8DC1-522D-8E74-B7FF6BB86F53','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'28216253-8DC1-522D-8E74-B7FF6BB86F53','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'28216253-8DC1-522D-8E74-B7FF6BB86F53','61DBD569-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '239655FD-FC07-5320-BD64-7748D3F4F411', 'sequence': {'long': 1409}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '61DBD617-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706913813349379, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'239655FD-FC07-5320-BD64-7748D3F4F411','1409','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','61DBD617-36C2-11E8-BF66-D9AA8AFF4A69','1522706913813349379','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'239655FD-FC07-5320-BD64-7748D3F4F411','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'239655FD-FC07-5320-BD64-7748D3F4F411','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'239655FD-FC07-5320-BD64-7748D3F4F411','61DBD617-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '62747701-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'62747701-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'62747701-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'62747701-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '627475EA-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'627475EA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'627475EA-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'627475EA-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '816D936D-D7D4-51F0-889F-05B1D38E5827', 'sequence': {'long': 1410}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '627475EA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '62747701-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706913813349379, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'816D936D-D7D4-51F0-889F-05B1D38E5827','1410','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','627475EA-36C2-11E8-BF66-D9AA8AFF4A69','62747701-36C2-11E8-BF66-D9AA8AFF4A69','1522706913813349379','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'816D936D-D7D4-51F0-889F-05B1D38E5827','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'816D936D-D7D4-51F0-889F-05B1D38E5827','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'816D936D-D7D4-51F0-889F-05B1D38E5827','627475EA-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'816D936D-D7D4-51F0-889F-05B1D38E5827','62747701-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BAB028F6-BBCD-5523-8BA4-18E8E167FF37', 'sequence': {'long': 1411}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706913813349379, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BAB028F6-BBCD-5523-8BA4-18E8E167FF37','1411','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706913813349379','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BAB028F6-BBCD-5523-8BA4-18E8E167FF37','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BAB028F6-BBCD-5523-8BA4-18E8E167FF37','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BD330B8E-A7AD-5C09-A51C-0282D178136F', 'sequence': {'long': 1412}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706913813349379, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BD330B8E-A7AD-5C09-A51C-0282D178136F','1412','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706913813349379','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BD330B8E-A7AD-5C09-A51C-0282D178136F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BD330B8E-A7AD-5C09-A51C-0282D178136F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A48F2FAB-70FC-548C-A6D7-C6E27C433EF5', 'sequence': {'long': 1413}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706913813349379, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A48F2FAB-70FC-548C-A6D7-C6E27C433EF5','1413','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706913813349379','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A48F2FAB-70FC-548C-A6D7-C6E27C433EF5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A48F2FAB-70FC-548C-A6D7-C6E27C433EF5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3E954D32-530A-5588-9654-026D6014DCFC', 'sequence': {'long': 1414}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706913813349379, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3E954D32-530A-5588-9654-026D6014DCFC','1414','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706913813349379','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3E954D32-530A-5588-9654-026D6014DCFC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3E954D32-530A-5588-9654-026D6014DCFC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9B1EB3F4-070B-558C-8E62-570B0AB85692', 'sequence': {'long': 1415}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '627475EA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706914813354245, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9B1EB3F4-070B-558C-8E62-570B0AB85692','1415','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','627475EA-36C2-11E8-BF66-D9AA8AFF4A69','1522706914813354245','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9B1EB3F4-070B-558C-8E62-570B0AB85692','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9B1EB3F4-070B-558C-8E62-570B0AB85692','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9B1EB3F4-070B-558C-8E62-570B0AB85692','627475EA-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EC095013-B288-5162-B9D1-478B3129D245', 'sequence': {'long': 1416}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '62747701-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706914813354245, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EC095013-B288-5162-B9D1-478B3129D245','1416','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','62747701-36C2-11E8-BF66-D9AA8AFF4A69','1522706914813354245','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EC095013-B288-5162-B9D1-478B3129D245','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EC095013-B288-5162-B9D1-478B3129D245','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EC095013-B288-5162-B9D1-478B3129D245','62747701-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '630D004F-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'630D004F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'630D004F-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'630D004F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '630CFFA2-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'630CFFA2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'630CFFA2-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'630CFFA2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E3A4C12F-A151-59E6-9EFA-6EEE0F125C63', 'sequence': {'long': 1417}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '630CFFA2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '630D004F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706914813354245, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E3A4C12F-A151-59E6-9EFA-6EEE0F125C63','1417','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','630CFFA2-36C2-11E8-BF66-D9AA8AFF4A69','630D004F-36C2-11E8-BF66-D9AA8AFF4A69','1522706914813354245','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E3A4C12F-A151-59E6-9EFA-6EEE0F125C63','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E3A4C12F-A151-59E6-9EFA-6EEE0F125C63','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E3A4C12F-A151-59E6-9EFA-6EEE0F125C63','630CFFA2-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'E3A4C12F-A151-59E6-9EFA-6EEE0F125C63','630D004F-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '699728C9-442C-52D7-8C90-9D2407A12DC9', 'sequence': {'long': 1418}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706914813354245, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'699728C9-442C-52D7-8C90-9D2407A12DC9','1418','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706914813354245','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'699728C9-442C-52D7-8C90-9D2407A12DC9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'699728C9-442C-52D7-8C90-9D2407A12DC9','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D81605EE-A2E4-5F86-A80B-AF5BEE2B711C', 'sequence': {'long': 1419}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706914813354245, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D81605EE-A2E4-5F86-A80B-AF5BEE2B711C','1419','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706914813354245','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D81605EE-A2E4-5F86-A80B-AF5BEE2B711C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D81605EE-A2E4-5F86-A80B-AF5BEE2B711C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '311B64FF-4F73-5944-A4BF-13DCE291F8B8', 'sequence': {'long': 1420}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706914813354245, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'311B64FF-4F73-5944-A4BF-13DCE291F8B8','1420','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706914813354245','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'311B64FF-4F73-5944-A4BF-13DCE291F8B8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'311B64FF-4F73-5944-A4BF-13DCE291F8B8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F5DD29C8-7F59-5633-B0E2-EABC7736F892', 'sequence': {'long': 1421}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706914813354245, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F5DD29C8-7F59-5633-B0E2-EABC7736F892','1421','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706914813354245','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F5DD29C8-7F59-5633-B0E2-EABC7736F892','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F5DD29C8-7F59-5633-B0E2-EABC7736F892','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F2755604-4132-569C-AC2E-C078579ABD76', 'sequence': {'long': 1422}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '630CFFA2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706915813350751, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F2755604-4132-569C-AC2E-C078579ABD76','1422','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','630CFFA2-36C2-11E8-BF66-D9AA8AFF4A69','1522706915813350751','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F2755604-4132-569C-AC2E-C078579ABD76','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F2755604-4132-569C-AC2E-C078579ABD76','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F2755604-4132-569C-AC2E-C078579ABD76','630CFFA2-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D68D5C76-FF08-51EA-83B0-9FA148D5CDCA', 'sequence': {'long': 1423}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '630D004F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706915813350751, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D68D5C76-FF08-51EA-83B0-9FA148D5CDCA','1423','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','630D004F-36C2-11E8-BF66-D9AA8AFF4A69','1522706915813350751','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D68D5C76-FF08-51EA-83B0-9FA148D5CDCA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D68D5C76-FF08-51EA-83B0-9FA148D5CDCA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D68D5C76-FF08-51EA-83B0-9FA148D5CDCA','630D004F-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '63A5B2B2-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'63A5B2B2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'63A5B2B2-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'63A5B2B2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '63A5B1A9-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'63A5B1A9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'63A5B1A9-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'63A5B1A9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9E7A286E-E705-5E8F-A059-FEE9B1B00FB9', 'sequence': {'long': 1424}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '63A5B1A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '63A5B2B2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706915813350751, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9E7A286E-E705-5E8F-A059-FEE9B1B00FB9','1424','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','63A5B1A9-36C2-11E8-BF66-D9AA8AFF4A69','63A5B2B2-36C2-11E8-BF66-D9AA8AFF4A69','1522706915813350751','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9E7A286E-E705-5E8F-A059-FEE9B1B00FB9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9E7A286E-E705-5E8F-A059-FEE9B1B00FB9','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9E7A286E-E705-5E8F-A059-FEE9B1B00FB9','63A5B1A9-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'9E7A286E-E705-5E8F-A059-FEE9B1B00FB9','63A5B2B2-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BACB081B-4970-5D62-BC6B-77BEBE208C69', 'sequence': {'long': 1425}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706915813350751, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BACB081B-4970-5D62-BC6B-77BEBE208C69','1425','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706915813350751','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BACB081B-4970-5D62-BC6B-77BEBE208C69','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BACB081B-4970-5D62-BC6B-77BEBE208C69','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '60E6C4E0-58C2-5742-8174-DCEF2380013E', 'sequence': {'long': 1426}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706915813350751, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'60E6C4E0-58C2-5742-8174-DCEF2380013E','1426','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706915813350751','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'60E6C4E0-58C2-5742-8174-DCEF2380013E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'60E6C4E0-58C2-5742-8174-DCEF2380013E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CC98B78D-E2E6-5C35-86D9-5326BFF24171', 'sequence': {'long': 1427}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706915813350751, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CC98B78D-E2E6-5C35-86D9-5326BFF24171','1427','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706915813350751','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CC98B78D-E2E6-5C35-86D9-5326BFF24171','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CC98B78D-E2E6-5C35-86D9-5326BFF24171','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F5DB5F93-938F-5DC1-AA99-1AF659410968', 'sequence': {'long': 1428}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706915813350751, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F5DB5F93-938F-5DC1-AA99-1AF659410968','1428','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706915813350751','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F5DB5F93-938F-5DC1-AA99-1AF659410968','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F5DB5F93-938F-5DC1-AA99-1AF659410968','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '13657CC3-7117-554B-BEA3-3209A6B1BF8A', 'sequence': {'long': 1429}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '63A5B1A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706916813350378, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'13657CC3-7117-554B-BEA3-3209A6B1BF8A','1429','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','63A5B1A9-36C2-11E8-BF66-D9AA8AFF4A69','1522706916813350378','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'13657CC3-7117-554B-BEA3-3209A6B1BF8A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'13657CC3-7117-554B-BEA3-3209A6B1BF8A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'13657CC3-7117-554B-BEA3-3209A6B1BF8A','63A5B1A9-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '82EF33D7-9580-5CB8-9768-ADDE40E26B1F', 'sequence': {'long': 1430}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '63A5B2B2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706916813350378, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'82EF33D7-9580-5CB8-9768-ADDE40E26B1F','1430','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','63A5B2B2-36C2-11E8-BF66-D9AA8AFF4A69','1522706916813350378','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'82EF33D7-9580-5CB8-9768-ADDE40E26B1F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'82EF33D7-9580-5CB8-9768-ADDE40E26B1F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'82EF33D7-9580-5CB8-9768-ADDE40E26B1F','63A5B2B2-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '643E462F-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'643E462F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'643E462F-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'643E462F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '643E451E-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'643E451E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'643E451E-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'643E451E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C4C20C45-A7C5-5C80-918B-C0E8130103F7', 'sequence': {'long': 1431}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '643E451E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '643E462F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706916813350378, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C4C20C45-A7C5-5C80-918B-C0E8130103F7','1431','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','643E451E-36C2-11E8-BF66-D9AA8AFF4A69','643E462F-36C2-11E8-BF66-D9AA8AFF4A69','1522706916813350378','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C4C20C45-A7C5-5C80-918B-C0E8130103F7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C4C20C45-A7C5-5C80-918B-C0E8130103F7','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C4C20C45-A7C5-5C80-918B-C0E8130103F7','643E451E-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'C4C20C45-A7C5-5C80-918B-C0E8130103F7','643E462F-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A300CBC5-0720-5CBB-8622-C62E6F6A1CBB', 'sequence': {'long': 1432}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706916813350378, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A300CBC5-0720-5CBB-8622-C62E6F6A1CBB','1432','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706916813350378','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A300CBC5-0720-5CBB-8622-C62E6F6A1CBB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A300CBC5-0720-5CBB-8622-C62E6F6A1CBB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '50DE3277-35E0-52D9-A778-A1E27B522850', 'sequence': {'long': 1433}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706916813350378, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'50DE3277-35E0-52D9-A778-A1E27B522850','1433','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706916813350378','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'50DE3277-35E0-52D9-A778-A1E27B522850','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'50DE3277-35E0-52D9-A778-A1E27B522850','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '22A766DE-BB68-568F-A0DB-13349EB7DCEE', 'sequence': {'long': 1434}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706916813350378, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'22A766DE-BB68-568F-A0DB-13349EB7DCEE','1434','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706916813350378','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'22A766DE-BB68-568F-A0DB-13349EB7DCEE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'22A766DE-BB68-568F-A0DB-13349EB7DCEE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FDD95867-A700-5A81-BFDC-7F793C290270', 'sequence': {'long': 1435}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706916813350378, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FDD95867-A700-5A81-BFDC-7F793C290270','1435','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706916813350378','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FDD95867-A700-5A81-BFDC-7F793C290270','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FDD95867-A700-5A81-BFDC-7F793C290270','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5B0B0766-8DF1-56A5-92A1-B7557ACB5C6F', 'sequence': {'long': 1436}, 'type': 'EVENT_READ', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706917033351575, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '3', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5B0B0766-8DF1-56A5-92A1-B7557ACB5C6F','1436','EVENT_READ','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706917033351575','aue_read','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','3','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5B0B0766-8DF1-56A5-92A1-B7557ACB5C6F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5B0B0766-8DF1-56A5-92A1-B7557ACB5C6F','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5B0B0766-8DF1-56A5-92A1-B7557ACB5C6F','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A46B3B5D-8472-5EB6-8B4B-2E40773B907C', 'sequence': {'long': 1437}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'E8937A0F-3389-E159-8933-7B9A99E19EDB'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706917033351575, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A46B3B5D-8472-5EB6-8B4B-2E40773B907C','1437','EVENT_CLOSE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','E8937A0F-3389-E159-8933-7B9A99E19EDB','1522706917033351575','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A46B3B5D-8472-5EB6-8B4B-2E40773B907C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A46B3B5D-8472-5EB6-8B4B-2E40773B907C','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A46B3B5D-8472-5EB6-8B4B-2E40773B907C','E8937A0F-3389-E159-8933-7B9A99E19EDB','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9D592C4C-045F-5F59-9E65-0FBDD871F663', 'sequence': {'long': 1438}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706917033351575, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '1', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9D592C4C-045F-5F59-9E65-0FBDD871F663','1438','EVENT_WRITE','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706917033351575','aue_write','11','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','1','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9D592C4C-045F-5F59-9E65-0FBDD871F663','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9D592C4C-045F-5F59-9E65-0FBDD871F663','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9D592C4C-045F-5F59-9E65-0FBDD871F663','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9C78AAD0-29E1-5C97-B984-EC3FA51F8602', 'sequence': {'long': 1439}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100142}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706917033351575, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'less', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9C78AAD0-29E1-5C97-B984-EC3FA51F8602','1439','EVENT_EXIT','100142','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','1522706917033351575','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','less','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9C78AAD0-29E1-5C97-B984-EC3FA51F8602','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9C78AAD0-29E1-5C97-B984-EC3FA51F8602','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9C78AAD0-29E1-5C97-B984-EC3FA51F8602','5CF12CEA-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F6998A43-B978-5E36-9AA1-7AFACAEF945F', 'sequence': {'long': 1440}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100195}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '423C17F2-36B9-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'ED281817-20F6-7E52-B620-7E7B827E05AF'}, 'predicateObjectPath': {'string': '/dev/tty'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706917033351575, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/tty', 'fd': '2', 'exec': 'sh', 'ppid': '2336'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F6998A43-B978-5E36-9AA1-7AFACAEF945F','1440','EVENT_WRITE','100195','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','ED281817-20F6-7E52-B620-7E7B827E05AF','/dev/tty','1522706917033351575','aue_write','2','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/tty','2','sh','2336');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F6998A43-B978-5E36-9AA1-7AFACAEF945F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F6998A43-B978-5E36-9AA1-7AFACAEF945F','423C17F2-36B9-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F6998A43-B978-5E36-9AA1-7AFACAEF945F','ED281817-20F6-7E52-B620-7E7B827E05AF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '80D317D6-13BC-55D7-ACA0-BDC3599E7BA9', 'sequence': {'long': 1441}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '643E451E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706917813349504, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'80D317D6-13BC-55D7-ACA0-BDC3599E7BA9','1441','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','643E451E-36C2-11E8-BF66-D9AA8AFF4A69','1522706917813349504','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'80D317D6-13BC-55D7-ACA0-BDC3599E7BA9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'80D317D6-13BC-55D7-ACA0-BDC3599E7BA9','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'80D317D6-13BC-55D7-ACA0-BDC3599E7BA9','643E451E-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A2CB2091-D22E-57C5-A2B9-64012571C5D5', 'sequence': {'long': 1442}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '643E462F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706917813349504, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A2CB2091-D22E-57C5-A2B9-64012571C5D5','1442','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','643E462F-36C2-11E8-BF66-D9AA8AFF4A69','1522706917813349504','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A2CB2091-D22E-57C5-A2B9-64012571C5D5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A2CB2091-D22E-57C5-A2B9-64012571C5D5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A2CB2091-D22E-57C5-A2B9-64012571C5D5','643E462F-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '64D6C846-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'64D6C846-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'64D6C846-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'64D6C846-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '64D6C793-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'64D6C793-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'64D6C793-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'64D6C793-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3F4A5832-1438-5450-8790-640DD8EB1099', 'sequence': {'long': 1443}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '64D6C793-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '64D6C846-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706917813349504, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3F4A5832-1438-5450-8790-640DD8EB1099','1443','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','64D6C793-36C2-11E8-BF66-D9AA8AFF4A69','64D6C846-36C2-11E8-BF66-D9AA8AFF4A69','1522706917813349504','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3F4A5832-1438-5450-8790-640DD8EB1099','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3F4A5832-1438-5450-8790-640DD8EB1099','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3F4A5832-1438-5450-8790-640DD8EB1099','64D6C793-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'3F4A5832-1438-5450-8790-640DD8EB1099','64D6C846-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E41EE771-62BE-5E49-84BE-E6B148062190', 'sequence': {'long': 1444}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706917813349504, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E41EE771-62BE-5E49-84BE-E6B148062190','1444','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706917813349504','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E41EE771-62BE-5E49-84BE-E6B148062190','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E41EE771-62BE-5E49-84BE-E6B148062190','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3FEE131A-18D8-52A1-8CD0-B3AF7E06EA78', 'sequence': {'long': 1445}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706917813349504, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3FEE131A-18D8-52A1-8CD0-B3AF7E06EA78','1445','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706917813349504','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3FEE131A-18D8-52A1-8CD0-B3AF7E06EA78','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3FEE131A-18D8-52A1-8CD0-B3AF7E06EA78','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E753246F-DF18-52C2-96D0-BF7C88397B7F', 'sequence': {'long': 1446}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706917813349504, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E753246F-DF18-52C2-96D0-BF7C88397B7F','1446','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706917813349504','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E753246F-DF18-52C2-96D0-BF7C88397B7F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E753246F-DF18-52C2-96D0-BF7C88397B7F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3FE26679-6257-569D-B2E3-0AFA86709F67', 'sequence': {'long': 1447}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706917813349504, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3FE26679-6257-569D-B2E3-0AFA86709F67','1447','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706917813349504','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3FE26679-6257-569D-B2E3-0AFA86709F67','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3FE26679-6257-569D-B2E3-0AFA86709F67','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A3630C92-2733-5A5F-B300-50AD718B5451', 'sequence': {'long': 1448}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '64D6C793-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706918813349940, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A3630C92-2733-5A5F-B300-50AD718B5451','1448','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','64D6C793-36C2-11E8-BF66-D9AA8AFF4A69','1522706918813349940','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A3630C92-2733-5A5F-B300-50AD718B5451','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A3630C92-2733-5A5F-B300-50AD718B5451','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A3630C92-2733-5A5F-B300-50AD718B5451','64D6C793-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F5B60704-AE67-5800-9ECE-403407EAC4DA', 'sequence': {'long': 1449}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '64D6C846-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706918813349940, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F5B60704-AE67-5800-9ECE-403407EAC4DA','1449','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','64D6C846-36C2-11E8-BF66-D9AA8AFF4A69','1522706918813349940','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F5B60704-AE67-5800-9ECE-403407EAC4DA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F5B60704-AE67-5800-9ECE-403407EAC4DA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F5B60704-AE67-5800-9ECE-403407EAC4DA','64D6C846-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6570298F-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6570298F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6570298F-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6570298F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '65702878-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'65702878-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'65702878-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'65702878-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C6BB7C26-371C-572A-A4D2-1486380C7201', 'sequence': {'long': 1450}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '65702878-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6570298F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706918813349940, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C6BB7C26-371C-572A-A4D2-1486380C7201','1450','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','65702878-36C2-11E8-BF66-D9AA8AFF4A69','6570298F-36C2-11E8-BF66-D9AA8AFF4A69','1522706918813349940','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C6BB7C26-371C-572A-A4D2-1486380C7201','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C6BB7C26-371C-572A-A4D2-1486380C7201','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C6BB7C26-371C-572A-A4D2-1486380C7201','65702878-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'C6BB7C26-371C-572A-A4D2-1486380C7201','6570298F-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7F66661E-19FE-5AE3-BC42-B060F4819EFC', 'sequence': {'long': 1451}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706918813349940, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7F66661E-19FE-5AE3-BC42-B060F4819EFC','1451','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706918813349940','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7F66661E-19FE-5AE3-BC42-B060F4819EFC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7F66661E-19FE-5AE3-BC42-B060F4819EFC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D5A8FF48-C968-5154-8411-81C29E4B5D45', 'sequence': {'long': 1452}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706918813349940, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D5A8FF48-C968-5154-8411-81C29E4B5D45','1452','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706918813349940','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D5A8FF48-C968-5154-8411-81C29E4B5D45','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D5A8FF48-C968-5154-8411-81C29E4B5D45','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B21AA7E7-223C-5183-973D-3C4D918AAC08', 'sequence': {'long': 1453}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706918813349940, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B21AA7E7-223C-5183-973D-3C4D918AAC08','1453','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706918813349940','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B21AA7E7-223C-5183-973D-3C4D918AAC08','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B21AA7E7-223C-5183-973D-3C4D918AAC08','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4CEBB069-7AA7-5B6B-B286-28802AEB43E1', 'sequence': {'long': 1454}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706918813349940, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4CEBB069-7AA7-5B6B-B286-28802AEB43E1','1454','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706918813349940','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4CEBB069-7AA7-5B6B-B286-28802AEB43E1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4CEBB069-7AA7-5B6B-B286-28802AEB43E1','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0D945A95-EBE3-58D3-B5FC-054B92F59146', 'sequence': {'long': 1455}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '65702878-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706919813354926, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0D945A95-EBE3-58D3-B5FC-054B92F59146','1455','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','65702878-36C2-11E8-BF66-D9AA8AFF4A69','1522706919813354926','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0D945A95-EBE3-58D3-B5FC-054B92F59146','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0D945A95-EBE3-58D3-B5FC-054B92F59146','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0D945A95-EBE3-58D3-B5FC-054B92F59146','65702878-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D41A4D89-0126-531A-A448-0AEF21AA2254', 'sequence': {'long': 1456}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6570298F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706919813354926, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D41A4D89-0126-531A-A448-0AEF21AA2254','1456','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6570298F-36C2-11E8-BF66-D9AA8AFF4A69','1522706919813354926','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D41A4D89-0126-531A-A448-0AEF21AA2254','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D41A4D89-0126-531A-A448-0AEF21AA2254','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D41A4D89-0126-531A-A448-0AEF21AA2254','6570298F-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6607F327-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6607F327-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6607F327-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6607F327-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6607F275-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6607F275-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6607F275-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6607F275-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7454B47E-2195-5FE7-AB4D-36DF0B95C6AE', 'sequence': {'long': 1457}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6607F275-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6607F327-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706919813354926, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7454B47E-2195-5FE7-AB4D-36DF0B95C6AE','1457','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6607F275-36C2-11E8-BF66-D9AA8AFF4A69','6607F327-36C2-11E8-BF66-D9AA8AFF4A69','1522706919813354926','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7454B47E-2195-5FE7-AB4D-36DF0B95C6AE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7454B47E-2195-5FE7-AB4D-36DF0B95C6AE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7454B47E-2195-5FE7-AB4D-36DF0B95C6AE','6607F275-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'7454B47E-2195-5FE7-AB4D-36DF0B95C6AE','6607F327-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A9A9821C-9471-55F7-A9F1-E25531846A90', 'sequence': {'long': 1458}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706919813354926, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A9A9821C-9471-55F7-A9F1-E25531846A90','1458','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706919813354926','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A9A9821C-9471-55F7-A9F1-E25531846A90','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A9A9821C-9471-55F7-A9F1-E25531846A90','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8B9378DD-6A2F-5CED-A042-A89C0B5D0AD4', 'sequence': {'long': 1459}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706919813354926, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8B9378DD-6A2F-5CED-A042-A89C0B5D0AD4','1459','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706919813354926','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8B9378DD-6A2F-5CED-A042-A89C0B5D0AD4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8B9378DD-6A2F-5CED-A042-A89C0B5D0AD4','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5E9AC9CE-02A7-5442-9455-867C2A1F3851', 'sequence': {'long': 1460}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706919813354926, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5E9AC9CE-02A7-5442-9455-867C2A1F3851','1460','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706919813354926','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5E9AC9CE-02A7-5442-9455-867C2A1F3851','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5E9AC9CE-02A7-5442-9455-867C2A1F3851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '597457AC-B25D-5DFB-A90D-22F70547DE26', 'sequence': {'long': 1461}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706919813354926, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'597457AC-B25D-5DFB-A90D-22F70547DE26','1461','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706919813354926','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'597457AC-B25D-5DFB-A90D-22F70547DE26','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'597457AC-B25D-5DFB-A90D-22F70547DE26','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9B2DAFAA-36A9-5204-876D-CFAF83EAD197', 'sequence': {'long': 1462}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6607F275-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706920813350712, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9B2DAFAA-36A9-5204-876D-CFAF83EAD197','1462','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6607F275-36C2-11E8-BF66-D9AA8AFF4A69','1522706920813350712','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9B2DAFAA-36A9-5204-876D-CFAF83EAD197','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9B2DAFAA-36A9-5204-876D-CFAF83EAD197','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9B2DAFAA-36A9-5204-876D-CFAF83EAD197','6607F275-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6B3A5E5B-E405-5F6B-A8D8-31658D73408C', 'sequence': {'long': 1463}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6607F327-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706920813350712, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6B3A5E5B-E405-5F6B-A8D8-31658D73408C','1463','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6607F327-36C2-11E8-BF66-D9AA8AFF4A69','1522706920813350712','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6B3A5E5B-E405-5F6B-A8D8-31658D73408C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6B3A5E5B-E405-5F6B-A8D8-31658D73408C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6B3A5E5B-E405-5F6B-A8D8-31658D73408C','6607F327-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '66A08C17-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'66A08C17-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'66A08C17-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'66A08C17-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '66A08B11-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'66A08B11-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'66A08B11-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'66A08B11-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3E635098-339F-5CA1-961C-0D3A6180F624', 'sequence': {'long': 1464}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '66A08B11-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '66A08C17-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706920813350712, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3E635098-339F-5CA1-961C-0D3A6180F624','1464','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','66A08B11-36C2-11E8-BF66-D9AA8AFF4A69','66A08C17-36C2-11E8-BF66-D9AA8AFF4A69','1522706920813350712','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3E635098-339F-5CA1-961C-0D3A6180F624','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3E635098-339F-5CA1-961C-0D3A6180F624','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3E635098-339F-5CA1-961C-0D3A6180F624','66A08B11-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'3E635098-339F-5CA1-961C-0D3A6180F624','66A08C17-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EC3F25EB-48CC-50DC-ACDB-DB2491D31141', 'sequence': {'long': 1465}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706920813350712, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EC3F25EB-48CC-50DC-ACDB-DB2491D31141','1465','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706920813350712','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EC3F25EB-48CC-50DC-ACDB-DB2491D31141','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EC3F25EB-48CC-50DC-ACDB-DB2491D31141','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F4D2F334-83DC-5A11-8CE9-15C10736D8F4', 'sequence': {'long': 1466}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706920813350712, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F4D2F334-83DC-5A11-8CE9-15C10736D8F4','1466','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706920813350712','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F4D2F334-83DC-5A11-8CE9-15C10736D8F4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F4D2F334-83DC-5A11-8CE9-15C10736D8F4','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5BC8F5DF-DA5E-5556-AE50-B51E8678B70B', 'sequence': {'long': 1467}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706920813350712, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5BC8F5DF-DA5E-5556-AE50-B51E8678B70B','1467','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706920813350712','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5BC8F5DF-DA5E-5556-AE50-B51E8678B70B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5BC8F5DF-DA5E-5556-AE50-B51E8678B70B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1B2EF2C5-990C-5ADD-A545-74F43E4AB861', 'sequence': {'long': 1468}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706920813350712, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1B2EF2C5-990C-5ADD-A545-74F43E4AB861','1468','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706920813350712','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1B2EF2C5-990C-5ADD-A545-74F43E4AB861','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1B2EF2C5-990C-5ADD-A545-74F43E4AB861','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D0AC4B55-79A0-528B-BA99-B796A2933941', 'sequence': {'long': 1469}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '66A08B11-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706921813349528, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D0AC4B55-79A0-528B-BA99-B796A2933941','1469','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','66A08B11-36C2-11E8-BF66-D9AA8AFF4A69','1522706921813349528','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D0AC4B55-79A0-528B-BA99-B796A2933941','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D0AC4B55-79A0-528B-BA99-B796A2933941','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D0AC4B55-79A0-528B-BA99-B796A2933941','66A08B11-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A03E801E-D512-5BB7-A768-0447DB89CCE3', 'sequence': {'long': 1470}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '66A08C17-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706921813349528, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A03E801E-D512-5BB7-A768-0447DB89CCE3','1470','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','66A08C17-36C2-11E8-BF66-D9AA8AFF4A69','1522706921813349528','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A03E801E-D512-5BB7-A768-0447DB89CCE3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A03E801E-D512-5BB7-A768-0447DB89CCE3','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A03E801E-D512-5BB7-A768-0447DB89CCE3','66A08C17-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '67391E13-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'67391E13-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'67391E13-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'67391E13-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '67391D13-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'67391D13-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'67391D13-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'67391D13-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7B07D99F-C674-56DC-9390-893D9AFBEE07', 'sequence': {'long': 1471}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67391D13-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '67391E13-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706921813349528, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7B07D99F-C674-56DC-9390-893D9AFBEE07','1471','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','67391D13-36C2-11E8-BF66-D9AA8AFF4A69','67391E13-36C2-11E8-BF66-D9AA8AFF4A69','1522706921813349528','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7B07D99F-C674-56DC-9390-893D9AFBEE07','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7B07D99F-C674-56DC-9390-893D9AFBEE07','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7B07D99F-C674-56DC-9390-893D9AFBEE07','67391D13-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'7B07D99F-C674-56DC-9390-893D9AFBEE07','67391E13-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '90AFC1D3-8754-5010-AAF4-5B05ED4944BF', 'sequence': {'long': 1472}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706921813349528, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'90AFC1D3-8754-5010-AAF4-5B05ED4944BF','1472','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706921813349528','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'90AFC1D3-8754-5010-AAF4-5B05ED4944BF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'90AFC1D3-8754-5010-AAF4-5B05ED4944BF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3B62156F-C316-5FFE-9C15-3A82F3210908', 'sequence': {'long': 1473}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706921813349528, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3B62156F-C316-5FFE-9C15-3A82F3210908','1473','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706921813349528','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3B62156F-C316-5FFE-9C15-3A82F3210908','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3B62156F-C316-5FFE-9C15-3A82F3210908','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DB9BE7C8-6E1D-536A-838E-8AB1CCAD7681', 'sequence': {'long': 1474}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706921813349528, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DB9BE7C8-6E1D-536A-838E-8AB1CCAD7681','1474','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706921813349528','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DB9BE7C8-6E1D-536A-838E-8AB1CCAD7681','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DB9BE7C8-6E1D-536A-838E-8AB1CCAD7681','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B56073C7-3EFC-5D0E-BCF8-00241827DABC', 'sequence': {'long': 1475}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706921813349528, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B56073C7-3EFC-5D0E-BCF8-00241827DABC','1475','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706921813349528','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B56073C7-3EFC-5D0E-BCF8-00241827DABC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B56073C7-3EFC-5D0E-BCF8-00241827DABC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FC6FE476-83A6-55A2-B823-E3CD2B5AA45F', 'sequence': {'long': 1476}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FC6FE476-83A6-55A2-B823-E3CD2B5AA45F','1476','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FC6FE476-83A6-55A2-B823-E3CD2B5AA45F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FC6FE476-83A6-55A2-B823-E3CD2B5AA45F','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '250D7881-5340-5080-9E43-7EF1334ECD7A', 'sequence': {'long': 1477}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'250D7881-5340-5080-9E43-7EF1334ECD7A','1477','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'250D7881-5340-5080-9E43-7EF1334ECD7A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'250D7881-5340-5080-9E43-7EF1334ECD7A','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '67591808-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'67591808-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'67591808-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'67591808-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2FCE94A1-E986-5556-8D9B-A23DFAC670EE', 'sequence': {'long': 1478}, 'type': 'EVENT_CONNECT', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67591808-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_connect'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'address': 'public/pickup', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_address,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2FCE94A1-E986-5556-8D9B-A23DFAC670EE','1478','EVENT_CONNECT','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','67591808-36C2-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_connect','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','public/pickup','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2FCE94A1-E986-5556-8D9B-A23DFAC670EE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2FCE94A1-E986-5556-8D9B-A23DFAC670EE','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2FCE94A1-E986-5556-8D9B-A23DFAC670EE','67591808-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '67595B47-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'67595B47-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'67595B47-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'67595B47-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6DECA25D-73C4-5651-A963-7D7641B81C73', 'sequence': {'long': 1479}, 'type': 'EVENT_ACCEPT', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0D74DB-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '67595B47-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_accept'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'return_value': '11', 'address': '', 'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '11', 'fd': '6', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_return_value,properties_map_address,properties_map_host,properties_map_ret_fd1,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6DECA25D-73C4-5651-A963-7D7641B81C73','1479','EVENT_ACCEPT','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','0C0D74DB-3680-11E8-BF66-D9AA8AFF4A69','67595B47-36C2-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_accept','11','','83c8ed1f-5045-dbcd-b39f-918f0df4f851','11','6','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6DECA25D-73C4-5651-A963-7D7641B81C73','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6DECA25D-73C4-5651-A963-7D7641B81C73','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6DECA25D-73C4-5651-A963-7D7641B81C73','0C0D74DB-3680-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'6DECA25D-73C4-5651-A963-7D7641B81C73','67595B47-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '90D76A5E-7E41-51C6-B473-B7D5E51A34AE', 'sequence': {'long': 1480}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '6', 'fd': '3', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'90D76A5E-7E41-51C6-B473-B7D5E51A34AE','1480','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','6','3','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'90D76A5E-7E41-51C6-B473-B7D5E51A34AE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'90D76A5E-7E41-51C6-B473-B7D5E51A34AE','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F3296214-D2ED-53E0-91F9-54B1EFB6EE1A', 'sequence': {'long': 1481}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '1', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F3296214-D2ED-53E0-91F9-54B1EFB6EE1A','1481','EVENT_FCNTL','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','01','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','1','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F3296214-D2ED-53E0-91F9-54B1EFB6EE1A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F3296214-D2ED-53E0-91F9-54B1EFB6EE1A','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EBB64779-8C48-59C1-95C8-03ACC37261EA', 'sequence': {'long': 1482}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EBB64779-8C48-59C1-95C8-03ACC37261EA','1482','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EBB64779-8C48-59C1-95C8-03ACC37261EA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EBB64779-8C48-59C1-95C8-03ACC37261EA','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '735A3CCA-458A-5050-B409-8E8402BA7409', 'sequence': {'long': 1483}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '02'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '2', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'735A3CCA-458A-5050-B409-8E8402BA7409','1483','EVENT_FCNTL','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','02','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','2','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'735A3CCA-458A-5050-B409-8E8402BA7409','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'735A3CCA-458A-5050-B409-8E8402BA7409','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '495B5136-1006-5B18-A5D2-82435F75313E', 'sequence': {'long': 1484}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '1', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'495B5136-1006-5B18-A5D2-82435F75313E','1484','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','01','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','1','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'495B5136-1006-5B18-A5D2-82435F75313E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'495B5136-1006-5B18-A5D2-82435F75313E','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B8F61E02-A6BD-5C5E-AC3F-4B1A05688573', 'sequence': {'long': 1485}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '02'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '2', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B8F61E02-A6BD-5C5E-AC3F-4B1A05688573','1485','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','02','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','2','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B8F61E02-A6BD-5C5E-AC3F-4B1A05688573','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B8F61E02-A6BD-5C5E-AC3F-4B1A05688573','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '47DBFF71-330A-5108-82D6-0EBDD544BACC', 'sequence': {'long': 1486}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67591808-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'47DBFF71-330A-5108-82D6-0EBDD544BACC','1486','EVENT_WRITE','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','67591808-36C2-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706922023349726','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'47DBFF71-330A-5108-82D6-0EBDD544BACC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'47DBFF71-330A-5108-82D6-0EBDD544BACC','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'47DBFF71-330A-5108-82D6-0EBDD544BACC','67591808-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '468DAEDF-475C-5090-880A-DA4CEDDFB1AB', 'sequence': {'long': 1487}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '5', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'468DAEDF-475C-5090-880A-DA4CEDDFB1AB','1487','EVENT_WRITE','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706922023349726','aue_write','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','5','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'468DAEDF-475C-5090-880A-DA4CEDDFB1AB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'468DAEDF-475C-5090-880A-DA4CEDDFB1AB','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'468DAEDF-475C-5090-880A-DA4CEDDFB1AB','0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C96016AE-0A0D-5523-B77F-A764FE9F1795', 'sequence': {'long': 1488}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67591808-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C96016AE-0A0D-5523-B77F-A764FE9F1795','1488','EVENT_WRITE','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','67591808-36C2-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706922023349726','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C96016AE-0A0D-5523-B77F-A764FE9F1795','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C96016AE-0A0D-5523-B77F-A764FE9F1795','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C96016AE-0A0D-5523-B77F-A764FE9F1795','67591808-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5D8F54C0-17B8-52CE-9946-7746F436BBBF', 'sequence': {'long': 1489}, 'type': 'EVENT_READ', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67595B47-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '11', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5D8F54C0-17B8-52CE-9946-7746F436BBBF','1489','EVENT_READ','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','67595B47-36C2-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706922023349726','aue_read','2','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','11','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5D8F54C0-17B8-52CE-9946-7746F436BBBF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5D8F54C0-17B8-52CE-9946-7746F436BBBF','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5D8F54C0-17B8-52CE-9946-7746F436BBBF','67595B47-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6F40C67C-A947-5460-8336-B6AC1C9FF24E', 'sequence': {'long': 1490}, 'type': 'EVENT_READ', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0DB755-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '18', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6F40C67C-A947-5460-8336-B6AC1C9FF24E','1490','EVENT_READ','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','0C0DB755-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706922023349726','aue_read','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','18','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6F40C67C-A947-5460-8336-B6AC1C9FF24E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6F40C67C-A947-5460-8336-B6AC1C9FF24E','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6F40C67C-A947-5460-8336-B6AC1C9FF24E','0C0DB755-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '33DD3944-7851-588B-BC03-94FB7A06248D', 'sequence': {'long': 1491}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '586C56DA-CB56-745E-96CB-52069E742598'}, 'predicateObjectPath': {'string': '/var/spool/postfix/maildrop'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '7200'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '12', 'return_value': '12', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'33DD3944-7851-588B-BC03-94FB7A06248D','1491','EVENT_OPEN','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','586C56DA-CB56-745E-96CB-52069E742598','/var/spool/postfix/maildrop','1522706922023349726','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','7200','83c8ed1f-5045-dbcd-b39f-918f0df4f851','12','12','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'33DD3944-7851-588B-BC03-94FB7A06248D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'33DD3944-7851-588B-BC03-94FB7A06248D','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'33DD3944-7851-588B-BC03-94FB7A06248D','586C56DA-CB56-745E-96CB-52069E742598','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '097CB753-777F-5C48-B34A-00205EBDF763', 'sequence': {'long': 1492}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '586C56DA-CB56-745E-96CB-52069E742598'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '12', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'097CB753-777F-5C48-B34A-00205EBDF763','1492','EVENT_CLOSE','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','586C56DA-CB56-745E-96CB-52069E742598','1522706922023349726','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','12','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'097CB753-777F-5C48-B34A-00205EBDF763','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'097CB753-777F-5C48-B34A-00205EBDF763','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'097CB753-777F-5C48-B34A-00205EBDF763','586C56DA-CB56-745E-96CB-52069E742598','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9B44073B-6246-562D-9CDB-97B9EC8559EC', 'sequence': {'long': 1493}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '5', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9B44073B-6246-562D-9CDB-97B9EC8559EC','1493','EVENT_WRITE','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706922023349726','aue_write','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','5','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9B44073B-6246-562D-9CDB-97B9EC8559EC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9B44073B-6246-562D-9CDB-97B9EC8559EC','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9B44073B-6246-562D-9CDB-97B9EC8559EC','0C0DB7A1-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8E4E4F1F-9210-5D0C-B556-0E2D93799F43', 'sequence': {'long': 1494}, 'type': 'EVENT_READ', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0DB755-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '18', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8E4E4F1F-9210-5D0C-B556-0E2D93799F43','1494','EVENT_READ','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','0C0DB755-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706922023349726','aue_read','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','18','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8E4E4F1F-9210-5D0C-B556-0E2D93799F43','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8E4E4F1F-9210-5D0C-B556-0E2D93799F43','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8E4E4F1F-9210-5D0C-B556-0E2D93799F43','0C0DB755-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1D5A06D0-5FDF-5767-9421-E5A5104816C5', 'sequence': {'long': 1495}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100205}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67595B47-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '11', 'exec': 'pickup', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1D5A06D0-5FDF-5767-9421-E5A5104816C5','1495','EVENT_CLOSE','100205','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','67595B47-36C2-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','11','pickup','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1D5A06D0-5FDF-5767-9421-E5A5104816C5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1D5A06D0-5FDF-5767-9421-E5A5104816C5','0CF2BB3E-36B8-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1D5A06D0-5FDF-5767-9421-E5A5104816C5','67595B47-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '25DE8D24-7013-50F0-852E-021C77B0DFB6', 'sequence': {'long': 1496}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67591808-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922023349726, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'25DE8D24-7013-50F0-852E-021C77B0DFB6','1496','EVENT_CLOSE','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','67591808-36C2-11E8-BF66-D9AA8AFF4A69','1522706922023349726','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'25DE8D24-7013-50F0-852E-021C77B0DFB6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'25DE8D24-7013-50F0-852E-021C77B0DFB6','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'25DE8D24-7013-50F0-852E-021C77B0DFB6','67591808-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8CF00E3B-7F6E-59C9-AD95-5D5C96B84E29', 'sequence': {'long': 1497}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67391D13-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922803349444, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8CF00E3B-7F6E-59C9-AD95-5D5C96B84E29','1497','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','67391D13-36C2-11E8-BF66-D9AA8AFF4A69','1522706922803349444','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8CF00E3B-7F6E-59C9-AD95-5D5C96B84E29','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8CF00E3B-7F6E-59C9-AD95-5D5C96B84E29','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8CF00E3B-7F6E-59C9-AD95-5D5C96B84E29','67391D13-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9EA974D5-B6F0-588D-B9E4-7C9C577E007C', 'sequence': {'long': 1498}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67391E13-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922803349444, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9EA974D5-B6F0-588D-B9E4-7C9C577E007C','1498','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','67391E13-36C2-11E8-BF66-D9AA8AFF4A69','1522706922803349444','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9EA974D5-B6F0-588D-B9E4-7C9C577E007C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9EA974D5-B6F0-588D-B9E4-7C9C577E007C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9EA974D5-B6F0-588D-B9E4-7C9C577E007C','67391E13-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '67D13B4A-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'67D13B4A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'67D13B4A-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'67D13B4A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '67D13A99-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'67D13A99-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'67D13A99-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'67D13A99-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '51ACEA2D-37BF-5249-BCFA-18EF3D58066F', 'sequence': {'long': 1499}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67D13A99-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '67D13B4A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706922803349444, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'51ACEA2D-37BF-5249-BCFA-18EF3D58066F','1499','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','67D13A99-36C2-11E8-BF66-D9AA8AFF4A69','67D13B4A-36C2-11E8-BF66-D9AA8AFF4A69','1522706922803349444','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'51ACEA2D-37BF-5249-BCFA-18EF3D58066F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'51ACEA2D-37BF-5249-BCFA-18EF3D58066F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'51ACEA2D-37BF-5249-BCFA-18EF3D58066F','67D13A99-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'51ACEA2D-37BF-5249-BCFA-18EF3D58066F','67D13B4A-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '792DCD67-5B82-56AE-A5D6-7F57DEC69C96', 'sequence': {'long': 1500}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922803349444, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'792DCD67-5B82-56AE-A5D6-7F57DEC69C96','1500','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706922803349444','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'792DCD67-5B82-56AE-A5D6-7F57DEC69C96','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'792DCD67-5B82-56AE-A5D6-7F57DEC69C96','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '60F8BB55-65E1-5E03-AC88-92022A58E852', 'sequence': {'long': 1501}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922803349444, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'60F8BB55-65E1-5E03-AC88-92022A58E852','1501','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706922803349444','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'60F8BB55-65E1-5E03-AC88-92022A58E852','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'60F8BB55-65E1-5E03-AC88-92022A58E852','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B269424C-2251-543A-967F-7453BAF15177', 'sequence': {'long': 1502}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922803349444, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B269424C-2251-543A-967F-7453BAF15177','1502','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706922803349444','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B269424C-2251-543A-967F-7453BAF15177','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B269424C-2251-543A-967F-7453BAF15177','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '60A07B67-DB92-5180-A28A-3459977BD292', 'sequence': {'long': 1503}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706922813350844, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'60A07B67-DB92-5180-A28A-3459977BD292','1503','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706922813350844','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'60A07B67-DB92-5180-A28A-3459977BD292','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'60A07B67-DB92-5180-A28A-3459977BD292','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3C1239F8-88BD-5C15-B980-EE1A618ACB61', 'sequence': {'long': 1504}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46494307-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3C1239F8-88BD-5C15-B980-EE1A618ACB61','1504','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','46494307-36C2-11E8-BF66-D9AA8AFF4A69','46494307-36C2-11E8-BF66-D9AA8AFF4A69','1522706923573349242','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3C1239F8-88BD-5C15-B980-EE1A618ACB61','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3C1239F8-88BD-5C15-B980-EE1A618ACB61','46494307-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3C1239F8-88BD-5C15-B980-EE1A618ACB61','46494307-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2813, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706923573349242, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2813','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706923573349242','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '234A9DA7-75DF-59A2-AF2F-59F3EB1E984F', 'sequence': {'long': 1505}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2813', 'exec': 'bash', 'arg_pid': '2813', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'234A9DA7-75DF-59A2-AF2F-59F3EB1E984F','1505','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','1522706923573349242','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2813','bash','2813','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'234A9DA7-75DF-59A2-AF2F-59F3EB1E984F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'234A9DA7-75DF-59A2-AF2F-59F3EB1E984F','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'234A9DA7-75DF-59A2-AF2F-59F3EB1E984F','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9EF2BBF5-BDEC-58BE-AFA7-EB3D61854239', 'sequence': {'long': 1506}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9EF2BBF5-BDEC-58BE-AFA7-EB3D61854239','1506','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706923573349242','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9EF2BBF5-BDEC-58BE-AFA7-EB3D61854239','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9EF2BBF5-BDEC-58BE-AFA7-EB3D61854239','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9EF2BBF5-BDEC-58BE-AFA7-EB3D61854239','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E9935305-70E6-5B84-BC94-CD1FD03B7F61', 'sequence': {'long': 1507}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D344F9D-3989-8550-8939-91A3B085C709'}, 'predicateObjectPath': {'string': '/usr/home/darpa/kernel_mem.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '0209'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E9935305-70E6-5B84-BC94-CD1FD03B7F61','1507','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4D344F9D-3989-8550-8939-91A3B085C709','/usr/home/darpa/kernel_mem.txt','1522706923573349242','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','0209','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E9935305-70E6-5B84-BC94-CD1FD03B7F61','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E9935305-70E6-5B84-BC94-CD1FD03B7F61','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E9935305-70E6-5B84-BC94-CD1FD03B7F61','4D344F9D-3989-8550-8939-91A3B085C709','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4CF84ACC-D7BE-5285-ACD0-A8D0A86CBADA', 'sequence': {'long': 1508}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D344F9D-3989-8550-8939-91A3B085C709'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4CF84ACC-D7BE-5285-ACD0-A8D0A86CBADA','1508','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4D344F9D-3989-8550-8939-91A3B085C709','1522706923573349242','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4CF84ACC-D7BE-5285-ACD0-A8D0A86CBADA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4CF84ACC-D7BE-5285-ACD0-A8D0A86CBADA','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4CF84ACC-D7BE-5285-ACD0-A8D0A86CBADA','4D344F9D-3989-8550-8939-91A3B085C709','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EA676C02-FA0E-562B-8717-E091DADC55BF', 'sequence': {'long': 1509}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '330061CF-6BB3-C45E-B36B-B89D7EC4F443'}, 'predicateObjectPath': {'string': '/usr/bin/vmstat'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': '/usr/bin/vmstat -m', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EA676C02-FA0E-562B-8717-E091DADC55BF','1509','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','330061CF-6BB3-C45E-B36B-B89D7EC4F443','/usr/bin/vmstat','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706923573349242','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/bin/vmstat -m','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EA676C02-FA0E-562B-8717-E091DADC55BF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EA676C02-FA0E-562B-8717-E091DADC55BF','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EA676C02-FA0E-562B-8717-E091DADC55BF','330061CF-6BB3-C45E-B36B-B89D7EC4F443','affects'),(nextval('edge_number_seq'),'EA676C02-FA0E-562B-8717-E091DADC55BF','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5226FAE8-D60D-54A4-8820-B259C1CE02F6', 'sequence': {'long': 1510}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5226FAE8-D60D-54A4-8820-B259C1CE02F6','1510','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706923573349242','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5226FAE8-D60D-54A4-8820-B259C1CE02F6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5226FAE8-D60D-54A4-8820-B259C1CE02F6','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5226FAE8-D60D-54A4-8820-B259C1CE02F6','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1260EA98-7533-5123-B3F2-18E023B3A768', 'sequence': {'long': 1511}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1260EA98-7533-5123-B3F2-18E023B3A768','1511','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706923573349242','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1260EA98-7533-5123-B3F2-18E023B3A768','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1260EA98-7533-5123-B3F2-18E023B3A768','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1260EA98-7533-5123-B3F2-18E023B3A768','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CD9BF71F-6E8C-52AC-8538-31980CD39B58', 'sequence': {'long': 1512}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CD9BF71F-6E8C-52AC-8538-31980CD39B58','1512','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706923573349242','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CD9BF71F-6E8C-52AC-8538-31980CD39B58','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CD9BF71F-6E8C-52AC-8538-31980CD39B58','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CD9BF71F-6E8C-52AC-8538-31980CD39B58','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B4B60D10-6662-5909-B96F-82D4C7226ECE', 'sequence': {'long': 1513}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B4B60D10-6662-5909-B96F-82D4C7226ECE','1513','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706923573349242','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B4B60D10-6662-5909-B96F-82D4C7226ECE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B4B60D10-6662-5909-B96F-82D4C7226ECE','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B4B60D10-6662-5909-B96F-82D4C7226ECE','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A23750C5-EBF5-5F0A-8675-5374FB75F683', 'sequence': {'long': 1514}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A23750C5-EBF5-5F0A-8675-5374FB75F683','1514','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706923573349242','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A23750C5-EBF5-5F0A-8675-5374FB75F683','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A23750C5-EBF5-5F0A-8675-5374FB75F683','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A23750C5-EBF5-5F0A-8675-5374FB75F683','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5A1F035C-789D-5923-B775-CEDC1A73031A', 'sequence': {'long': 1515}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5A1F035C-789D-5923-B775-CEDC1A73031A','1515','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706923573349242','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5A1F035C-789D-5923-B775-CEDC1A73031A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5A1F035C-789D-5923-B775-CEDC1A73031A','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5A1F035C-789D-5923-B775-CEDC1A73031A','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0024BAFA-2EE8-571D-B367-9A1ADDE76001', 'sequence': {'long': 1516}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0024BAFA-2EE8-571D-B367-9A1ADDE76001','1516','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706923573349242','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0024BAFA-2EE8-571D-B367-9A1ADDE76001','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0024BAFA-2EE8-571D-B367-9A1ADDE76001','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0024BAFA-2EE8-571D-B367-9A1ADDE76001','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '45BF0A20-F4C8-52C6-B0C3-6B853E7B05B1', 'sequence': {'long': 1517}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': {'string': '/lib/libdevstat.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'45BF0A20-F4C8-52C6-B0C3-6B853E7B05B1','1517','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','/lib/libdevstat.so.7','1522706923573349242','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'45BF0A20-F4C8-52C6-B0C3-6B853E7B05B1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'45BF0A20-F4C8-52C6-B0C3-6B853E7B05B1','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'45BF0A20-F4C8-52C6-B0C3-6B853E7B05B1','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '27F6655D-4926-5292-9D29-207400A2DE40', 'sequence': {'long': 1518}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'27F6655D-4926-5292-9D29-207400A2DE40','1518','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706923573349242','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'27F6655D-4926-5292-9D29-207400A2DE40','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'27F6655D-4926-5292-9D29-207400A2DE40','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'27F6655D-4926-5292-9D29-207400A2DE40','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '33B889FD-0EAE-5875-9B7D-1C356725B5E4', 'sequence': {'long': 1519}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'33B889FD-0EAE-5875-9B7D-1C356725B5E4','1519','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706923573349242','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'33B889FD-0EAE-5875-9B7D-1C356725B5E4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'33B889FD-0EAE-5875-9B7D-1C356725B5E4','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'33B889FD-0EAE-5875-9B7D-1C356725B5E4','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0F8B4617-F2A9-56B5-8B08-6AB1B2D9F1A3', 'sequence': {'long': 1520}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8572928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'0F8B4617-F2A9-56B5-8B08-6AB1B2D9F1A3','1520','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706923573349242','aue_mmap','8572928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0F8B4617-F2A9-56B5-8B08-6AB1B2D9F1A3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0F8B4617-F2A9-56B5-8B08-6AB1B2D9F1A3','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0F8B4617-F2A9-56B5-8B08-6AB1B2D9F1A3','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '99F402B5-6190-5DBE-9BEC-F89D5193C6D2', 'sequence': {'long': 1521}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8572928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'99F402B5-6190-5DBE-9BEC-F89D5193C6D2','1521','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706923573349242','aue_mmap','8572928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'99F402B5-6190-5DBE-9BEC-F89D5193C6D2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'99F402B5-6190-5DBE-9BEC-F89D5193C6D2','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'99F402B5-6190-5DBE-9BEC-F89D5193C6D2','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E07730DE-F3D0-54FB-AB9A-EF6942BA4AF7', 'sequence': {'long': 1522}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923573349242, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10690560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E07730DE-F3D0-54FB-AB9A-EF6942BA4AF7','1522','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706923573349242','aue_mmap','10690560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E07730DE-F3D0-54FB-AB9A-EF6942BA4AF7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E07730DE-F3D0-54FB-AB9A-EF6942BA4AF7','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E07730DE-F3D0-54FB-AB9A-EF6942BA4AF7','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CCEACFE8-011E-5220-9699-B175A5E15AA5', 'sequence': {'long': 1523}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10690560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'CCEACFE8-011E-5220-9699-B175A5E15AA5','1523','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706923583351012','aue_mmap','10690560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CCEACFE8-011E-5220-9699-B175A5E15AA5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CCEACFE8-011E-5220-9699-B175A5E15AA5','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CCEACFE8-011E-5220-9699-B175A5E15AA5','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '261A0D30-E902-5895-8DF7-F8C34570F9AE', 'sequence': {'long': 1524}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'261A0D30-E902-5895-8DF7-F8C34570F9AE','1524','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706923583351012','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'261A0D30-E902-5895-8DF7-F8C34570F9AE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'261A0D30-E902-5895-8DF7-F8C34570F9AE','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'261A0D30-E902-5895-8DF7-F8C34570F9AE','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '92E23C4A-B5F8-5E3D-8D9E-E800E0AD743B', 'sequence': {'long': 1525}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': {'string': '/lib/libkvm.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'92E23C4A-B5F8-5E3D-8D9E-E800E0AD743B','1525','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','/lib/libkvm.so.7','1522706923583351012','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'92E23C4A-B5F8-5E3D-8D9E-E800E0AD743B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'92E23C4A-B5F8-5E3D-8D9E-E800E0AD743B','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'92E23C4A-B5F8-5E3D-8D9E-E800E0AD743B','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E38E378A-72E2-529A-AAE2-2286FDE54B24', 'sequence': {'long': 1526}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E38E378A-72E2-529A-AAE2-2286FDE54B24','1526','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706923583351012','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E38E378A-72E2-529A-AAE2-2286FDE54B24','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E38E378A-72E2-529A-AAE2-2286FDE54B24','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E38E378A-72E2-529A-AAE2-2286FDE54B24','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B426B8DD-E622-5104-B9FB-7F12BD0E9D57', 'sequence': {'long': 1527}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B426B8DD-E622-5104-B9FB-7F12BD0E9D57','1527','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706923583351012','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B426B8DD-E622-5104-B9FB-7F12BD0E9D57','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B426B8DD-E622-5104-B9FB-7F12BD0E9D57','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B426B8DD-E622-5104-B9FB-7F12BD0E9D57','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '22C4BD78-675C-5AC4-B79F-E98864B21FB1', 'sequence': {'long': 1528}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10694656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'22C4BD78-675C-5AC4-B79F-E98864B21FB1','1528','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706923583351012','aue_mmap','10694656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'22C4BD78-675C-5AC4-B79F-E98864B21FB1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'22C4BD78-675C-5AC4-B79F-E98864B21FB1','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'22C4BD78-675C-5AC4-B79F-E98864B21FB1','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1E84BDD2-2F05-5FD1-8F29-B8F84F2FD6D7', 'sequence': {'long': 1529}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10694656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1E84BDD2-2F05-5FD1-8F29-B8F84F2FD6D7','1529','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706923583351012','aue_mmap','10694656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1E84BDD2-2F05-5FD1-8F29-B8F84F2FD6D7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1E84BDD2-2F05-5FD1-8F29-B8F84F2FD6D7','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1E84BDD2-2F05-5FD1-8F29-B8F84F2FD6D7','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4B77FAC1-4F4C-5EED-B924-B91FC2B2CDE7', 'sequence': {'long': 1530}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12853248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'4B77FAC1-4F4C-5EED-B924-B91FC2B2CDE7','1530','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706923583351012','aue_mmap','12853248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4B77FAC1-4F4C-5EED-B924-B91FC2B2CDE7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4B77FAC1-4F4C-5EED-B924-B91FC2B2CDE7','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4B77FAC1-4F4C-5EED-B924-B91FC2B2CDE7','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '45FB760E-EFCD-57BD-A0F7-F8906733B75A', 'sequence': {'long': 1531}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12853248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'45FB760E-EFCD-57BD-A0F7-F8906733B75A','1531','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706923583351012','aue_mmap','12853248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'45FB760E-EFCD-57BD-A0F7-F8906733B75A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'45FB760E-EFCD-57BD-A0F7-F8906733B75A','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'45FB760E-EFCD-57BD-A0F7-F8906733B75A','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FF5A40FF-00C9-5260-8A1C-97862F8E2727', 'sequence': {'long': 1532}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FF5A40FF-00C9-5260-8A1C-97862F8E2727','1532','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706923583351012','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FF5A40FF-00C9-5260-8A1C-97862F8E2727','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FF5A40FF-00C9-5260-8A1C-97862F8E2727','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FF5A40FF-00C9-5260-8A1C-97862F8E2727','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '72E87103-539D-5456-A2E0-2474EBF511E9', 'sequence': {'long': 1533}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': {'string': '/usr/lib/libmemstat.so.3'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'72E87103-539D-5456-A2E0-2474EBF511E9','1533','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','/usr/lib/libmemstat.so.3','1522706923583351012','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'72E87103-539D-5456-A2E0-2474EBF511E9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'72E87103-539D-5456-A2E0-2474EBF511E9','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'72E87103-539D-5456-A2E0-2474EBF511E9','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '37269EC2-5637-58A1-9D0C-82F26C975E31', 'sequence': {'long': 1534}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'37269EC2-5637-58A1-9D0C-82F26C975E31','1534','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706923583351012','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'37269EC2-5637-58A1-9D0C-82F26C975E31','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'37269EC2-5637-58A1-9D0C-82F26C975E31','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'37269EC2-5637-58A1-9D0C-82F26C975E31','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F72C73C3-0DCC-57F6-AEDA-E39AEA6A1233', 'sequence': {'long': 1535}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F72C73C3-0DCC-57F6-AEDA-E39AEA6A1233','1535','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706923583351012','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F72C73C3-0DCC-57F6-AEDA-E39AEA6A1233','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F72C73C3-0DCC-57F6-AEDA-E39AEA6A1233','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F72C73C3-0DCC-57F6-AEDA-E39AEA6A1233','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0DE9CD05-A6B5-5574-ACF6-C407671BC426', 'sequence': {'long': 1536}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12857344}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'0DE9CD05-A6B5-5574-ACF6-C407671BC426','1536','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706923583351012','aue_mmap','12857344','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0DE9CD05-A6B5-5574-ACF6-C407671BC426','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0DE9CD05-A6B5-5574-ACF6-C407671BC426','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0DE9CD05-A6B5-5574-ACF6-C407671BC426','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '12D44884-F9FC-5833-A14B-73D2310B69FF', 'sequence': {'long': 1537}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12857344}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'12D44884-F9FC-5833-A14B-73D2310B69FF','1537','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706923583351012','aue_mmap','12857344','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'12D44884-F9FC-5833-A14B-73D2310B69FF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'12D44884-F9FC-5833-A14B-73D2310B69FF','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'12D44884-F9FC-5833-A14B-73D2310B69FF','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E6ECF3D2-2AA1-5545-BB99-5044F32ABB7A', 'sequence': {'long': 1538}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14966784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E6ECF3D2-2AA1-5545-BB99-5044F32ABB7A','1538','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706923583351012','aue_mmap','14966784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E6ECF3D2-2AA1-5545-BB99-5044F32ABB7A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E6ECF3D2-2AA1-5545-BB99-5044F32ABB7A','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E6ECF3D2-2AA1-5545-BB99-5044F32ABB7A','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '35B61995-1322-587E-AE77-9CAF68B7EFDC', 'sequence': {'long': 1539}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14966784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'35B61995-1322-587E-AE77-9CAF68B7EFDC','1539','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706923583351012','aue_mmap','14966784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'35B61995-1322-587E-AE77-9CAF68B7EFDC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'35B61995-1322-587E-AE77-9CAF68B7EFDC','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'35B61995-1322-587E-AE77-9CAF68B7EFDC','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '522AD2C2-A659-5102-9A2D-4A2BEA37F5D6', 'sequence': {'long': 1540}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'522AD2C2-A659-5102-9A2D-4A2BEA37F5D6','1540','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706923583351012','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'522AD2C2-A659-5102-9A2D-4A2BEA37F5D6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'522AD2C2-A659-5102-9A2D-4A2BEA37F5D6','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'522AD2C2-A659-5102-9A2D-4A2BEA37F5D6','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '86964657-264B-5146-B357-6582F044C099', 'sequence': {'long': 1541}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': {'string': '/lib/libxo.so.0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923583351012, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'86964657-264B-5146-B357-6582F044C099','1541','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','/lib/libxo.so.0','1522706923583351012','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'86964657-264B-5146-B357-6582F044C099','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'86964657-264B-5146-B357-6582F044C099','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'86964657-264B-5146-B357-6582F044C099','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '70DEED8D-F972-5CDD-96F0-EF0504575352', 'sequence': {'long': 1542}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'70DEED8D-F972-5CDD-96F0-EF0504575352','1542','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706923593351622','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'70DEED8D-F972-5CDD-96F0-EF0504575352','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'70DEED8D-F972-5CDD-96F0-EF0504575352','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'70DEED8D-F972-5CDD-96F0-EF0504575352','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '90B6CD02-CE6C-520C-9F91-A1EC29E932E0', 'sequence': {'long': 1543}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'90B6CD02-CE6C-520C-9F91-A1EC29E932E0','1543','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706923593351622','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'90B6CD02-CE6C-520C-9F91-A1EC29E932E0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'90B6CD02-CE6C-520C-9F91-A1EC29E932E0','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'90B6CD02-CE6C-520C-9F91-A1EC29E932E0','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5FFCE878-6411-5EDA-90B8-F4F6B9AEBFDE', 'sequence': {'long': 1544}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14970880}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5FFCE878-6411-5EDA-90B8-F4F6B9AEBFDE','1544','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706923593351622','aue_mmap','14970880','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5FFCE878-6411-5EDA-90B8-F4F6B9AEBFDE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5FFCE878-6411-5EDA-90B8-F4F6B9AEBFDE','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5FFCE878-6411-5EDA-90B8-F4F6B9AEBFDE','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6D66A5C1-844C-5945-B2F4-E30E08BD23B3', 'sequence': {'long': 1545}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14970880}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6D66A5C1-844C-5945-B2F4-E30E08BD23B3','1545','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706923593351622','aue_mmap','14970880','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6D66A5C1-844C-5945-B2F4-E30E08BD23B3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6D66A5C1-844C-5945-B2F4-E30E08BD23B3','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6D66A5C1-844C-5945-B2F4-E30E08BD23B3','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '03CEEFFA-38EF-544F-B202-588AF6016DFB', 'sequence': {'long': 1546}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17182720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'03CEEFFA-38EF-544F-B202-588AF6016DFB','1546','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706923593351622','aue_mmap','17182720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'03CEEFFA-38EF-544F-B202-588AF6016DFB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'03CEEFFA-38EF-544F-B202-588AF6016DFB','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'03CEEFFA-38EF-544F-B202-588AF6016DFB','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '20A3DAD1-66D2-5E0C-B70F-ACD53374E91A', 'sequence': {'long': 1547}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17182720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'20A3DAD1-66D2-5E0C-B70F-ACD53374E91A','1547','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706923593351622','aue_mmap','17182720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'20A3DAD1-66D2-5E0C-B70F-ACD53374E91A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'20A3DAD1-66D2-5E0C-B70F-ACD53374E91A','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'20A3DAD1-66D2-5E0C-B70F-ACD53374E91A','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0917A7F4-DF88-5654-8623-70B327B27CDE', 'sequence': {'long': 1548}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0917A7F4-DF88-5654-8623-70B327B27CDE','1548','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706923593351622','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0917A7F4-DF88-5654-8623-70B327B27CDE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0917A7F4-DF88-5654-8623-70B327B27CDE','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0917A7F4-DF88-5654-8623-70B327B27CDE','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '62B1D3E9-240F-5278-994F-5F85308CCEAB', 'sequence': {'long': 1549}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': {'string': '/lib/libutil.so.9'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'62B1D3E9-240F-5278-994F-5F85308CCEAB','1549','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','/lib/libutil.so.9','1522706923593351622','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'62B1D3E9-240F-5278-994F-5F85308CCEAB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'62B1D3E9-240F-5278-994F-5F85308CCEAB','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'62B1D3E9-240F-5278-994F-5F85308CCEAB','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '822A8C9C-86E6-5BA1-B6A9-F90974A5CBE5', 'sequence': {'long': 1550}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'822A8C9C-86E6-5BA1-B6A9-F90974A5CBE5','1550','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706923593351622','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'822A8C9C-86E6-5BA1-B6A9-F90974A5CBE5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'822A8C9C-86E6-5BA1-B6A9-F90974A5CBE5','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'822A8C9C-86E6-5BA1-B6A9-F90974A5CBE5','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '31F51CDC-34F0-59F6-8D08-4C8293EAD43C', 'sequence': {'long': 1551}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'31F51CDC-34F0-59F6-8D08-4C8293EAD43C','1551','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706923593351622','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'31F51CDC-34F0-59F6-8D08-4C8293EAD43C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'31F51CDC-34F0-59F6-8D08-4C8293EAD43C','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'31F51CDC-34F0-59F6-8D08-4C8293EAD43C','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0639D81B-F0E3-5B07-A61C-10E5CE3FE6FE', 'sequence': {'long': 1552}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17186816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'0639D81B-F0E3-5B07-A61C-10E5CE3FE6FE','1552','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706923593351622','aue_mmap','17186816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0639D81B-F0E3-5B07-A61C-10E5CE3FE6FE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0639D81B-F0E3-5B07-A61C-10E5CE3FE6FE','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0639D81B-F0E3-5B07-A61C-10E5CE3FE6FE','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B04FCE65-71C0-574A-9626-E9827EA765AC', 'sequence': {'long': 1553}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17186816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B04FCE65-71C0-574A-9626-E9827EA765AC','1553','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706923593351622','aue_mmap','17186816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B04FCE65-71C0-574A-9626-E9827EA765AC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B04FCE65-71C0-574A-9626-E9827EA765AC','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B04FCE65-71C0-574A-9626-E9827EA765AC','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BB8C9B4E-131E-5E25-877E-77A2EA8F78E3', 'sequence': {'long': 1554}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19353600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'BB8C9B4E-131E-5E25-877E-77A2EA8F78E3','1554','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706923593351622','aue_mmap','19353600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BB8C9B4E-131E-5E25-877E-77A2EA8F78E3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BB8C9B4E-131E-5E25-877E-77A2EA8F78E3','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BB8C9B4E-131E-5E25-877E-77A2EA8F78E3','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C7D71AE1-0948-5F12-A3C5-5FB179B1800A', 'sequence': {'long': 1555}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19353600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C7D71AE1-0948-5F12-A3C5-5FB179B1800A','1555','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706923593351622','aue_mmap','19353600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C7D71AE1-0948-5F12-A3C5-5FB179B1800A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C7D71AE1-0948-5F12-A3C5-5FB179B1800A','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C7D71AE1-0948-5F12-A3C5-5FB179B1800A','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4C9F09DC-94E2-5BA0-8B74-36DDBF281947', 'sequence': {'long': 1556}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4C9F09DC-94E2-5BA0-8B74-36DDBF281947','1556','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706923593351622','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4C9F09DC-94E2-5BA0-8B74-36DDBF281947','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4C9F09DC-94E2-5BA0-8B74-36DDBF281947','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4C9F09DC-94E2-5BA0-8B74-36DDBF281947','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0789E767-E06A-5F0B-9841-6C7EDC1B79C2', 'sequence': {'long': 1557}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0789E767-E06A-5F0B-9841-6C7EDC1B79C2','1557','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706923593351622','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0789E767-E06A-5F0B-9841-6C7EDC1B79C2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0789E767-E06A-5F0B-9841-6C7EDC1B79C2','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0789E767-E06A-5F0B-9841-6C7EDC1B79C2','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3BEBE1B8-6279-5939-BD96-61F06C2E0305', 'sequence': {'long': 1558}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3BEBE1B8-6279-5939-BD96-61F06C2E0305','1558','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923593351622','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3BEBE1B8-6279-5939-BD96-61F06C2E0305','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3BEBE1B8-6279-5939-BD96-61F06C2E0305','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3BEBE1B8-6279-5939-BD96-61F06C2E0305','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DE783154-E7AD-5024-BAC1-2A571EF15583', 'sequence': {'long': 1559}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923593351622, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'DE783154-E7AD-5024-BAC1-2A571EF15583','1559','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923593351622','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DE783154-E7AD-5024-BAC1-2A571EF15583','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DE783154-E7AD-5024-BAC1-2A571EF15583','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DE783154-E7AD-5024-BAC1-2A571EF15583','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '205FA326-E6A0-5EDC-85EC-E29F43CDA904', 'sequence': {'long': 1560}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19365888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'205FA326-E6A0-5EDC-85EC-E29F43CDA904','1560','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923603352513','aue_mmap','19365888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'205FA326-E6A0-5EDC-85EC-E29F43CDA904','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'205FA326-E6A0-5EDC-85EC-E29F43CDA904','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'205FA326-E6A0-5EDC-85EC-E29F43CDA904','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8CF1B413-5F85-56CA-90CB-0122FFA42D6B', 'sequence': {'long': 1561}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19365888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8CF1B413-5F85-56CA-90CB-0122FFA42D6B','1561','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923603352513','aue_mmap','19365888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8CF1B413-5F85-56CA-90CB-0122FFA42D6B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8CF1B413-5F85-56CA-90CB-0122FFA42D6B','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8CF1B413-5F85-56CA-90CB-0122FFA42D6B','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '731910FD-3FAE-5CF9-8A1F-6D47C3E6CE74', 'sequence': {'long': 1562}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23252992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'731910FD-3FAE-5CF9-8A1F-6D47C3E6CE74','1562','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923603352513','aue_mmap','23252992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'731910FD-3FAE-5CF9-8A1F-6D47C3E6CE74','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'731910FD-3FAE-5CF9-8A1F-6D47C3E6CE74','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'731910FD-3FAE-5CF9-8A1F-6D47C3E6CE74','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0F17FBBD-00F1-5977-963D-2F72D41010A5', 'sequence': {'long': 1563}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23252992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'0F17FBBD-00F1-5977-963D-2F72D41010A5','1563','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923603352513','aue_mmap','23252992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0F17FBBD-00F1-5977-963D-2F72D41010A5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0F17FBBD-00F1-5977-963D-2F72D41010A5','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0F17FBBD-00F1-5977-963D-2F72D41010A5','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7EE4184F-D757-5C58-8622-CB2A6CFCD5DE', 'sequence': {'long': 1564}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7EE4184F-D757-5C58-8622-CB2A6CFCD5DE','1564','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923603352513','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7EE4184F-D757-5C58-8622-CB2A6CFCD5DE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7EE4184F-D757-5C58-8622-CB2A6CFCD5DE','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7EE4184F-D757-5C58-8622-CB2A6CFCD5DE','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6E10934A-762C-5463-AD3D-CC1830E22234', 'sequence': {'long': 1565}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': {'string': '/lib/libelf.so.2'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6E10934A-762C-5463-AD3D-CC1830E22234','1565','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','/lib/libelf.so.2','1522706923603352513','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6E10934A-762C-5463-AD3D-CC1830E22234','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6E10934A-762C-5463-AD3D-CC1830E22234','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6E10934A-762C-5463-AD3D-CC1830E22234','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A1473CAD-7C31-56BD-9787-15D5DEC9347F', 'sequence': {'long': 1566}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A1473CAD-7C31-56BD-9787-15D5DEC9347F','1566','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706923603352513','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A1473CAD-7C31-56BD-9787-15D5DEC9347F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A1473CAD-7C31-56BD-9787-15D5DEC9347F','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A1473CAD-7C31-56BD-9787-15D5DEC9347F','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F9FF21F2-4D68-5764-9A3A-2DC5E12AC574', 'sequence': {'long': 1567}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F9FF21F2-4D68-5764-9A3A-2DC5E12AC574','1567','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706923603352513','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F9FF21F2-4D68-5764-9A3A-2DC5E12AC574','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F9FF21F2-4D68-5764-9A3A-2DC5E12AC574','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F9FF21F2-4D68-5764-9A3A-2DC5E12AC574','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FBB43571-3B8F-5F88-B074-31613BEF1BAA', 'sequence': {'long': 1568}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 25567232}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'FBB43571-3B8F-5F88-B074-31613BEF1BAA','1568','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706923603352513','aue_mmap','25567232','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FBB43571-3B8F-5F88-B074-31613BEF1BAA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FBB43571-3B8F-5F88-B074-31613BEF1BAA','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FBB43571-3B8F-5F88-B074-31613BEF1BAA','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '71B38667-9AFE-5E67-998C-6C696D3C97D6', 'sequence': {'long': 1569}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 25567232}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'71B38667-9AFE-5E67-998C-6C696D3C97D6','1569','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706923603352513','aue_mmap','25567232','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'71B38667-9AFE-5E67-998C-6C696D3C97D6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'71B38667-9AFE-5E67-998C-6C696D3C97D6','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'71B38667-9AFE-5E67-998C-6C696D3C97D6','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '222E8358-5C59-59BB-AF8F-1EEF243CCE0B', 'sequence': {'long': 1570}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 27758592}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'222E8358-5C59-59BB-AF8F-1EEF243CCE0B','1570','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706923603352513','aue_mmap','27758592','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'222E8358-5C59-59BB-AF8F-1EEF243CCE0B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'222E8358-5C59-59BB-AF8F-1EEF243CCE0B','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'222E8358-5C59-59BB-AF8F-1EEF243CCE0B','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EB9E4DAC-DA52-5B75-859A-D790B03DCAEB', 'sequence': {'long': 1571}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 27758592}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EB9E4DAC-DA52-5B75-859A-D790B03DCAEB','1571','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706923603352513','aue_mmap','27758592','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EB9E4DAC-DA52-5B75-859A-D790B03DCAEB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EB9E4DAC-DA52-5B75-859A-D790B03DCAEB','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EB9E4DAC-DA52-5B75-859A-D790B03DCAEB','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '74A12E8F-0696-5607-8DC3-BB120AAF95EC', 'sequence': {'long': 1572}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'74A12E8F-0696-5607-8DC3-BB120AAF95EC','1572','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706923603352513','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'74A12E8F-0696-5607-8DC3-BB120AAF95EC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'74A12E8F-0696-5607-8DC3-BB120AAF95EC','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'74A12E8F-0696-5607-8DC3-BB120AAF95EC','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6462ADB2-8552-5FB4-94D9-92FEBB606A14', 'sequence': {'long': 1573}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6462ADB2-8552-5FB4-94D9-92FEBB606A14','1573','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706923603352513','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6462ADB2-8552-5FB4-94D9-92FEBB606A14','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6462ADB2-8552-5FB4-94D9-92FEBB606A14','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6462ADB2-8552-5FB4-94D9-92FEBB606A14','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2BC1CC78-975E-5532-9E21-61C134958EC2', 'sequence': {'long': 1574}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2BC1CC78-975E-5532-9E21-61C134958EC2','1574','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706923603352513','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2BC1CC78-975E-5532-9E21-61C134958EC2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2BC1CC78-975E-5532-9E21-61C134958EC2','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2BC1CC78-975E-5532-9E21-61C134958EC2','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A6304DF9-D092-5D25-BDE8-1B2F072D0A2B', 'sequence': {'long': 1575}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A6304DF9-D092-5D25-BDE8-1B2F072D0A2B','1575','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706923603352513','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A6304DF9-D092-5D25-BDE8-1B2F072D0A2B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A6304DF9-D092-5D25-BDE8-1B2F072D0A2B','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A6304DF9-D092-5D25-BDE8-1B2F072D0A2B','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F99B7ABB-CD05-5DCC-87D2-67D1373EE0BC', 'sequence': {'long': 1576}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923603352513, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F99B7ABB-CD05-5DCC-87D2-67D1373EE0BC','1576','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706923603352513','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F99B7ABB-CD05-5DCC-87D2-67D1373EE0BC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F99B7ABB-CD05-5DCC-87D2-67D1373EE0BC','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F99B7ABB-CD05-5DCC-87D2-67D1373EE0BC','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '660E6F19-2BC2-525A-B217-A57377D8288F', 'sequence': {'long': 1577}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D344F9D-3989-8550-8939-91A3B085C709'}, 'predicateObjectPath': {'string': 'kernel_mem.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923713355547, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 7703}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kernel_mem.txt', 'fd': '1', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'660E6F19-2BC2-525A-B217-A57377D8288F','1577','EVENT_WRITE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4D344F9D-3989-8550-8939-91A3B085C709','kernel_mem.txt','1522706923713355547','aue_write','7703','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kernel_mem.txt','1','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'660E6F19-2BC2-525A-B217-A57377D8288F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'660E6F19-2BC2-525A-B217-A57377D8288F','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'660E6F19-2BC2-525A-B217-A57377D8288F','4D344F9D-3989-8550-8939-91A3B085C709','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8E1D0EF5-90F8-54D0-BE08-5AD41A6ADBD4', 'sequence': {'long': 1578}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4D344F9D-3989-8550-8939-91A3B085C709'}, 'predicateObjectPath': {'string': 'kernel_mem.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923713355547, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2191}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kernel_mem.txt', 'fd': '1', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8E1D0EF5-90F8-54D0-BE08-5AD41A6ADBD4','1578','EVENT_WRITE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','4D344F9D-3989-8550-8939-91A3B085C709','kernel_mem.txt','1522706923713355547','aue_write','2191','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kernel_mem.txt','1','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8E1D0EF5-90F8-54D0-BE08-5AD41A6ADBD4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8E1D0EF5-90F8-54D0-BE08-5AD41A6ADBD4','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8E1D0EF5-90F8-54D0-BE08-5AD41A6ADBD4','4D344F9D-3989-8550-8939-91A3B085C709','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '82CE3D53-BD50-54F6-808B-74783E969AB1', 'sequence': {'long': 1579}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923713355547, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'82CE3D53-BD50-54F6-808B-74783E969AB1','1579','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','1522706923713355547','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'82CE3D53-BD50-54F6-808B-74783E969AB1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'82CE3D53-BD50-54F6-808B-74783E969AB1','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'82CE3D53-BD50-54F6-808B-74783E969AB1','6845BE9E-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2814, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706923723351897, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'685CC625-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2814','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706923723351897','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'685CC625-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'685CC625-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'685CC625-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'685CC625-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '581576A9-FE4A-5FA4-860B-0D0069C59DA1', 'sequence': {'long': 1580}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923723351897, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2814', 'exec': 'bash', 'arg_pid': '2814', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'581576A9-FE4A-5FA4-860B-0D0069C59DA1','1580','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','1522706923723351897','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2814','bash','2814','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'581576A9-FE4A-5FA4-860B-0D0069C59DA1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'581576A9-FE4A-5FA4-860B-0D0069C59DA1','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'581576A9-FE4A-5FA4-860B-0D0069C59DA1','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '12013E8D-14C4-5320-B3FA-61637FEBB08B', 'sequence': {'long': 1581}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923723351897, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'12013E8D-14C4-5320-B3FA-61637FEBB08B','1581','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706923723351897','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'12013E8D-14C4-5320-B3FA-61637FEBB08B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'12013E8D-14C4-5320-B3FA-61637FEBB08B','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'12013E8D-14C4-5320-B3FA-61637FEBB08B','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8F7713F1-B285-5062-A029-B74200A12729', 'sequence': {'long': 1582}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C836AA2-BB54-3A58-94BB-1E5D583A637E'}, 'predicateObjectPath': {'string': '/bin/sleep'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706923723351897, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'sleep 1', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8F7713F1-B285-5062-A029-B74200A12729','1582','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','6C836AA2-BB54-3A58-94BB-1E5D583A637E','/bin/sleep','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706923723351897','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','sleep 1','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8F7713F1-B285-5062-A029-B74200A12729','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8F7713F1-B285-5062-A029-B74200A12729','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8F7713F1-B285-5062-A029-B74200A12729','6C836AA2-BB54-3A58-94BB-1E5D583A637E','affects'),(nextval('edge_number_seq'),'8F7713F1-B285-5062-A029-B74200A12729','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E8D51597-3B37-5E8B-BCF6-5A47B2D1920E', 'sequence': {'long': 1583}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923723351897, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E8D51597-3B37-5E8B-BCF6-5A47B2D1920E','1583','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706923723351897','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E8D51597-3B37-5E8B-BCF6-5A47B2D1920E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E8D51597-3B37-5E8B-BCF6-5A47B2D1920E','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E8D51597-3B37-5E8B-BCF6-5A47B2D1920E','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D906BF05-0560-53E2-B8CC-03DC88878FD4', 'sequence': {'long': 1584}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923723351897, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D906BF05-0560-53E2-B8CC-03DC88878FD4','1584','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706923723351897','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D906BF05-0560-53E2-B8CC-03DC88878FD4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D906BF05-0560-53E2-B8CC-03DC88878FD4','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D906BF05-0560-53E2-B8CC-03DC88878FD4','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '04C0EA19-BC68-59F5-B317-7E9A76A84D83', 'sequence': {'long': 1585}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923723351897, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'04C0EA19-BC68-59F5-B317-7E9A76A84D83','1585','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706923723351897','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'04C0EA19-BC68-59F5-B317-7E9A76A84D83','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'04C0EA19-BC68-59F5-B317-7E9A76A84D83','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'04C0EA19-BC68-59F5-B317-7E9A76A84D83','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DD07734A-5685-530E-8193-27DAA9512A0E', 'sequence': {'long': 1586}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923723351897, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DD07734A-5685-530E-8193-27DAA9512A0E','1586','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706923723351897','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DD07734A-5685-530E-8193-27DAA9512A0E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DD07734A-5685-530E-8193-27DAA9512A0E','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DD07734A-5685-530E-8193-27DAA9512A0E','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EAE4DBFC-187A-52CC-9E31-6EA4155E171E', 'sequence': {'long': 1587}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923723351897, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EAE4DBFC-187A-52CC-9E31-6EA4155E171E','1587','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706923723351897','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EAE4DBFC-187A-52CC-9E31-6EA4155E171E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EAE4DBFC-187A-52CC-9E31-6EA4155E171E','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EAE4DBFC-187A-52CC-9E31-6EA4155E171E','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E66B2B43-0D69-5C11-94E7-2C7E0EF9C4CF', 'sequence': {'long': 1588}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923723351897, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E66B2B43-0D69-5C11-94E7-2C7E0EF9C4CF','1588','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706923723351897','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E66B2B43-0D69-5C11-94E7-2C7E0EF9C4CF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E66B2B43-0D69-5C11-94E7-2C7E0EF9C4CF','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E66B2B43-0D69-5C11-94E7-2C7E0EF9C4CF','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '62872956-913C-53EF-998B-089647169905', 'sequence': {'long': 1589}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923723351897, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'62872956-913C-53EF-998B-089647169905','1589','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706923723351897','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'62872956-913C-53EF-998B-089647169905','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'62872956-913C-53EF-998B-089647169905','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'62872956-913C-53EF-998B-089647169905','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2E399D44-7073-571C-BF84-2C72407CAF86', 'sequence': {'long': 1590}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923723351897, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2E399D44-7073-571C-BF84-2C72407CAF86','1590','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706923723351897','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2E399D44-7073-571C-BF84-2C72407CAF86','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2E399D44-7073-571C-BF84-2C72407CAF86','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2E399D44-7073-571C-BF84-2C72407CAF86','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B015801D-D01A-55B6-966A-1E20A36F8255', 'sequence': {'long': 1591}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923733358287, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B015801D-D01A-55B6-966A-1E20A36F8255','1591','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923733358287','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B015801D-D01A-55B6-966A-1E20A36F8255','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B015801D-D01A-55B6-966A-1E20A36F8255','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B015801D-D01A-55B6-966A-1E20A36F8255','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BC8F63CA-1476-5761-849A-56B89CFCE5F8', 'sequence': {'long': 1592}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923733358287, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'BC8F63CA-1476-5761-849A-56B89CFCE5F8','1592','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923733358287','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BC8F63CA-1476-5761-849A-56B89CFCE5F8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BC8F63CA-1476-5761-849A-56B89CFCE5F8','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BC8F63CA-1476-5761-849A-56B89CFCE5F8','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0D002020-439F-56EF-B901-EB35DD2AB1B6', 'sequence': {'long': 1593}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923733358287, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'0D002020-439F-56EF-B901-EB35DD2AB1B6','1593','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923733358287','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0D002020-439F-56EF-B901-EB35DD2AB1B6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0D002020-439F-56EF-B901-EB35DD2AB1B6','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0D002020-439F-56EF-B901-EB35DD2AB1B6','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '63ABE06D-53E8-517A-A7F0-35F096FF5A79', 'sequence': {'long': 1594}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923733358287, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'63ABE06D-53E8-517A-A7F0-35F096FF5A79','1594','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923733358287','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'63ABE06D-53E8-517A-A7F0-35F096FF5A79','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'63ABE06D-53E8-517A-A7F0-35F096FF5A79','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'63ABE06D-53E8-517A-A7F0-35F096FF5A79','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9435B526-788C-51FB-93F5-34BCF8F545DA', 'sequence': {'long': 1595}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923733358287, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9435B526-788C-51FB-93F5-34BCF8F545DA','1595','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923733358287','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9435B526-788C-51FB-93F5-34BCF8F545DA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9435B526-788C-51FB-93F5-34BCF8F545DA','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9435B526-788C-51FB-93F5-34BCF8F545DA','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3D4A0DA-DDB5-535C-A238-DC3C794A8764', 'sequence': {'long': 1596}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923733358287, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3D4A0DA-DDB5-535C-A238-DC3C794A8764','1596','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923733358287','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3D4A0DA-DDB5-535C-A238-DC3C794A8764','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3D4A0DA-DDB5-535C-A238-DC3C794A8764','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B3D4A0DA-DDB5-535C-A238-DC3C794A8764','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9AA9C2E3-0BDE-5DAD-AD13-8A461FF9535A', 'sequence': {'long': 1597}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923733358287, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9AA9C2E3-0BDE-5DAD-AD13-8A461FF9535A','1597','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706923733358287','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9AA9C2E3-0BDE-5DAD-AD13-8A461FF9535A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9AA9C2E3-0BDE-5DAD-AD13-8A461FF9535A','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9AA9C2E3-0BDE-5DAD-AD13-8A461FF9535A','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '13EF44B0-D007-5317-9231-38C7BA2AF69D', 'sequence': {'long': 1598}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923733358287, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'13EF44B0-D007-5317-9231-38C7BA2AF69D','1598','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706923733358287','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'13EF44B0-D007-5317-9231-38C7BA2AF69D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'13EF44B0-D007-5317-9231-38C7BA2AF69D','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'13EF44B0-D007-5317-9231-38C7BA2AF69D','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9559F112-E9DF-58BC-9285-2BA2B39BDC7E', 'sequence': {'long': 1599}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923733358287, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9559F112-E9DF-58BC-9285-2BA2B39BDC7E','1599','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706923733358287','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9559F112-E9DF-58BC-9285-2BA2B39BDC7E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9559F112-E9DF-58BC-9285-2BA2B39BDC7E','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9559F112-E9DF-58BC-9285-2BA2B39BDC7E','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FE98F88E-16B5-5E58-B8CB-49CA8E661115', 'sequence': {'long': 1600}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923733358287, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'FE98F88E-16B5-5E58-B8CB-49CA8E661115','1600','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706923733358287','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FE98F88E-16B5-5E58-B8CB-49CA8E661115','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FE98F88E-16B5-5E58-B8CB-49CA8E661115','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FE98F88E-16B5-5E58-B8CB-49CA8E661115','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '792DBABA-64EC-5AAC-BBB2-696B396E4D1B', 'sequence': {'long': 1601}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923733358287, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'792DBABA-64EC-5AAC-BBB2-696B396E4D1B','1601','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706923733358287','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'792DBABA-64EC-5AAC-BBB2-696B396E4D1B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'792DBABA-64EC-5AAC-BBB2-696B396E4D1B','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'792DBABA-64EC-5AAC-BBB2-696B396E4D1B','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D03BD4AB-63F4-5D12-A79B-F6AA5DC74B38', 'sequence': {'long': 1602}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67D13A99-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923813351310, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D03BD4AB-63F4-5D12-A79B-F6AA5DC74B38','1602','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','67D13A99-36C2-11E8-BF66-D9AA8AFF4A69','1522706923813351310','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D03BD4AB-63F4-5D12-A79B-F6AA5DC74B38','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D03BD4AB-63F4-5D12-A79B-F6AA5DC74B38','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D03BD4AB-63F4-5D12-A79B-F6AA5DC74B38','67D13A99-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E9C21CB8-C1CA-5981-9ED9-733F5FE6DE5F', 'sequence': {'long': 1603}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '67D13B4A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923813351310, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E9C21CB8-C1CA-5981-9ED9-733F5FE6DE5F','1603','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','67D13B4A-36C2-11E8-BF66-D9AA8AFF4A69','1522706923813351310','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E9C21CB8-C1CA-5981-9ED9-733F5FE6DE5F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E9C21CB8-C1CA-5981-9ED9-733F5FE6DE5F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E9C21CB8-C1CA-5981-9ED9-733F5FE6DE5F','67D13B4A-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '686A4C13-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'686A4C13-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'686A4C13-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'686A4C13-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '686A4B61-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'686A4B61-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'686A4B61-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'686A4B61-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F47EB311-BCA5-5BD0-86BB-DAA6611CFDA5', 'sequence': {'long': 1604}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '686A4B61-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '686A4C13-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706923813351310, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F47EB311-BCA5-5BD0-86BB-DAA6611CFDA5','1604','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','686A4B61-36C2-11E8-BF66-D9AA8AFF4A69','686A4C13-36C2-11E8-BF66-D9AA8AFF4A69','1522706923813351310','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F47EB311-BCA5-5BD0-86BB-DAA6611CFDA5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F47EB311-BCA5-5BD0-86BB-DAA6611CFDA5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F47EB311-BCA5-5BD0-86BB-DAA6611CFDA5','686A4B61-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'F47EB311-BCA5-5BD0-86BB-DAA6611CFDA5','686A4C13-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C96A834C-3C43-5134-8FDA-841E23A21FD8', 'sequence': {'long': 1605}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923813351310, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C96A834C-3C43-5134-8FDA-841E23A21FD8','1605','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706923813351310','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C96A834C-3C43-5134-8FDA-841E23A21FD8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C96A834C-3C43-5134-8FDA-841E23A21FD8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '75F154EE-0AEC-542A-9085-D3C1EE3987F7', 'sequence': {'long': 1606}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923813351310, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'75F154EE-0AEC-542A-9085-D3C1EE3987F7','1606','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706923813351310','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'75F154EE-0AEC-542A-9085-D3C1EE3987F7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'75F154EE-0AEC-542A-9085-D3C1EE3987F7','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '568CB814-F1B1-5CE9-84C9-EB8B878A5501', 'sequence': {'long': 1607}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923813351310, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'568CB814-F1B1-5CE9-84C9-EB8B878A5501','1607','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706923813351310','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'568CB814-F1B1-5CE9-84C9-EB8B878A5501','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'568CB814-F1B1-5CE9-84C9-EB8B878A5501','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5C47DD06-BAF8-5C0E-AB3B-6678D9711DDF', 'sequence': {'long': 1608}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706923813351310, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5C47DD06-BAF8-5C0E-AB3B-6678D9711DDF','1608','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706923813351310','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5C47DD06-BAF8-5C0E-AB3B-6678D9711DDF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5C47DD06-BAF8-5C0E-AB3B-6678D9711DDF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '377AF894-7D48-5A3B-99BE-E7CED5CDABCD', 'sequence': {'long': 1609}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '685CC625-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924753351274, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'377AF894-7D48-5A3B-99BE-E7CED5CDABCD','1609','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','1522706924753351274','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'377AF894-7D48-5A3B-99BE-E7CED5CDABCD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'377AF894-7D48-5A3B-99BE-E7CED5CDABCD','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'377AF894-7D48-5A3B-99BE-E7CED5CDABCD','685CC625-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2815, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706924753351274, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2815','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706924753351274','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B89C60B6-66BA-59ED-B5E3-587F9430027E', 'sequence': {'long': 1610}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924753351274, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2815', 'exec': 'bash', 'arg_pid': '2815', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'B89C60B6-66BA-59ED-B5E3-587F9430027E','1610','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','1522706924753351274','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2815','bash','2815','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B89C60B6-66BA-59ED-B5E3-587F9430027E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B89C60B6-66BA-59ED-B5E3-587F9430027E','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B89C60B6-66BA-59ED-B5E3-587F9430027E','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1F80F70D-DF5D-5F42-A9B8-B5F19512D214', 'sequence': {'long': 1611}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924753351274, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1F80F70D-DF5D-5F42-A9B8-B5F19512D214','1611','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706924753351274','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1F80F70D-DF5D-5F42-A9B8-B5F19512D214','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1F80F70D-DF5D-5F42-A9B8-B5F19512D214','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1F80F70D-DF5D-5F42-A9B8-B5F19512D214','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FD1BEE2A-6BAA-50C4-9A51-9D06687160D0', 'sequence': {'long': 1612}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0E1A657D-11F7-F051-B711-8D3E01F0DC22'}, 'predicateObjectPath': {'string': '/usr/home/darpa/kernel_zones.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924753351274, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '0209'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FD1BEE2A-6BAA-50C4-9A51-9D06687160D0','1612','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0E1A657D-11F7-F051-B711-8D3E01F0DC22','/usr/home/darpa/kernel_zones.txt','1522706924753351274','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','0209','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FD1BEE2A-6BAA-50C4-9A51-9D06687160D0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FD1BEE2A-6BAA-50C4-9A51-9D06687160D0','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FD1BEE2A-6BAA-50C4-9A51-9D06687160D0','0E1A657D-11F7-F051-B711-8D3E01F0DC22','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1D5CD0A6-195B-52EE-826D-9D89A037866D', 'sequence': {'long': 1613}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0E1A657D-11F7-F051-B711-8D3E01F0DC22'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924753351274, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1D5CD0A6-195B-52EE-826D-9D89A037866D','1613','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0E1A657D-11F7-F051-B711-8D3E01F0DC22','1522706924753351274','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1D5CD0A6-195B-52EE-826D-9D89A037866D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1D5CD0A6-195B-52EE-826D-9D89A037866D','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1D5CD0A6-195B-52EE-826D-9D89A037866D','0E1A657D-11F7-F051-B711-8D3E01F0DC22','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CCFEFF4B-776B-5138-9431-E564B6829E35', 'sequence': {'long': 1614}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '330061CF-6BB3-C45E-B36B-B89D7EC4F443'}, 'predicateObjectPath': {'string': '/usr/bin/vmstat'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706924753351274, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': '/usr/bin/vmstat -z', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CCFEFF4B-776B-5138-9431-E564B6829E35','1614','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','330061CF-6BB3-C45E-B36B-B89D7EC4F443','/usr/bin/vmstat','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706924753351274','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/bin/vmstat -z','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CCFEFF4B-776B-5138-9431-E564B6829E35','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CCFEFF4B-776B-5138-9431-E564B6829E35','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CCFEFF4B-776B-5138-9431-E564B6829E35','330061CF-6BB3-C45E-B36B-B89D7EC4F443','affects'),(nextval('edge_number_seq'),'CCFEFF4B-776B-5138-9431-E564B6829E35','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EC84F63C-C2FF-51B9-BF94-377CB9AE1272', 'sequence': {'long': 1615}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924753351274, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EC84F63C-C2FF-51B9-BF94-377CB9AE1272','1615','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706924753351274','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EC84F63C-C2FF-51B9-BF94-377CB9AE1272','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EC84F63C-C2FF-51B9-BF94-377CB9AE1272','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EC84F63C-C2FF-51B9-BF94-377CB9AE1272','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6FF51900-3C92-5657-BA93-C3CB2E02EAC6', 'sequence': {'long': 1616}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924753351274, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6FF51900-3C92-5657-BA93-C3CB2E02EAC6','1616','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706924753351274','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6FF51900-3C92-5657-BA93-C3CB2E02EAC6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6FF51900-3C92-5657-BA93-C3CB2E02EAC6','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6FF51900-3C92-5657-BA93-C3CB2E02EAC6','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1CD003A5-0126-59F7-8873-D2EE2D654630', 'sequence': {'long': 1617}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924753351274, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1CD003A5-0126-59F7-8873-D2EE2D654630','1617','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706924753351274','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1CD003A5-0126-59F7-8873-D2EE2D654630','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1CD003A5-0126-59F7-8873-D2EE2D654630','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1CD003A5-0126-59F7-8873-D2EE2D654630','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1F63E513-0F5A-5D3A-842B-1864EBAFD60C', 'sequence': {'long': 1618}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924753351274, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1F63E513-0F5A-5D3A-842B-1864EBAFD60C','1618','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706924753351274','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1F63E513-0F5A-5D3A-842B-1864EBAFD60C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1F63E513-0F5A-5D3A-842B-1864EBAFD60C','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1F63E513-0F5A-5D3A-842B-1864EBAFD60C','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '70D9F384-4F96-5A3C-8B54-476FDB9F0E9E', 'sequence': {'long': 1619}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924753351274, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'70D9F384-4F96-5A3C-8B54-476FDB9F0E9E','1619','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706924753351274','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'70D9F384-4F96-5A3C-8B54-476FDB9F0E9E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'70D9F384-4F96-5A3C-8B54-476FDB9F0E9E','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'70D9F384-4F96-5A3C-8B54-476FDB9F0E9E','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6B9D2B6A-284C-5D0E-AF88-20B8AD8D2CB3', 'sequence': {'long': 1620}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6B9D2B6A-284C-5D0E-AF88-20B8AD8D2CB3','1620','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706924763359335','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6B9D2B6A-284C-5D0E-AF88-20B8AD8D2CB3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6B9D2B6A-284C-5D0E-AF88-20B8AD8D2CB3','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6B9D2B6A-284C-5D0E-AF88-20B8AD8D2CB3','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '182D9C48-DAA8-5DEB-8BB3-355540CDDE59', 'sequence': {'long': 1621}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'182D9C48-DAA8-5DEB-8BB3-355540CDDE59','1621','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706924763359335','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'182D9C48-DAA8-5DEB-8BB3-355540CDDE59','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'182D9C48-DAA8-5DEB-8BB3-355540CDDE59','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'182D9C48-DAA8-5DEB-8BB3-355540CDDE59','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '125C7118-3661-5428-9990-675336194399', 'sequence': {'long': 1622}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': {'string': '/lib/libdevstat.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'125C7118-3661-5428-9990-675336194399','1622','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','/lib/libdevstat.so.7','1522706924763359335','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'125C7118-3661-5428-9990-675336194399','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'125C7118-3661-5428-9990-675336194399','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'125C7118-3661-5428-9990-675336194399','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C826D363-A15C-5C74-9684-CEF1AB538C3B', 'sequence': {'long': 1623}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C826D363-A15C-5C74-9684-CEF1AB538C3B','1623','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706924763359335','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C826D363-A15C-5C74-9684-CEF1AB538C3B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C826D363-A15C-5C74-9684-CEF1AB538C3B','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C826D363-A15C-5C74-9684-CEF1AB538C3B','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F77459DA-52E9-5255-A75C-62DB032F755C', 'sequence': {'long': 1624}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F77459DA-52E9-5255-A75C-62DB032F755C','1624','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706924763359335','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F77459DA-52E9-5255-A75C-62DB032F755C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F77459DA-52E9-5255-A75C-62DB032F755C','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F77459DA-52E9-5255-A75C-62DB032F755C','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E28AF294-7554-5DF9-828E-35876912FFFC', 'sequence': {'long': 1625}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8572928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E28AF294-7554-5DF9-828E-35876912FFFC','1625','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706924763359335','aue_mmap','8572928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E28AF294-7554-5DF9-828E-35876912FFFC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E28AF294-7554-5DF9-828E-35876912FFFC','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E28AF294-7554-5DF9-828E-35876912FFFC','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D583E0A4-A618-51BC-AE95-BD1B79CA574E', 'sequence': {'long': 1626}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8572928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D583E0A4-A618-51BC-AE95-BD1B79CA574E','1626','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706924763359335','aue_mmap','8572928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D583E0A4-A618-51BC-AE95-BD1B79CA574E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D583E0A4-A618-51BC-AE95-BD1B79CA574E','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D583E0A4-A618-51BC-AE95-BD1B79CA574E','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5179F880-2976-52BB-A4BD-E289B31CD076', 'sequence': {'long': 1627}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10690560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5179F880-2976-52BB-A4BD-E289B31CD076','1627','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706924763359335','aue_mmap','10690560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5179F880-2976-52BB-A4BD-E289B31CD076','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5179F880-2976-52BB-A4BD-E289B31CD076','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5179F880-2976-52BB-A4BD-E289B31CD076','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1CA3E6C7-E0F2-59D0-AF24-E7E09294EDDD', 'sequence': {'long': 1628}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10690560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libdevstat.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1CA3E6C7-E0F2-59D0-AF24-E7E09294EDDD','1628','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706924763359335','aue_mmap','10690560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libdevstat.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1CA3E6C7-E0F2-59D0-AF24-E7E09294EDDD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1CA3E6C7-E0F2-59D0-AF24-E7E09294EDDD','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1CA3E6C7-E0F2-59D0-AF24-E7E09294EDDD','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '55E50E73-4A5A-5BC1-BD2A-A198C7754A80', 'sequence': {'long': 1629}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FC2CA9A1-1BCF-8B57-8F1B-A854778B9026'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'55E50E73-4A5A-5BC1-BD2A-A198C7754A80','1629','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','1522706924763359335','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'55E50E73-4A5A-5BC1-BD2A-A198C7754A80','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'55E50E73-4A5A-5BC1-BD2A-A198C7754A80','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'55E50E73-4A5A-5BC1-BD2A-A198C7754A80','FC2CA9A1-1BCF-8B57-8F1B-A854778B9026','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C22FAB33-8431-53E0-92BE-51F377344B33', 'sequence': {'long': 1630}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': {'string': '/lib/libkvm.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C22FAB33-8431-53E0-92BE-51F377344B33','1630','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','/lib/libkvm.so.7','1522706924763359335','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C22FAB33-8431-53E0-92BE-51F377344B33','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C22FAB33-8431-53E0-92BE-51F377344B33','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C22FAB33-8431-53E0-92BE-51F377344B33','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '16715B31-C8B1-5B82-8F8C-A576E06CA70A', 'sequence': {'long': 1631}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'16715B31-C8B1-5B82-8F8C-A576E06CA70A','1631','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706924763359335','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'16715B31-C8B1-5B82-8F8C-A576E06CA70A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'16715B31-C8B1-5B82-8F8C-A576E06CA70A','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'16715B31-C8B1-5B82-8F8C-A576E06CA70A','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C62DB31A-375C-5814-BC52-8D8084912CE2', 'sequence': {'long': 1632}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C62DB31A-375C-5814-BC52-8D8084912CE2','1632','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706924763359335','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C62DB31A-375C-5814-BC52-8D8084912CE2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C62DB31A-375C-5814-BC52-8D8084912CE2','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C62DB31A-375C-5814-BC52-8D8084912CE2','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0F69CE0D-9747-565E-80AD-6D7B276D9046', 'sequence': {'long': 1633}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10694656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'0F69CE0D-9747-565E-80AD-6D7B276D9046','1633','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706924763359335','aue_mmap','10694656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0F69CE0D-9747-565E-80AD-6D7B276D9046','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0F69CE0D-9747-565E-80AD-6D7B276D9046','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0F69CE0D-9747-565E-80AD-6D7B276D9046','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '75ECB7A6-05C8-58C6-8034-187982A8A00E', 'sequence': {'long': 1634}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10694656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'75ECB7A6-05C8-58C6-8034-187982A8A00E','1634','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706924763359335','aue_mmap','10694656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'75ECB7A6-05C8-58C6-8034-187982A8A00E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'75ECB7A6-05C8-58C6-8034-187982A8A00E','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'75ECB7A6-05C8-58C6-8034-187982A8A00E','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1AE99A1C-1CCF-5830-9FE3-F734B5E30B66', 'sequence': {'long': 1635}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12853248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1AE99A1C-1CCF-5830-9FE3-F734B5E30B66','1635','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706924763359335','aue_mmap','12853248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1AE99A1C-1CCF-5830-9FE3-F734B5E30B66','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1AE99A1C-1CCF-5830-9FE3-F734B5E30B66','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1AE99A1C-1CCF-5830-9FE3-F734B5E30B66','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5C214D2A-21FC-5B61-8006-2B64AA1BF908', 'sequence': {'long': 1636}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12853248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5C214D2A-21FC-5B61-8006-2B64AA1BF908','1636','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706924763359335','aue_mmap','12853248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5C214D2A-21FC-5B61-8006-2B64AA1BF908','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5C214D2A-21FC-5B61-8006-2B64AA1BF908','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5C214D2A-21FC-5B61-8006-2B64AA1BF908','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '48721032-7085-560B-B261-C69B3054684B', 'sequence': {'long': 1637}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'48721032-7085-560B-B261-C69B3054684B','1637','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706924763359335','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'48721032-7085-560B-B261-C69B3054684B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'48721032-7085-560B-B261-C69B3054684B','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'48721032-7085-560B-B261-C69B3054684B','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8163F01F-E55D-5246-8FDD-6F804D99D773', 'sequence': {'long': 1638}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': {'string': '/usr/lib/libmemstat.so.3'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8163F01F-E55D-5246-8FDD-6F804D99D773','1638','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','/usr/lib/libmemstat.so.3','1522706924763359335','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8163F01F-E55D-5246-8FDD-6F804D99D773','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8163F01F-E55D-5246-8FDD-6F804D99D773','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8163F01F-E55D-5246-8FDD-6F804D99D773','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '79C79C77-56B2-5D31-BCCD-F9CA66B04C00', 'sequence': {'long': 1639}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'79C79C77-56B2-5D31-BCCD-F9CA66B04C00','1639','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706924763359335','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'79C79C77-56B2-5D31-BCCD-F9CA66B04C00','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'79C79C77-56B2-5D31-BCCD-F9CA66B04C00','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'79C79C77-56B2-5D31-BCCD-F9CA66B04C00','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '78BC226B-8209-50AB-8AD6-936D28B061CF', 'sequence': {'long': 1640}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'78BC226B-8209-50AB-8AD6-936D28B061CF','1640','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706924763359335','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'78BC226B-8209-50AB-8AD6-936D28B061CF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'78BC226B-8209-50AB-8AD6-936D28B061CF','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'78BC226B-8209-50AB-8AD6-936D28B061CF','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C281AC3C-F189-52D4-8311-4ACF0DD128F7', 'sequence': {'long': 1641}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12857344}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C281AC3C-F189-52D4-8311-4ACF0DD128F7','1641','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706924763359335','aue_mmap','12857344','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C281AC3C-F189-52D4-8311-4ACF0DD128F7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C281AC3C-F189-52D4-8311-4ACF0DD128F7','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C281AC3C-F189-52D4-8311-4ACF0DD128F7','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '90A6BDBA-71CB-5C93-8110-775A24F5141F', 'sequence': {'long': 1642}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12857344}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'90A6BDBA-71CB-5C93-8110-775A24F5141F','1642','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706924763359335','aue_mmap','12857344','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'90A6BDBA-71CB-5C93-8110-775A24F5141F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'90A6BDBA-71CB-5C93-8110-775A24F5141F','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'90A6BDBA-71CB-5C93-8110-775A24F5141F','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E05BAC2E-53B8-5E87-B93E-78EF964E4B45', 'sequence': {'long': 1643}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14966784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E05BAC2E-53B8-5E87-B93E-78EF964E4B45','1643','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706924763359335','aue_mmap','14966784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E05BAC2E-53B8-5E87-B93E-78EF964E4B45','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E05BAC2E-53B8-5E87-B93E-78EF964E4B45','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E05BAC2E-53B8-5E87-B93E-78EF964E4B45','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7A31977E-9001-52FA-A2E0-8A69B05B8965', 'sequence': {'long': 1644}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14966784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/lib/libmemstat.so.3', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7A31977E-9001-52FA-A2E0-8A69B05B8965','1644','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706924763359335','aue_mmap','14966784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/lib/libmemstat.so.3','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7A31977E-9001-52FA-A2E0-8A69B05B8965','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7A31977E-9001-52FA-A2E0-8A69B05B8965','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7A31977E-9001-52FA-A2E0-8A69B05B8965','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '423D6A31-BA26-5334-BFE2-A34B2DAC9E2C', 'sequence': {'long': 1645}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4F909471-32BE-7C54-BE32-1D05C47CA876'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'423D6A31-BA26-5334-BFE2-A34B2DAC9E2C','1645','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','4F909471-32BE-7C54-BE32-1D05C47CA876','1522706924763359335','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'423D6A31-BA26-5334-BFE2-A34B2DAC9E2C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'423D6A31-BA26-5334-BFE2-A34B2DAC9E2C','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'423D6A31-BA26-5334-BFE2-A34B2DAC9E2C','4F909471-32BE-7C54-BE32-1D05C47CA876','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4208D01C-AEF6-54B5-AD66-ACBA4DD00D60', 'sequence': {'long': 1646}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': {'string': '/lib/libxo.so.0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924763359335, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4208D01C-AEF6-54B5-AD66-ACBA4DD00D60','1646','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','/lib/libxo.so.0','1522706924763359335','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4208D01C-AEF6-54B5-AD66-ACBA4DD00D60','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4208D01C-AEF6-54B5-AD66-ACBA4DD00D60','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4208D01C-AEF6-54B5-AD66-ACBA4DD00D60','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F7174F98-D1D6-5361-8C22-73FA7BFB8A84', 'sequence': {'long': 1647}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F7174F98-D1D6-5361-8C22-73FA7BFB8A84','1647','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706924773363265','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F7174F98-D1D6-5361-8C22-73FA7BFB8A84','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F7174F98-D1D6-5361-8C22-73FA7BFB8A84','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F7174F98-D1D6-5361-8C22-73FA7BFB8A84','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DEB465B9-D21C-584C-AE2F-A6AAE9F9036D', 'sequence': {'long': 1648}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'DEB465B9-D21C-584C-AE2F-A6AAE9F9036D','1648','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706924773363265','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DEB465B9-D21C-584C-AE2F-A6AAE9F9036D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DEB465B9-D21C-584C-AE2F-A6AAE9F9036D','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DEB465B9-D21C-584C-AE2F-A6AAE9F9036D','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C974E7D4-0F8E-5AD0-9D5E-B9BA60014A92', 'sequence': {'long': 1649}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14970880}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C974E7D4-0F8E-5AD0-9D5E-B9BA60014A92','1649','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706924773363265','aue_mmap','14970880','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C974E7D4-0F8E-5AD0-9D5E-B9BA60014A92','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C974E7D4-0F8E-5AD0-9D5E-B9BA60014A92','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C974E7D4-0F8E-5AD0-9D5E-B9BA60014A92','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '885B6BC4-1A85-5768-83C6-66ED4FC4A998', 'sequence': {'long': 1650}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14970880}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'885B6BC4-1A85-5768-83C6-66ED4FC4A998','1650','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706924773363265','aue_mmap','14970880','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'885B6BC4-1A85-5768-83C6-66ED4FC4A998','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'885B6BC4-1A85-5768-83C6-66ED4FC4A998','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'885B6BC4-1A85-5768-83C6-66ED4FC4A998','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8F003E7E-E8B4-533E-A72E-C5A2990881AC', 'sequence': {'long': 1651}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17182720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8F003E7E-E8B4-533E-A72E-C5A2990881AC','1651','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706924773363265','aue_mmap','17182720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8F003E7E-E8B4-533E-A72E-C5A2990881AC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8F003E7E-E8B4-533E-A72E-C5A2990881AC','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8F003E7E-E8B4-533E-A72E-C5A2990881AC','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5AE9F649-6E42-5D6F-8B29-CCA36CEA3A81', 'sequence': {'long': 1652}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17182720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libxo.so.0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5AE9F649-6E42-5D6F-8B29-CCA36CEA3A81','1652','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706924773363265','aue_mmap','17182720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libxo.so.0','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5AE9F649-6E42-5D6F-8B29-CCA36CEA3A81','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5AE9F649-6E42-5D6F-8B29-CCA36CEA3A81','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5AE9F649-6E42-5D6F-8B29-CCA36CEA3A81','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '73599694-F3AB-590C-9ECC-4E2066426BC6', 'sequence': {'long': 1653}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0905A02C-D979-5D57-B9D9-F12D475D7A9B'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'73599694-F3AB-590C-9ECC-4E2066426BC6','1653','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0905A02C-D979-5D57-B9D9-F12D475D7A9B','1522706924773363265','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'73599694-F3AB-590C-9ECC-4E2066426BC6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'73599694-F3AB-590C-9ECC-4E2066426BC6','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'73599694-F3AB-590C-9ECC-4E2066426BC6','0905A02C-D979-5D57-B9D9-F12D475D7A9B','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '645D3BCE-E47F-5662-A66B-7064C3201425', 'sequence': {'long': 1654}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': {'string': '/lib/libutil.so.9'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'645D3BCE-E47F-5662-A66B-7064C3201425','1654','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','/lib/libutil.so.9','1522706924773363265','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'645D3BCE-E47F-5662-A66B-7064C3201425','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'645D3BCE-E47F-5662-A66B-7064C3201425','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'645D3BCE-E47F-5662-A66B-7064C3201425','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '86578C11-3ACF-507F-AAB8-F3C3F90A2871', 'sequence': {'long': 1655}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'86578C11-3ACF-507F-AAB8-F3C3F90A2871','1655','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706924773363265','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'86578C11-3ACF-507F-AAB8-F3C3F90A2871','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'86578C11-3ACF-507F-AAB8-F3C3F90A2871','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'86578C11-3ACF-507F-AAB8-F3C3F90A2871','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D1BFA9DD-EE03-5170-A6B9-7D6610FC5445', 'sequence': {'long': 1656}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D1BFA9DD-EE03-5170-A6B9-7D6610FC5445','1656','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706924773363265','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D1BFA9DD-EE03-5170-A6B9-7D6610FC5445','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D1BFA9DD-EE03-5170-A6B9-7D6610FC5445','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D1BFA9DD-EE03-5170-A6B9-7D6610FC5445','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B707FAA6-B95B-569D-94C5-B736F6132ED3', 'sequence': {'long': 1657}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17186816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B707FAA6-B95B-569D-94C5-B736F6132ED3','1657','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706924773363265','aue_mmap','17186816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B707FAA6-B95B-569D-94C5-B736F6132ED3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B707FAA6-B95B-569D-94C5-B736F6132ED3','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B707FAA6-B95B-569D-94C5-B736F6132ED3','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '39F587E1-9963-5687-A629-AC0152FD0761', 'sequence': {'long': 1658}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17186816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'39F587E1-9963-5687-A629-AC0152FD0761','1658','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706924773363265','aue_mmap','17186816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'39F587E1-9963-5687-A629-AC0152FD0761','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'39F587E1-9963-5687-A629-AC0152FD0761','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'39F587E1-9963-5687-A629-AC0152FD0761','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C8B82C56-1C93-544A-848C-91D512519048', 'sequence': {'long': 1659}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19353600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C8B82C56-1C93-544A-848C-91D512519048','1659','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706924773363265','aue_mmap','19353600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C8B82C56-1C93-544A-848C-91D512519048','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C8B82C56-1C93-544A-848C-91D512519048','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C8B82C56-1C93-544A-848C-91D512519048','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D959E2DD-028F-5FE6-B5BF-8C604EEC33C2', 'sequence': {'long': 1660}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19353600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libutil.so.9', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D959E2DD-028F-5FE6-B5BF-8C604EEC33C2','1660','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706924773363265','aue_mmap','19353600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libutil.so.9','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D959E2DD-028F-5FE6-B5BF-8C604EEC33C2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D959E2DD-028F-5FE6-B5BF-8C604EEC33C2','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D959E2DD-028F-5FE6-B5BF-8C604EEC33C2','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EE91C479-989D-5CBA-BA6D-F4CAF6E3F578', 'sequence': {'long': 1661}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9FF334BB-9072-D756-B290-556656D73728'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EE91C479-989D-5CBA-BA6D-F4CAF6E3F578','1661','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','9FF334BB-9072-D756-B290-556656D73728','1522706924773363265','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EE91C479-989D-5CBA-BA6D-F4CAF6E3F578','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EE91C479-989D-5CBA-BA6D-F4CAF6E3F578','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EE91C479-989D-5CBA-BA6D-F4CAF6E3F578','9FF334BB-9072-D756-B290-556656D73728','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C92BB729-D196-55F7-8AF5-3F580136AA47', 'sequence': {'long': 1662}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C92BB729-D196-55F7-8AF5-3F580136AA47','1662','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706924773363265','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C92BB729-D196-55F7-8AF5-3F580136AA47','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C92BB729-D196-55F7-8AF5-3F580136AA47','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C92BB729-D196-55F7-8AF5-3F580136AA47','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7E3D252A-B6ED-5230-B4F1-A65263BF7A5E', 'sequence': {'long': 1663}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7E3D252A-B6ED-5230-B4F1-A65263BF7A5E','1663','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924773363265','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7E3D252A-B6ED-5230-B4F1-A65263BF7A5E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7E3D252A-B6ED-5230-B4F1-A65263BF7A5E','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7E3D252A-B6ED-5230-B4F1-A65263BF7A5E','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '40A47D0E-6F81-51C4-9E05-AD92CB24B8E2', 'sequence': {'long': 1664}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'40A47D0E-6F81-51C4-9E05-AD92CB24B8E2','1664','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924773363265','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'40A47D0E-6F81-51C4-9E05-AD92CB24B8E2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'40A47D0E-6F81-51C4-9E05-AD92CB24B8E2','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'40A47D0E-6F81-51C4-9E05-AD92CB24B8E2','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8FC46484-5F84-5DE7-8DEF-613827E72D85', 'sequence': {'long': 1665}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19365888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8FC46484-5F84-5DE7-8DEF-613827E72D85','1665','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924773363265','aue_mmap','19365888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8FC46484-5F84-5DE7-8DEF-613827E72D85','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8FC46484-5F84-5DE7-8DEF-613827E72D85','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8FC46484-5F84-5DE7-8DEF-613827E72D85','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '436B7AFE-1C5E-5855-85B1-166204E672CF', 'sequence': {'long': 1666}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19365888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'436B7AFE-1C5E-5855-85B1-166204E672CF','1666','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924773363265','aue_mmap','19365888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'436B7AFE-1C5E-5855-85B1-166204E672CF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'436B7AFE-1C5E-5855-85B1-166204E672CF','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'436B7AFE-1C5E-5855-85B1-166204E672CF','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1ABBBEE0-3054-54B0-B03F-B1F5D8EB90FF', 'sequence': {'long': 1667}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23252992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1ABBBEE0-3054-54B0-B03F-B1F5D8EB90FF','1667','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924773363265','aue_mmap','23252992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1ABBBEE0-3054-54B0-B03F-B1F5D8EB90FF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1ABBBEE0-3054-54B0-B03F-B1F5D8EB90FF','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1ABBBEE0-3054-54B0-B03F-B1F5D8EB90FF','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0919F208-5BC6-5B44-9787-3A7F638C2A05', 'sequence': {'long': 1668}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23252992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'0919F208-5BC6-5B44-9787-3A7F638C2A05','1668','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924773363265','aue_mmap','23252992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0919F208-5BC6-5B44-9787-3A7F638C2A05','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0919F208-5BC6-5B44-9787-3A7F638C2A05','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0919F208-5BC6-5B44-9787-3A7F638C2A05','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CF6CFA7E-E157-509B-911F-8B01C441CFD3', 'sequence': {'long': 1669}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CF6CFA7E-E157-509B-911F-8B01C441CFD3','1669','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924773363265','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CF6CFA7E-E157-509B-911F-8B01C441CFD3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CF6CFA7E-E157-509B-911F-8B01C441CFD3','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CF6CFA7E-E157-509B-911F-8B01C441CFD3','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5A609BD9-217B-58B3-A42E-8552704A8340', 'sequence': {'long': 1670}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': {'string': '/lib/libelf.so.2'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5A609BD9-217B-58B3-A42E-8552704A8340','1670','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','/lib/libelf.so.2','1522706924773363265','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5A609BD9-217B-58B3-A42E-8552704A8340','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5A609BD9-217B-58B3-A42E-8552704A8340','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5A609BD9-217B-58B3-A42E-8552704A8340','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4471FACB-4D52-5D27-BE9C-C228A990FB50', 'sequence': {'long': 1671}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'4471FACB-4D52-5D27-BE9C-C228A990FB50','1671','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706924773363265','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4471FACB-4D52-5D27-BE9C-C228A990FB50','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4471FACB-4D52-5D27-BE9C-C228A990FB50','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4471FACB-4D52-5D27-BE9C-C228A990FB50','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C3624F02-B33D-5FF7-BC72-747BB6C4829C', 'sequence': {'long': 1672}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C3624F02-B33D-5FF7-BC72-747BB6C4829C','1672','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706924773363265','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C3624F02-B33D-5FF7-BC72-747BB6C4829C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C3624F02-B33D-5FF7-BC72-747BB6C4829C','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C3624F02-B33D-5FF7-BC72-747BB6C4829C','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F2BD2B7A-8D29-59DF-954E-0EF1C0433C73', 'sequence': {'long': 1673}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 25567232}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F2BD2B7A-8D29-59DF-954E-0EF1C0433C73','1673','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706924773363265','aue_mmap','25567232','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F2BD2B7A-8D29-59DF-954E-0EF1C0433C73','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F2BD2B7A-8D29-59DF-954E-0EF1C0433C73','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F2BD2B7A-8D29-59DF-954E-0EF1C0433C73','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '96B620E4-D3C1-5394-B12E-5B0C4BD1A34D', 'sequence': {'long': 1674}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 25567232}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'96B620E4-D3C1-5394-B12E-5B0C4BD1A34D','1674','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706924773363265','aue_mmap','25567232','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'96B620E4-D3C1-5394-B12E-5B0C4BD1A34D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'96B620E4-D3C1-5394-B12E-5B0C4BD1A34D','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'96B620E4-D3C1-5394-B12E-5B0C4BD1A34D','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B809CD14-3227-59E9-8A5E-F552A91436D7', 'sequence': {'long': 1675}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 27758592}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B809CD14-3227-59E9-8A5E-F552A91436D7','1675','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706924773363265','aue_mmap','27758592','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B809CD14-3227-59E9-8A5E-F552A91436D7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B809CD14-3227-59E9-8A5E-F552A91436D7','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B809CD14-3227-59E9-8A5E-F552A91436D7','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '66659D95-06C9-514E-AED6-E58B3E73403A', 'sequence': {'long': 1676}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924773363265, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 27758592}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'66659D95-06C9-514E-AED6-E58B3E73403A','1676','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706924773363265','aue_mmap','27758592','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','vmstat','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'66659D95-06C9-514E-AED6-E58B3E73403A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'66659D95-06C9-514E-AED6-E58B3E73403A','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'66659D95-06C9-514E-AED6-E58B3E73403A','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9DEFA6AC-4D7B-5EEB-9313-38F343431F85', 'sequence': {'long': 1677}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9DEFA6AC-4D7B-5EEB-9313-38F343431F85','1677','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706924783350715','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9DEFA6AC-4D7B-5EEB-9313-38F343431F85','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9DEFA6AC-4D7B-5EEB-9313-38F343431F85','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9DEFA6AC-4D7B-5EEB-9313-38F343431F85','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D932A0EE-27E9-5002-B3C7-FBBC3441112D', 'sequence': {'long': 1678}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D932A0EE-27E9-5002-B3C7-FBBC3441112D','1678','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706924783350715','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D932A0EE-27E9-5002-B3C7-FBBC3441112D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D932A0EE-27E9-5002-B3C7-FBBC3441112D','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D932A0EE-27E9-5002-B3C7-FBBC3441112D','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8347700F-183D-5EF0-BD89-9584CFFD91CF', 'sequence': {'long': 1679}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8347700F-183D-5EF0-BD89-9584CFFD91CF','1679','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706924783350715','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8347700F-183D-5EF0-BD89-9584CFFD91CF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8347700F-183D-5EF0-BD89-9584CFFD91CF','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8347700F-183D-5EF0-BD89-9584CFFD91CF','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '24533347-BE23-5F0D-8DF9-539F2F389568', 'sequence': {'long': 1680}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6598656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'vmstat', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'24533347-BE23-5F0D-8DF9-539F2F389568','1680','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706924783350715','aue_mmap','6598656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','vmstat','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'24533347-BE23-5F0D-8DF9-539F2F389568','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'24533347-BE23-5F0D-8DF9-539F2F389568','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'24533347-BE23-5F0D-8DF9-539F2F389568','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A5FDFB21-DCC1-51F7-AA37-2F89B3C31489', 'sequence': {'long': 1681}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A5FDFB21-DCC1-51F7-AA37-2F89B3C31489','1681','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706924783350715','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A5FDFB21-DCC1-51F7-AA37-2F89B3C31489','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A5FDFB21-DCC1-51F7-AA37-2F89B3C31489','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A5FDFB21-DCC1-51F7-AA37-2F89B3C31489','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '385C9164-4640-528B-A255-535E6757C25C', 'sequence': {'long': 1682}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0E1A657D-11F7-F051-B711-8D3E01F0DC22'}, 'predicateObjectPath': {'string': 'kernel_zones.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 7746}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kernel_zones.txt', 'fd': '1', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'385C9164-4640-528B-A255-535E6757C25C','1682','EVENT_WRITE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0E1A657D-11F7-F051-B711-8D3E01F0DC22','kernel_zones.txt','1522706924783350715','aue_write','7746','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kernel_zones.txt','1','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'385C9164-4640-528B-A255-535E6757C25C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'385C9164-4640-528B-A255-535E6757C25C','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'385C9164-4640-528B-A255-535E6757C25C','0E1A657D-11F7-F051-B711-8D3E01F0DC22','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9069CC22-34DF-51A0-A63A-0BB6A2EC9872', 'sequence': {'long': 1683}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0E1A657D-11F7-F051-B711-8D3E01F0DC22'}, 'predicateObjectPath': {'string': 'kernel_zones.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 7692}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kernel_zones.txt', 'fd': '1', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9069CC22-34DF-51A0-A63A-0BB6A2EC9872','1683','EVENT_WRITE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0E1A657D-11F7-F051-B711-8D3E01F0DC22','kernel_zones.txt','1522706924783350715','aue_write','7692','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kernel_zones.txt','1','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9069CC22-34DF-51A0-A63A-0BB6A2EC9872','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9069CC22-34DF-51A0-A63A-0BB6A2EC9872','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9069CC22-34DF-51A0-A63A-0BB6A2EC9872','0E1A657D-11F7-F051-B711-8D3E01F0DC22','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1B12E10D-1100-5D8D-938A-6C37F18181BC', 'sequence': {'long': 1684}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0E1A657D-11F7-F051-B711-8D3E01F0DC22'}, 'predicateObjectPath': {'string': 'kernel_zones.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2602}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'kernel_zones.txt', 'fd': '1', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1B12E10D-1100-5D8D-938A-6C37F18181BC','1684','EVENT_WRITE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','0E1A657D-11F7-F051-B711-8D3E01F0DC22','kernel_zones.txt','1522706924783350715','aue_write','2602','83c8ed1f-5045-dbcd-b39f-918f0df4f851','kernel_zones.txt','1','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1B12E10D-1100-5D8D-938A-6C37F18181BC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1B12E10D-1100-5D8D-938A-6C37F18181BC','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1B12E10D-1100-5D8D-938A-6C37F18181BC','0E1A657D-11F7-F051-B711-8D3E01F0DC22','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0E65B774-54FB-57E4-A4BA-A40B51DC5469', 'sequence': {'long': 1685}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68F9D498-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'vmstat', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0E65B774-54FB-57E4-A4BA-A40B51DC5469','1685','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','1522706924783350715','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','vmstat','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0E65B774-54FB-57E4-A4BA-A40B51DC5469','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0E65B774-54FB-57E4-A4BA-A40B51DC5469','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0E65B774-54FB-57E4-A4BA-A40B51DC5469','68F9D498-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2816, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706924783350715, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2816','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706924783350715','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F489B3AC-B8E8-5350-A03A-92418C081E7D', 'sequence': {'long': 1686}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2816', 'exec': 'bash', 'arg_pid': '2816', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'F489B3AC-B8E8-5350-A03A-92418C081E7D','1686','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','1522706924783350715','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2816','bash','2816','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F489B3AC-B8E8-5350-A03A-92418C081E7D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F489B3AC-B8E8-5350-A03A-92418C081E7D','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F489B3AC-B8E8-5350-A03A-92418C081E7D','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '851C6E35-73F2-5669-8A05-3FDBF1A11F9E', 'sequence': {'long': 1687}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'851C6E35-73F2-5669-8A05-3FDBF1A11F9E','1687','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706924783350715','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'851C6E35-73F2-5669-8A05-3FDBF1A11F9E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'851C6E35-73F2-5669-8A05-3FDBF1A11F9E','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'851C6E35-73F2-5669-8A05-3FDBF1A11F9E','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '51E80615-A411-51E6-B137-17523F499E1C', 'sequence': {'long': 1688}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C836AA2-BB54-3A58-94BB-1E5D583A637E'}, 'predicateObjectPath': {'string': '/bin/sleep'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'sleep 1', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'51E80615-A411-51E6-B137-17523F499E1C','1688','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','6C836AA2-BB54-3A58-94BB-1E5D583A637E','/bin/sleep','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706924783350715','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','sleep 1','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'51E80615-A411-51E6-B137-17523F499E1C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'51E80615-A411-51E6-B137-17523F499E1C','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'51E80615-A411-51E6-B137-17523F499E1C','6C836AA2-BB54-3A58-94BB-1E5D583A637E','affects'),(nextval('edge_number_seq'),'51E80615-A411-51E6-B137-17523F499E1C','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '48DA9E79-EDAB-59B5-BD99-263C061888EA', 'sequence': {'long': 1689}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'48DA9E79-EDAB-59B5-BD99-263C061888EA','1689','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706924783350715','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'48DA9E79-EDAB-59B5-BD99-263C061888EA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'48DA9E79-EDAB-59B5-BD99-263C061888EA','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'48DA9E79-EDAB-59B5-BD99-263C061888EA','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D0FC4FF3-17D9-5C0E-8170-C0E872455283', 'sequence': {'long': 1690}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924783350715, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D0FC4FF3-17D9-5C0E-8170-C0E872455283','1690','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706924783350715','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D0FC4FF3-17D9-5C0E-8170-C0E872455283','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D0FC4FF3-17D9-5C0E-8170-C0E872455283','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D0FC4FF3-17D9-5C0E-8170-C0E872455283','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '35B5F8DD-A559-54E6-8117-E330DE516DA7', 'sequence': {'long': 1691}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'35B5F8DD-A559-54E6-8117-E330DE516DA7','1691','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706924793363776','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'35B5F8DD-A559-54E6-8117-E330DE516DA7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'35B5F8DD-A559-54E6-8117-E330DE516DA7','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'35B5F8DD-A559-54E6-8117-E330DE516DA7','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C91C6EE3-1EFA-5603-8F5C-C410B4FB288B', 'sequence': {'long': 1692}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C91C6EE3-1EFA-5603-8F5C-C410B4FB288B','1692','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706924793363776','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C91C6EE3-1EFA-5603-8F5C-C410B4FB288B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C91C6EE3-1EFA-5603-8F5C-C410B4FB288B','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C91C6EE3-1EFA-5603-8F5C-C410B4FB288B','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '167BDD74-E70F-59D2-9357-154B88E7AF83', 'sequence': {'long': 1693}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'167BDD74-E70F-59D2-9357-154B88E7AF83','1693','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706924793363776','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'167BDD74-E70F-59D2-9357-154B88E7AF83','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'167BDD74-E70F-59D2-9357-154B88E7AF83','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'167BDD74-E70F-59D2-9357-154B88E7AF83','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0CF010AD-6117-5CA7-9D74-BE7191BF5D04', 'sequence': {'long': 1694}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0CF010AD-6117-5CA7-9D74-BE7191BF5D04','1694','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706924793363776','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0CF010AD-6117-5CA7-9D74-BE7191BF5D04','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0CF010AD-6117-5CA7-9D74-BE7191BF5D04','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0CF010AD-6117-5CA7-9D74-BE7191BF5D04','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '342C7450-FD81-592F-A009-0DB7D987BC53', 'sequence': {'long': 1695}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'342C7450-FD81-592F-A009-0DB7D987BC53','1695','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706924793363776','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'342C7450-FD81-592F-A009-0DB7D987BC53','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'342C7450-FD81-592F-A009-0DB7D987BC53','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'342C7450-FD81-592F-A009-0DB7D987BC53','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EDE80AAF-F7C9-567A-92DF-CB5D4A0A9FE3', 'sequence': {'long': 1696}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EDE80AAF-F7C9-567A-92DF-CB5D4A0A9FE3','1696','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706924793363776','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EDE80AAF-F7C9-567A-92DF-CB5D4A0A9FE3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EDE80AAF-F7C9-567A-92DF-CB5D4A0A9FE3','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EDE80AAF-F7C9-567A-92DF-CB5D4A0A9FE3','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3EA6140D-4CC9-59AA-A0FE-B52027D72F2F', 'sequence': {'long': 1697}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3EA6140D-4CC9-59AA-A0FE-B52027D72F2F','1697','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924793363776','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3EA6140D-4CC9-59AA-A0FE-B52027D72F2F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3EA6140D-4CC9-59AA-A0FE-B52027D72F2F','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3EA6140D-4CC9-59AA-A0FE-B52027D72F2F','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FF7BC6C3-6B4A-5C7E-852F-4064F77286D2', 'sequence': {'long': 1698}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'FF7BC6C3-6B4A-5C7E-852F-4064F77286D2','1698','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924793363776','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FF7BC6C3-6B4A-5C7E-852F-4064F77286D2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FF7BC6C3-6B4A-5C7E-852F-4064F77286D2','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FF7BC6C3-6B4A-5C7E-852F-4064F77286D2','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '476E72D3-6D10-5494-A47C-D8C58FD50C6D', 'sequence': {'long': 1699}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'476E72D3-6D10-5494-A47C-D8C58FD50C6D','1699','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924793363776','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'476E72D3-6D10-5494-A47C-D8C58FD50C6D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'476E72D3-6D10-5494-A47C-D8C58FD50C6D','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'476E72D3-6D10-5494-A47C-D8C58FD50C6D','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C5E0D589-6F29-50A5-8810-8C99D03589D4', 'sequence': {'long': 1700}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C5E0D589-6F29-50A5-8810-8C99D03589D4','1700','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924793363776','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C5E0D589-6F29-50A5-8810-8C99D03589D4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C5E0D589-6F29-50A5-8810-8C99D03589D4','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C5E0D589-6F29-50A5-8810-8C99D03589D4','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '28747C88-40FD-512E-8571-73A9FCDF14F2', 'sequence': {'long': 1701}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'28747C88-40FD-512E-8571-73A9FCDF14F2','1701','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924793363776','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'28747C88-40FD-512E-8571-73A9FCDF14F2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'28747C88-40FD-512E-8571-73A9FCDF14F2','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'28747C88-40FD-512E-8571-73A9FCDF14F2','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1A85B7CB-45FE-5CC7-9786-0BCC749A5749', 'sequence': {'long': 1702}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1A85B7CB-45FE-5CC7-9786-0BCC749A5749','1702','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924793363776','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1A85B7CB-45FE-5CC7-9786-0BCC749A5749','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1A85B7CB-45FE-5CC7-9786-0BCC749A5749','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1A85B7CB-45FE-5CC7-9786-0BCC749A5749','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2F031BAD-80D2-5032-BC9C-358F82640591', 'sequence': {'long': 1703}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2F031BAD-80D2-5032-BC9C-358F82640591','1703','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706924793363776','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2F031BAD-80D2-5032-BC9C-358F82640591','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2F031BAD-80D2-5032-BC9C-358F82640591','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2F031BAD-80D2-5032-BC9C-358F82640591','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3F94B7A8-BC77-5076-8F28-380A56B22F5F', 'sequence': {'long': 1704}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3F94B7A8-BC77-5076-8F28-380A56B22F5F','1704','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706924793363776','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3F94B7A8-BC77-5076-8F28-380A56B22F5F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3F94B7A8-BC77-5076-8F28-380A56B22F5F','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3F94B7A8-BC77-5076-8F28-380A56B22F5F','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '00FD89DD-2387-530F-858B-42D92399E512', 'sequence': {'long': 1705}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'00FD89DD-2387-530F-858B-42D92399E512','1705','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706924793363776','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'00FD89DD-2387-530F-858B-42D92399E512','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'00FD89DD-2387-530F-858B-42D92399E512','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'00FD89DD-2387-530F-858B-42D92399E512','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3ADC21C3-DA7A-5DFE-9325-105CDC4B9F6F', 'sequence': {'long': 1706}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3ADC21C3-DA7A-5DFE-9325-105CDC4B9F6F','1706','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706924793363776','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3ADC21C3-DA7A-5DFE-9325-105CDC4B9F6F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3ADC21C3-DA7A-5DFE-9325-105CDC4B9F6F','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3ADC21C3-DA7A-5DFE-9325-105CDC4B9F6F','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '405E0CB1-B8E2-5C0E-8182-4EF361748885', 'sequence': {'long': 1707}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924793363776, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'405E0CB1-B8E2-5C0E-8182-4EF361748885','1707','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706924793363776','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'405E0CB1-B8E2-5C0E-8182-4EF361748885','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'405E0CB1-B8E2-5C0E-8182-4EF361748885','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'405E0CB1-B8E2-5C0E-8182-4EF361748885','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2AA9C53D-8FC2-5332-B263-DBD9F9F53695', 'sequence': {'long': 1708}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '686A4B61-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924813361526, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2AA9C53D-8FC2-5332-B263-DBD9F9F53695','1708','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','686A4B61-36C2-11E8-BF66-D9AA8AFF4A69','1522706924813361526','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2AA9C53D-8FC2-5332-B263-DBD9F9F53695','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2AA9C53D-8FC2-5332-B263-DBD9F9F53695','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2AA9C53D-8FC2-5332-B263-DBD9F9F53695','686A4B61-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C3F3166A-57AF-5F4A-9171-A857F9F2FD84', 'sequence': {'long': 1709}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '686A4C13-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924813361526, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C3F3166A-57AF-5F4A-9171-A857F9F2FD84','1709','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','686A4C13-36C2-11E8-BF66-D9AA8AFF4A69','1522706924813361526','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C3F3166A-57AF-5F4A-9171-A857F9F2FD84','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C3F3166A-57AF-5F4A-9171-A857F9F2FD84','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C3F3166A-57AF-5F4A-9171-A857F9F2FD84','686A4C13-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6902E1F5-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6902E1F5-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6902E1F5-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6902E1F5-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6902E13E-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6902E13E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6902E13E-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6902E13E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '07069FE1-D2CA-59FD-B143-31E1355E7E30', 'sequence': {'long': 1710}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6902E13E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6902E1F5-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706924813361526, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'07069FE1-D2CA-59FD-B143-31E1355E7E30','1710','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6902E13E-36C2-11E8-BF66-D9AA8AFF4A69','6902E1F5-36C2-11E8-BF66-D9AA8AFF4A69','1522706924813361526','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'07069FE1-D2CA-59FD-B143-31E1355E7E30','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'07069FE1-D2CA-59FD-B143-31E1355E7E30','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'07069FE1-D2CA-59FD-B143-31E1355E7E30','6902E13E-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'07069FE1-D2CA-59FD-B143-31E1355E7E30','6902E1F5-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F617F373-B702-5BD1-90F8-BE5D28EBE4EB', 'sequence': {'long': 1711}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924813361526, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F617F373-B702-5BD1-90F8-BE5D28EBE4EB','1711','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706924813361526','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F617F373-B702-5BD1-90F8-BE5D28EBE4EB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F617F373-B702-5BD1-90F8-BE5D28EBE4EB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D6ED62BF-9E12-590A-9FBF-4F9AFE478055', 'sequence': {'long': 1712}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924813361526, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D6ED62BF-9E12-590A-9FBF-4F9AFE478055','1712','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706924813361526','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D6ED62BF-9E12-590A-9FBF-4F9AFE478055','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D6ED62BF-9E12-590A-9FBF-4F9AFE478055','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DA1C51C3-BAA0-57FE-953D-AD0DD8D0B664', 'sequence': {'long': 1713}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924813361526, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DA1C51C3-BAA0-57FE-953D-AD0DD8D0B664','1713','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706924813361526','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DA1C51C3-BAA0-57FE-953D-AD0DD8D0B664','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DA1C51C3-BAA0-57FE-953D-AD0DD8D0B664','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FFF8FE2A-3CAD-553F-AA52-D5781E4D7AD5', 'sequence': {'long': 1714}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706924813361526, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FFF8FE2A-3CAD-553F-AA52-D5781E4D7AD5','1714','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706924813361526','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FFF8FE2A-3CAD-553F-AA52-D5781E4D7AD5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FFF8FE2A-3CAD-553F-AA52-D5781E4D7AD5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D29AE49E-8CBE-509E-957C-9F735C058145', 'sequence': {'long': 1715}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925803353462, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D29AE49E-8CBE-509E-957C-9F735C058145','1715','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','1522706925803353462','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D29AE49E-8CBE-509E-957C-9F735C058145','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D29AE49E-8CBE-509E-957C-9F735C058145','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D29AE49E-8CBE-509E-957C-9F735C058145','68FF3CE9-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.SrcSinkObject': {'uuid': '699AED30-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'SRCSINK_IPC', 'fileDescriptor': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO srcsinkobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'699AED30-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','SRCSINK_IPC');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'699AED30-36C2-11E8-BF66-D9AA8AFF4A69','SrcSinkObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'699AED30-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.SrcSinkObject': {'uuid': '699AED06-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'SRCSINK_IPC', 'fileDescriptor': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO srcsinkobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'699AED06-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','SRCSINK_IPC');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'699AED06-36C2-11E8-BF66-D9AA8AFF4A69','SrcSinkObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'699AED06-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.UnnamedPipeObject': {'uuid': 'A5D22DC1-224A-51B2-B4C8-1002ED63EC0C', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'sourceFileDescriptor': None, 'sinkFileDescriptor': None, 'sourceUUID': {'com.bbn.tc.schema.avro.cdm18.UUID': '699AED06-36C2-11E8-BF66-D9AA8AFF4A69'}, 'sinkUUID': {'com.bbn.tc.schema.avro.cdm18.UUID': '699AED30-36C2-11E8-BF66-D9AA8AFF4A69'}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO unnamedpipeobject (line, uuid,baseObject_hostId,sourceUUID_UUID,sinkUUID_UUID) VALUES (nextval('line_number_seq'),'A5D22DC1-224A-51B2-B4C8-1002ED63EC0C','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699AED06-36C2-11E8-BF66-D9AA8AFF4A69','699AED30-36C2-11E8-BF66-D9AA8AFF4A69');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A5D22DC1-224A-51B2-B4C8-1002ED63EC0C','UnnamedPipeObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A5D22DC1-224A-51B2-B4C8-1002ED63EC0C','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn'),(nextval('edge_number_seq'),'A5D22DC1-224A-51B2-B4C8-1002ED63EC0C','699AED06-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'A5D22DC1-224A-51B2-B4C8-1002ED63EC0C','699AED30-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '68715B4A-E4C6-587E-A8D3-93D2B14BB077', 'sequence': {'long': 1716}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'A5D22DC1-224A-51B2-B4C8-1002ED63EC0C'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925803353462, 'name': {'string': 'aue_pipe'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '4', 'ret_fd1': '3', 'return_value': '0', 'exec': 'bash', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'68715B4A-E4C6-587E-A8D3-93D2B14BB077','1716','EVENT_CREATE_OBJECT','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','A5D22DC1-224A-51B2-B4C8-1002ED63EC0C','1522706925803353462','aue_pipe','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','3','0','bash','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'68715B4A-E4C6-587E-A8D3-93D2B14BB077','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'68715B4A-E4C6-587E-A8D3-93D2B14BB077','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'68715B4A-E4C6-587E-A8D3-93D2B14BB077','A5D22DC1-224A-51B2-B4C8-1002ED63EC0C','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2817, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706925803353462, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2817','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706925803353462','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0C257808-F1C1-5A81-A62B-C3CFA9AB1979', 'sequence': {'long': 1717}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925803353462, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2817', 'exec': 'bash', 'arg_pid': '2817', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'0C257808-F1C1-5A81-A62B-C3CFA9AB1979','1717','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','1522706925803353462','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2817','bash','2817','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C257808-F1C1-5A81-A62B-C3CFA9AB1979','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C257808-F1C1-5A81-A62B-C3CFA9AB1979','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0C257808-F1C1-5A81-A62B-C3CFA9AB1979','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7AB100D9-623B-5C45-BF46-AF53C31C73EB', 'sequence': {'long': 1718}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925803353462, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7AB100D9-623B-5C45-BF46-AF53C31C73EB','1718','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706925803353462','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7AB100D9-623B-5C45-BF46-AF53C31C73EB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7AB100D9-623B-5C45-BF46-AF53C31C73EB','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7AB100D9-623B-5C45-BF46-AF53C31C73EB','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4CC85C03-55CC-5B01-87E3-495BF2A65A10', 'sequence': {'long': 1719}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6902E13E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4CC85C03-55CC-5B01-87E3-495BF2A65A10','1719','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6902E13E-36C2-11E8-BF66-D9AA8AFF4A69','1522706925813349382','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4CC85C03-55CC-5B01-87E3-495BF2A65A10','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4CC85C03-55CC-5B01-87E3-495BF2A65A10','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4CC85C03-55CC-5B01-87E3-495BF2A65A10','6902E13E-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D4AC6351-9780-5432-ADD4-4F36A4B4E754', 'sequence': {'long': 1720}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6902E1F5-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D4AC6351-9780-5432-ADD4-4F36A4B4E754','1720','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6902E1F5-36C2-11E8-BF66-D9AA8AFF4A69','1522706925813349382','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D4AC6351-9780-5432-ADD4-4F36A4B4E754','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D4AC6351-9780-5432-ADD4-4F36A4B4E754','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D4AC6351-9780-5432-ADD4-4F36A4B4E754','6902E1F5-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2818, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706925813349382, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2818','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706925813349382','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A03667C4-648D-5AB6-9715-37251C01A1C0', 'sequence': {'long': 1721}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2818', 'exec': 'bash', 'arg_pid': '2818', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'A03667C4-648D-5AB6-9715-37251C01A1C0','1721','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','1522706925813349382','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2818','bash','2818','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A03667C4-648D-5AB6-9715-37251C01A1C0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A03667C4-648D-5AB6-9715-37251C01A1C0','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A03667C4-648D-5AB6-9715-37251C01A1C0','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0A2FFAE7-7F06-5823-A6F4-003B94343562', 'sequence': {'long': 1722}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0A2FFAE7-7F06-5823-A6F4-003B94343562','1722','EVENT_CLOSE','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706925813349382','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0A2FFAE7-7F06-5823-A6F4-003B94343562','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0A2FFAE7-7F06-5823-A6F4-003B94343562','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0A2FFAE7-7F06-5823-A6F4-003B94343562','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '699B6658-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'699B6658-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'699B6658-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'699B6658-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '699B65A4-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'699B65A4-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'699B65A4-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'699B65A4-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '61665330-0A2A-5B3A-B523-6EAF49184FAF', 'sequence': {'long': 1723}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B65A4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B6658-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'61665330-0A2A-5B3A-B523-6EAF49184FAF','1723','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','699B65A4-36C2-11E8-BF66-D9AA8AFF4A69','699B6658-36C2-11E8-BF66-D9AA8AFF4A69','1522706925813349382','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'61665330-0A2A-5B3A-B523-6EAF49184FAF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'61665330-0A2A-5B3A-B523-6EAF49184FAF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'61665330-0A2A-5B3A-B523-6EAF49184FAF','699B65A4-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'61665330-0A2A-5B3A-B523-6EAF49184FAF','699B6658-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0A2F9589-59D9-5C69-9A99-73ED492EDCD8', 'sequence': {'long': 1724}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0A2F9589-59D9-5C69-9A99-73ED492EDCD8','1724','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706925813349382','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0A2F9589-59D9-5C69-9A99-73ED492EDCD8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0A2F9589-59D9-5C69-9A99-73ED492EDCD8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CE905886-DE92-56A3-BAD9-01880C56C294', 'sequence': {'long': 1725}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CE905886-DE92-56A3-BAD9-01880C56C294','1725','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706925813349382','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CE905886-DE92-56A3-BAD9-01880C56C294','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CE905886-DE92-56A3-BAD9-01880C56C294','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F7163B59-C4D8-50E7-97AB-B33F14F593A5', 'sequence': {'long': 1726}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F7163B59-C4D8-50E7-97AB-B33F14F593A5','1726','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706925813349382','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F7163B59-C4D8-50E7-97AB-B33F14F593A5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F7163B59-C4D8-50E7-97AB-B33F14F593A5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0724A1F6-6D4D-5E31-A8BA-86F582BA6E7A', 'sequence': {'long': 1727}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FADB56EB-6919-8A51-9969-955CD18AFFC9'}, 'predicateObjectPath': {'string': '/usr/home/darpa/top_procs.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '0209'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0724A1F6-6D4D-5E31-A8BA-86F582BA6E7A','1727','EVENT_OPEN','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','FADB56EB-6919-8A51-9969-955CD18AFFC9','/usr/home/darpa/top_procs.txt','1522706925813349382','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','0209','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0724A1F6-6D4D-5E31-A8BA-86F582BA6E7A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0724A1F6-6D4D-5E31-A8BA-86F582BA6E7A','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0724A1F6-6D4D-5E31-A8BA-86F582BA6E7A','FADB56EB-6919-8A51-9969-955CD18AFFC9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '42704F5A-DD4E-59EE-B34A-35F0857E1CBE', 'sequence': {'long': 1728}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '9D6CE3F1-AA37-D656-B7AA-BA6D46D61C69'}, 'predicateObjectPath': {'string': '/usr/bin/top'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'top -osize', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'42704F5A-DD4E-59EE-B34A-35F0857E1CBE','1728','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','9D6CE3F1-AA37-D656-B7AA-BA6D46D61C69','/usr/bin/top','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706925813349382','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','top -osize','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'42704F5A-DD4E-59EE-B34A-35F0857E1CBE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'42704F5A-DD4E-59EE-B34A-35F0857E1CBE','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'42704F5A-DD4E-59EE-B34A-35F0857E1CBE','9D6CE3F1-AA37-D656-B7AA-BA6D46D61C69','affects'),(nextval('edge_number_seq'),'42704F5A-DD4E-59EE-B34A-35F0857E1CBE','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '755A9F0A-6E22-5FB7-9450-07F205EAD3D4', 'sequence': {'long': 1729}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'755A9F0A-6E22-5FB7-9450-07F205EAD3D4','1729','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706925813349382','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'755A9F0A-6E22-5FB7-9450-07F205EAD3D4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'755A9F0A-6E22-5FB7-9450-07F205EAD3D4','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0BD70499-B85D-5E7D-925A-306C18BC4B2C', 'sequence': {'long': 1730}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FADB56EB-6919-8A51-9969-955CD18AFFC9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0BD70499-B85D-5E7D-925A-306C18BC4B2C','1730','EVENT_CLOSE','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','FADB56EB-6919-8A51-9969-955CD18AFFC9','1522706925813349382','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0BD70499-B85D-5E7D-925A-306C18BC4B2C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0BD70499-B85D-5E7D-925A-306C18BC4B2C','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0BD70499-B85D-5E7D-925A-306C18BC4B2C','FADB56EB-6919-8A51-9969-955CD18AFFC9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4B11FECA-4B2A-5609-BB2E-273A781CE5EF', 'sequence': {'long': 1731}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4B11FECA-4B2A-5609-BB2E-273A781CE5EF','1731','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706925813349382','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4B11FECA-4B2A-5609-BB2E-273A781CE5EF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4B11FECA-4B2A-5609-BB2E-273A781CE5EF','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4B11FECA-4B2A-5609-BB2E-273A781CE5EF','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '020E5539-AA5D-597F-B3FA-8F42B0E84DB6', 'sequence': {'long': 1732}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'020E5539-AA5D-597F-B3FA-8F42B0E84DB6','1732','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706925813349382','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'020E5539-AA5D-597F-B3FA-8F42B0E84DB6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'020E5539-AA5D-597F-B3FA-8F42B0E84DB6','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'020E5539-AA5D-597F-B3FA-8F42B0E84DB6','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '014B4A91-7CED-5304-A582-9F05890A9C0F', 'sequence': {'long': 1733}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '91207D42-8B6E-6454-AE8B-D3FF24648D84'}, 'predicateObjectPath': {'string': '/usr/bin/head'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'head -n15', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'014B4A91-7CED-5304-A582-9F05890A9C0F','1733','EVENT_EXECUTE','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','91207D42-8B6E-6454-AE8B-D3FF24648D84','/usr/bin/head','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706925813349382','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','head -n15','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'014B4A91-7CED-5304-A582-9F05890A9C0F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'014B4A91-7CED-5304-A582-9F05890A9C0F','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'014B4A91-7CED-5304-A582-9F05890A9C0F','91207D42-8B6E-6454-AE8B-D3FF24648D84','affects'),(nextval('edge_number_seq'),'014B4A91-7CED-5304-A582-9F05890A9C0F','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '912E6B85-970D-54CC-A9CF-60FB8960C7C9', 'sequence': {'long': 1734}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'912E6B85-970D-54CC-A9CF-60FB8960C7C9','1734','EVENT_OPEN','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706925813349382','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'912E6B85-970D-54CC-A9CF-60FB8960C7C9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'912E6B85-970D-54CC-A9CF-60FB8960C7C9','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'912E6B85-970D-54CC-A9CF-60FB8960C7C9','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D9622F34-1C94-5A7B-A0CE-4C9E533D3288', 'sequence': {'long': 1735}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D9622F34-1C94-5A7B-A0CE-4C9E533D3288','1735','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706925813349382','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D9622F34-1C94-5A7B-A0CE-4C9E533D3288','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D9622F34-1C94-5A7B-A0CE-4C9E533D3288','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D9622F34-1C94-5A7B-A0CE-4C9E533D3288','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '506F5852-5C3F-52D2-8205-CF764498E493', 'sequence': {'long': 1736}, 'type': 'EVENT_READ', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'506F5852-5C3F-52D2-8205-CF764498E493','1736','EVENT_READ','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706925813349382','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'506F5852-5C3F-52D2-8205-CF764498E493','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'506F5852-5C3F-52D2-8205-CF764498E493','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'506F5852-5C3F-52D2-8205-CF764498E493','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '54A11AC5-00ED-566E-BAB5-AE93830E7884', 'sequence': {'long': 1737}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'54A11AC5-00ED-566E-BAB5-AE93830E7884','1737','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706925813349382','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54A11AC5-00ED-566E-BAB5-AE93830E7884','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54A11AC5-00ED-566E-BAB5-AE93830E7884','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'54A11AC5-00ED-566E-BAB5-AE93830E7884','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3D80C88C-7FA6-56C2-8CE7-CF3A806C91B8', 'sequence': {'long': 1738}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3D80C88C-7FA6-56C2-8CE7-CF3A806C91B8','1738','EVENT_CLOSE','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706925813349382','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3D80C88C-7FA6-56C2-8CE7-CF3A806C91B8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3D80C88C-7FA6-56C2-8CE7-CF3A806C91B8','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3D80C88C-7FA6-56C2-8CE7-CF3A806C91B8','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3A1BA58C-FE73-5C85-B58B-D3D45A236C08', 'sequence': {'long': 1739}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3A1BA58C-FE73-5C85-B58B-D3D45A236C08','1739','EVENT_OPEN','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706925813349382','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3A1BA58C-FE73-5C85-B58B-D3D45A236C08','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3A1BA58C-FE73-5C85-B58B-D3D45A236C08','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3A1BA58C-FE73-5C85-B58B-D3D45A236C08','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FDADA81B-E86D-5F77-89C0-8DC2673A6670', 'sequence': {'long': 1740}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FDADA81B-E86D-5F77-89C0-8DC2673A6670','1740','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706925813349382','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FDADA81B-E86D-5F77-89C0-8DC2673A6670','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FDADA81B-E86D-5F77-89C0-8DC2673A6670','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FDADA81B-E86D-5F77-89C0-8DC2673A6670','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '23B6C606-19A5-5F3B-9C72-4EB831A82F2E', 'sequence': {'long': 1741}, 'type': 'EVENT_READ', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'23B6C606-19A5-5F3B-9C72-4EB831A82F2E','1741','EVENT_READ','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706925813349382','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'23B6C606-19A5-5F3B-9C72-4EB831A82F2E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'23B6C606-19A5-5F3B-9C72-4EB831A82F2E','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'23B6C606-19A5-5F3B-9C72-4EB831A82F2E','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ACCDA9F2-3F13-5C36-9FB2-59F8B499B330', 'sequence': {'long': 1742}, 'type': 'EVENT_READ', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ACCDA9F2-3F13-5C36-9FB2-59F8B499B330','1742','EVENT_READ','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706925813349382','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ACCDA9F2-3F13-5C36-9FB2-59F8B499B330','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ACCDA9F2-3F13-5C36-9FB2-59F8B499B330','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ACCDA9F2-3F13-5C36-9FB2-59F8B499B330','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9EF1B99A-26E8-562F-B1BD-0235F7150670', 'sequence': {'long': 1743}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9EF1B99A-26E8-562F-B1BD-0235F7150670','1743','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706925813349382','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9EF1B99A-26E8-562F-B1BD-0235F7150670','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9EF1B99A-26E8-562F-B1BD-0235F7150670','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9EF1B99A-26E8-562F-B1BD-0235F7150670','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5BD338D4-8C03-52E3-9177-7131531E8486', 'sequence': {'long': 1744}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5BD338D4-8C03-52E3-9177-7131531E8486','1744','EVENT_CLOSE','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706925813349382','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5BD338D4-8C03-52E3-9177-7131531E8486','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5BD338D4-8C03-52E3-9177-7131531E8486','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5BD338D4-8C03-52E3-9177-7131531E8486','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '01C3386F-E774-5B63-B66C-74CEBA84C217', 'sequence': {'long': 1745}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'01C3386F-E774-5B63-B66C-74CEBA84C217','1745','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706925813349382','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'01C3386F-E774-5B63-B66C-74CEBA84C217','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'01C3386F-E774-5B63-B66C-74CEBA84C217','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'01C3386F-E774-5B63-B66C-74CEBA84C217','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DE2C085D-674A-5ECB-B9D4-10EF82A7ADF2', 'sequence': {'long': 1746}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DE2C085D-674A-5ECB-B9D4-10EF82A7ADF2','1746','EVENT_OPEN','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706925813349382','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DE2C085D-674A-5ECB-B9D4-10EF82A7ADF2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DE2C085D-674A-5ECB-B9D4-10EF82A7ADF2','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DE2C085D-674A-5ECB-B9D4-10EF82A7ADF2','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DEDA58FB-9013-538B-9345-37F6211A4712', 'sequence': {'long': 1747}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'DEDA58FB-9013-538B-9345-37F6211A4712','1747','EVENT_MMAP','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925813349382','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DEDA58FB-9013-538B-9345-37F6211A4712','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DEDA58FB-9013-538B-9345-37F6211A4712','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DEDA58FB-9013-538B-9345-37F6211A4712','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6F6F9ACC-890A-5F8D-AB1E-3D9422240D7F', 'sequence': {'long': 1748}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': {'string': '/lib/libncursesw.so.8'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6F6F9ACC-890A-5F8D-AB1E-3D9422240D7F','1748','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','/lib/libncursesw.so.8','1522706925813349382','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6F6F9ACC-890A-5F8D-AB1E-3D9422240D7F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6F6F9ACC-890A-5F8D-AB1E-3D9422240D7F','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6F6F9ACC-890A-5F8D-AB1E-3D9422240D7F','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1F326CEB-6230-509F-8262-3C52A5AF919F', 'sequence': {'long': 1749}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1F326CEB-6230-509F-8262-3C52A5AF919F','1749','EVENT_MMAP','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925813349382','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1F326CEB-6230-509F-8262-3C52A5AF919F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1F326CEB-6230-509F-8262-3C52A5AF919F','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1F326CEB-6230-509F-8262-3C52A5AF919F','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EAEFF05D-22D7-5F35-83BD-10B8C9C9FA78', 'sequence': {'long': 1750}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EAEFF05D-22D7-5F35-83BD-10B8C9C9FA78','1750','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706925813349382','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EAEFF05D-22D7-5F35-83BD-10B8C9C9FA78','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EAEFF05D-22D7-5F35-83BD-10B8C9C9FA78','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EAEFF05D-22D7-5F35-83BD-10B8C9C9FA78','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '382B5ED6-3C0B-5173-8693-AAE5928F9FEA', 'sequence': {'long': 1751}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'382B5ED6-3C0B-5173-8693-AAE5928F9FEA','1751','EVENT_MMAP','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925813349382','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'382B5ED6-3C0B-5173-8693-AAE5928F9FEA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'382B5ED6-3C0B-5173-8693-AAE5928F9FEA','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'382B5ED6-3C0B-5173-8693-AAE5928F9FEA','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C9C99430-5F7A-5582-BDAC-D9B5D3D503C2', 'sequence': {'long': 1752}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C9C99430-5F7A-5582-BDAC-D9B5D3D503C2','1752','EVENT_MMAP','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925813349382','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C9C99430-5F7A-5582-BDAC-D9B5D3D503C2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C9C99430-5F7A-5582-BDAC-D9B5D3D503C2','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C9C99430-5F7A-5582-BDAC-D9B5D3D503C2','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C5570635-D3B9-50B6-A611-17944A559DE1', 'sequence': {'long': 1753}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C5570635-D3B9-50B6-A611-17944A559DE1','1753','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706925813349382','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C5570635-D3B9-50B6-A611-17944A559DE1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C5570635-D3B9-50B6-A611-17944A559DE1','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C5570635-D3B9-50B6-A611-17944A559DE1','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DD4AA663-39E3-5F56-8E07-54557A96C7C0', 'sequence': {'long': 1754}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_NONE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'DD4AA663-39E3-5F56-8E07-54557A96C7C0','1754','EVENT_MMAP','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925813349382','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_NONE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DD4AA663-39E3-5F56-8E07-54557A96C7C0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DD4AA663-39E3-5F56-8E07-54557A96C7C0','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DD4AA663-39E3-5F56-8E07-54557A96C7C0','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E3BD5314-FB1F-5FC7-82A3-50C12A97C039', 'sequence': {'long': 1755}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'E3BD5314-FB1F-5FC7-82A3-50C12A97C039','1755','EVENT_MMAP','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925813349382','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','head','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E3BD5314-FB1F-5FC7-82A3-50C12A97C039','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E3BD5314-FB1F-5FC7-82A3-50C12A97C039','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E3BD5314-FB1F-5FC7-82A3-50C12A97C039','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A70E294A-5395-5D92-A869-911C0E571EF6', 'sequence': {'long': 1756}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8601600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A70E294A-5395-5D92-A869-911C0E571EF6','1756','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706925813349382','aue_mmap','8601600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A70E294A-5395-5D92-A869-911C0E571EF6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A70E294A-5395-5D92-A869-911C0E571EF6','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A70E294A-5395-5D92-A869-911C0E571EF6','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3DF095ED-A3BA-55F2-BC24-D9F5F658D850', 'sequence': {'long': 1757}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3DF095ED-A3BA-55F2-BC24-D9F5F658D850','1757','EVENT_CLOSE','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925813349382','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3DF095ED-A3BA-55F2-BC24-D9F5F658D850','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3DF095ED-A3BA-55F2-BC24-D9F5F658D850','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3DF095ED-A3BA-55F2-BC24-D9F5F658D850','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '573DFDE3-2EFF-51F3-A599-010C2CE04711', 'sequence': {'long': 1758}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925813349382, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8601600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'573DFDE3-2EFF-51F3-A599-010C2CE04711','1758','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706925813349382','aue_mmap','8601600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'573DFDE3-2EFF-51F3-A599-010C2CE04711','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'573DFDE3-2EFF-51F3-A599-010C2CE04711','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'573DFDE3-2EFF-51F3-A599-010C2CE04711','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3E60EAC1-6CA1-57B8-95AD-D2FAA8B04AFF', 'sequence': {'long': 1759}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11059200}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3E60EAC1-6CA1-57B8-95AD-D2FAA8B04AFF','1759','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706925823357453','aue_mmap','11059200','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3E60EAC1-6CA1-57B8-95AD-D2FAA8B04AFF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3E60EAC1-6CA1-57B8-95AD-D2FAA8B04AFF','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3E60EAC1-6CA1-57B8-95AD-D2FAA8B04AFF','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E47F03D5-0669-5F75-A60D-1668A10681F4', 'sequence': {'long': 1760}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E47F03D5-0669-5F75-A60D-1668A10681F4','1760','EVENT_OPEN','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706925823357453','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E47F03D5-0669-5F75-A60D-1668A10681F4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E47F03D5-0669-5F75-A60D-1668A10681F4','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E47F03D5-0669-5F75-A60D-1668A10681F4','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '70B45B39-FC34-5AA0-8A0A-2FB260EB4A67', 'sequence': {'long': 1761}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11059200}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libncursesw.so.8', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'70B45B39-FC34-5AA0-8A0A-2FB260EB4A67','1761','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706925823357453','aue_mmap','11059200','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libncursesw.so.8','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'70B45B39-FC34-5AA0-8A0A-2FB260EB4A67','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'70B45B39-FC34-5AA0-8A0A-2FB260EB4A67','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'70B45B39-FC34-5AA0-8A0A-2FB260EB4A67','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D930BA6E-A17B-5D44-9ACD-742E8BBF11ED', 'sequence': {'long': 1762}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D930BA6E-A17B-5D44-9ACD-742E8BBF11ED','1762','EVENT_MMAP','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706925823357453','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','head','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D930BA6E-A17B-5D44-9ACD-742E8BBF11ED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D930BA6E-A17B-5D44-9ACD-742E8BBF11ED','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D930BA6E-A17B-5D44-9ACD-742E8BBF11ED','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D5464887-550A-598B-A42F-24F432B37974', 'sequence': {'long': 1763}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'head', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D5464887-550A-598B-A42F-24F432B37974','1763','EVENT_MMAP','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706925823357453','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','head','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D5464887-550A-598B-A42F-24F432B37974','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D5464887-550A-598B-A42F-24F432B37974','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D5464887-550A-598B-A42F-24F432B37974','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '65362540-5D26-5DBF-B430-FBD4C834A9F2', 'sequence': {'long': 1764}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A1B4973-09E5-AA50-A509-1753C0AA87A1'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'65362540-5D26-5DBF-B430-FBD4C834A9F2','1764','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','7A1B4973-09E5-AA50-A509-1753C0AA87A1','1522706925823357453','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'65362540-5D26-5DBF-B430-FBD4C834A9F2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'65362540-5D26-5DBF-B430-FBD4C834A9F2','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'65362540-5D26-5DBF-B430-FBD4C834A9F2','7A1B4973-09E5-AA50-A509-1753C0AA87A1','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D6EA5133-8383-53CC-A46D-7E836565501B', 'sequence': {'long': 1765}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D6EA5133-8383-53CC-A46D-7E836565501B','1765','EVENT_CLOSE','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706925823357453','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D6EA5133-8383-53CC-A46D-7E836565501B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D6EA5133-8383-53CC-A46D-7E836565501B','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D6EA5133-8383-53CC-A46D-7E836565501B','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '84BCE8C8-097C-5367-86BA-852998A7F9E3', 'sequence': {'long': 1766}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': {'string': '/lib/libm.so.5'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'84BCE8C8-097C-5367-86BA-852998A7F9E3','1766','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','/lib/libm.so.5','1522706925823357453','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'84BCE8C8-097C-5367-86BA-852998A7F9E3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'84BCE8C8-097C-5367-86BA-852998A7F9E3','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'84BCE8C8-097C-5367-86BA-852998A7F9E3','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ACE3F200-681D-5F70-96A3-E9E314DC3D60', 'sequence': {'long': 1767}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'ACE3F200-681D-5F70-96A3-E9E314DC3D60','1767','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706925823357453','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ACE3F200-681D-5F70-96A3-E9E314DC3D60','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ACE3F200-681D-5F70-96A3-E9E314DC3D60','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ACE3F200-681D-5F70-96A3-E9E314DC3D60','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EA43693C-BB13-5320-A634-FBE6A66A498B', 'sequence': {'long': 1768}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EA43693C-BB13-5320-A634-FBE6A66A498B','1768','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706925823357453','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EA43693C-BB13-5320-A634-FBE6A66A498B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EA43693C-BB13-5320-A634-FBE6A66A498B','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EA43693C-BB13-5320-A634-FBE6A66A498B','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F7ED9DD5-57D2-5D87-A3A3-60CB8413B495', 'sequence': {'long': 1769}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11083776}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F7ED9DD5-57D2-5D87-A3A3-60CB8413B495','1769','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706925823357453','aue_mmap','11083776','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F7ED9DD5-57D2-5D87-A3A3-60CB8413B495','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F7ED9DD5-57D2-5D87-A3A3-60CB8413B495','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F7ED9DD5-57D2-5D87-A3A3-60CB8413B495','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '43B24A83-F8C5-527E-AFFC-C5E1750A17AE', 'sequence': {'long': 1770}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 11083776}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'43B24A83-F8C5-527E-AFFC-C5E1750A17AE','1770','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706925823357453','aue_mmap','11083776','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'43B24A83-F8C5-527E-AFFC-C5E1750A17AE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'43B24A83-F8C5-527E-AFFC-C5E1750A17AE','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'43B24A83-F8C5-527E-AFFC-C5E1750A17AE','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DB6C4D2D-E88A-5E56-B85E-194AEBDAADFB', 'sequence': {'long': 1771}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 13361152}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'DB6C4D2D-E88A-5E56-B85E-194AEBDAADFB','1771','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706925823357453','aue_mmap','13361152','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DB6C4D2D-E88A-5E56-B85E-194AEBDAADFB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DB6C4D2D-E88A-5E56-B85E-194AEBDAADFB','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DB6C4D2D-E88A-5E56-B85E-194AEBDAADFB','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7B8FFED0-FFB7-5E6B-9E63-10AEE0870A47', 'sequence': {'long': 1772}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 13361152}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libm.so.5', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7B8FFED0-FFB7-5E6B-9E63-10AEE0870A47','1772','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706925823357453','aue_mmap','13361152','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libm.so.5','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7B8FFED0-FFB7-5E6B-9E63-10AEE0870A47','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7B8FFED0-FFB7-5E6B-9E63-10AEE0870A47','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7B8FFED0-FFB7-5E6B-9E63-10AEE0870A47','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EB66EAB2-C3B2-58E2-B07E-A8248C2688C6', 'sequence': {'long': 1773}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D57B2A07-B373-B75A-B3B3-93790AB76535'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EB66EAB2-C3B2-58E2-B07E-A8248C2688C6','1773','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D57B2A07-B373-B75A-B3B3-93790AB76535','1522706925823357453','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EB66EAB2-C3B2-58E2-B07E-A8248C2688C6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EB66EAB2-C3B2-58E2-B07E-A8248C2688C6','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EB66EAB2-C3B2-58E2-B07E-A8248C2688C6','D57B2A07-B373-B75A-B3B3-93790AB76535','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '820DCC0B-A984-5B9F-BE03-0F19FAF44518', 'sequence': {'long': 1774}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': {'string': '/lib/libkvm.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'820DCC0B-A984-5B9F-BE03-0F19FAF44518','1774','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','/lib/libkvm.so.7','1522706925823357453','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'820DCC0B-A984-5B9F-BE03-0F19FAF44518','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'820DCC0B-A984-5B9F-BE03-0F19FAF44518','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'820DCC0B-A984-5B9F-BE03-0F19FAF44518','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1E5CCE1D-826B-519A-84EB-AB8087B0EFCD', 'sequence': {'long': 1775}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1E5CCE1D-826B-519A-84EB-AB8087B0EFCD','1775','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706925823357453','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1E5CCE1D-826B-519A-84EB-AB8087B0EFCD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1E5CCE1D-826B-519A-84EB-AB8087B0EFCD','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1E5CCE1D-826B-519A-84EB-AB8087B0EFCD','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DC8729EA-16E2-5E9B-8EBD-A4FB9C64B977', 'sequence': {'long': 1776}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'DC8729EA-16E2-5E9B-8EBD-A4FB9C64B977','1776','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706925823357453','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DC8729EA-16E2-5E9B-8EBD-A4FB9C64B977','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DC8729EA-16E2-5E9B-8EBD-A4FB9C64B977','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DC8729EA-16E2-5E9B-8EBD-A4FB9C64B977','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9D894001-A2F8-530F-ADF9-275416106943', 'sequence': {'long': 1777}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 13365248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9D894001-A2F8-530F-ADF9-275416106943','1777','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706925823357453','aue_mmap','13365248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9D894001-A2F8-530F-ADF9-275416106943','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9D894001-A2F8-530F-ADF9-275416106943','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9D894001-A2F8-530F-ADF9-275416106943','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2ADD86D6-F024-569E-A929-08FA2FA2DA9E', 'sequence': {'long': 1778}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 13365248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2ADD86D6-F024-569E-A929-08FA2FA2DA9E','1778','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706925823357453','aue_mmap','13365248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2ADD86D6-F024-569E-A929-08FA2FA2DA9E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2ADD86D6-F024-569E-A929-08FA2FA2DA9E','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2ADD86D6-F024-569E-A929-08FA2FA2DA9E','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9407707D-D8DC-5052-8D94-A286DB11BEDD', 'sequence': {'long': 1779}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15523840}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9407707D-D8DC-5052-8D94-A286DB11BEDD','1779','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706925823357453','aue_mmap','15523840','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9407707D-D8DC-5052-8D94-A286DB11BEDD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9407707D-D8DC-5052-8D94-A286DB11BEDD','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9407707D-D8DC-5052-8D94-A286DB11BEDD','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '196CAE16-46BE-5033-9A38-0D06B6DE9D0D', 'sequence': {'long': 1780}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925823357453, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15523840}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'196CAE16-46BE-5033-9A38-0D06B6DE9D0D','1780','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706925823357453','aue_mmap','15523840','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'196CAE16-46BE-5033-9A38-0D06B6DE9D0D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'196CAE16-46BE-5033-9A38-0D06B6DE9D0D','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'196CAE16-46BE-5033-9A38-0D06B6DE9D0D','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5F874578-DB12-5CB5-8384-C3F1D2E01EEC', 'sequence': {'long': 1781}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5F874578-DB12-5CB5-8384-C3F1D2E01EEC','1781','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706925833352243','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5F874578-DB12-5CB5-8384-C3F1D2E01EEC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5F874578-DB12-5CB5-8384-C3F1D2E01EEC','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5F874578-DB12-5CB5-8384-C3F1D2E01EEC','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CB4CDEBF-876F-546E-9B68-CABE80CFD80F', 'sequence': {'long': 1782}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': {'string': '/lib/libjail.so.1'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CB4CDEBF-876F-546E-9B68-CABE80CFD80F','1782','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','/lib/libjail.so.1','1522706925833352243','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CB4CDEBF-876F-546E-9B68-CABE80CFD80F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CB4CDEBF-876F-546E-9B68-CABE80CFD80F','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CB4CDEBF-876F-546E-9B68-CABE80CFD80F','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A537187F-57E4-5C96-AFEF-EBD1B2E9B40B', 'sequence': {'long': 1783}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A537187F-57E4-5C96-AFEF-EBD1B2E9B40B','1783','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706925833352243','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A537187F-57E4-5C96-AFEF-EBD1B2E9B40B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A537187F-57E4-5C96-AFEF-EBD1B2E9B40B','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A537187F-57E4-5C96-AFEF-EBD1B2E9B40B','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C4168C41-03DA-5DCF-83D4-C582F6EED63F', 'sequence': {'long': 1784}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C4168C41-03DA-5DCF-83D4-C582F6EED63F','1784','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706925833352243','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C4168C41-03DA-5DCF-83D4-C582F6EED63F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C4168C41-03DA-5DCF-83D4-C582F6EED63F','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C4168C41-03DA-5DCF-83D4-C582F6EED63F','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F03BB665-0587-50A1-83E8-1330311E0A25', 'sequence': {'long': 1785}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15527936}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F03BB665-0587-50A1-83E8-1330311E0A25','1785','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706925833352243','aue_mmap','15527936','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F03BB665-0587-50A1-83E8-1330311E0A25','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F03BB665-0587-50A1-83E8-1330311E0A25','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F03BB665-0587-50A1-83E8-1330311E0A25','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DA801113-05FF-5606-B813-89C77AA69F52', 'sequence': {'long': 1786}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 15527936}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'DA801113-05FF-5606-B813-89C77AA69F52','1786','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706925833352243','aue_mmap','15527936','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DA801113-05FF-5606-B813-89C77AA69F52','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DA801113-05FF-5606-B813-89C77AA69F52','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DA801113-05FF-5606-B813-89C77AA69F52','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EDFB1A49-6A2D-59A9-9926-72A53764E180', 'sequence': {'long': 1787}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17641472}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EDFB1A49-6A2D-59A9-9926-72A53764E180','1787','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706925833352243','aue_mmap','17641472','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EDFB1A49-6A2D-59A9-9926-72A53764E180','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EDFB1A49-6A2D-59A9-9926-72A53764E180','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EDFB1A49-6A2D-59A9-9926-72A53764E180','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D1DF1648-F7FA-571D-AEC9-8C4F33EC357F', 'sequence': {'long': 1788}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17641472}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libjail.so.1', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D1DF1648-F7FA-571D-AEC9-8C4F33EC357F','1788','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706925833352243','aue_mmap','17641472','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libjail.so.1','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D1DF1648-F7FA-571D-AEC9-8C4F33EC357F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D1DF1648-F7FA-571D-AEC9-8C4F33EC357F','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D1DF1648-F7FA-571D-AEC9-8C4F33EC357F','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1E93B52C-0991-5EDF-A384-6B88F3FF17D5', 'sequence': {'long': 1789}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D3F11983-FFD7-8A58-97FF-D38E388A1453'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1E93B52C-0991-5EDF-A384-6B88F3FF17D5','1789','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D3F11983-FFD7-8A58-97FF-D38E388A1453','1522706925833352243','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1E93B52C-0991-5EDF-A384-6B88F3FF17D5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1E93B52C-0991-5EDF-A384-6B88F3FF17D5','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1E93B52C-0991-5EDF-A384-6B88F3FF17D5','D3F11983-FFD7-8A58-97FF-D38E388A1453','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '20CE91B0-A780-5CFB-99EB-633F9913ED76', 'sequence': {'long': 1790}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'20CE91B0-A780-5CFB-99EB-633F9913ED76','1790','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706925833352243','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'20CE91B0-A780-5CFB-99EB-633F9913ED76','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'20CE91B0-A780-5CFB-99EB-633F9913ED76','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'20CE91B0-A780-5CFB-99EB-633F9913ED76','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D9AE4A4D-FEB6-5A99-BE21-CDDF6B1E1B02', 'sequence': {'long': 1791}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D9AE4A4D-FEB6-5A99-BE21-CDDF6B1E1B02','1791','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925833352243','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D9AE4A4D-FEB6-5A99-BE21-CDDF6B1E1B02','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D9AE4A4D-FEB6-5A99-BE21-CDDF6B1E1B02','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D9AE4A4D-FEB6-5A99-BE21-CDDF6B1E1B02','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C9FFF8CA-2461-5B7F-978D-DC34ED013386', 'sequence': {'long': 1792}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C9FFF8CA-2461-5B7F-978D-DC34ED013386','1792','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925833352243','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C9FFF8CA-2461-5B7F-978D-DC34ED013386','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C9FFF8CA-2461-5B7F-978D-DC34ED013386','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C9FFF8CA-2461-5B7F-978D-DC34ED013386','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BB325E49-A5ED-5674-B203-EA1103A82238', 'sequence': {'long': 1793}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17645568}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'BB325E49-A5ED-5674-B203-EA1103A82238','1793','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925833352243','aue_mmap','17645568','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BB325E49-A5ED-5674-B203-EA1103A82238','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BB325E49-A5ED-5674-B203-EA1103A82238','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BB325E49-A5ED-5674-B203-EA1103A82238','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EAD1E4D9-8C39-58AE-A79A-8A4A902C9B33', 'sequence': {'long': 1794}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17645568}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EAD1E4D9-8C39-58AE-A79A-8A4A902C9B33','1794','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925833352243','aue_mmap','17645568','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EAD1E4D9-8C39-58AE-A79A-8A4A902C9B33','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EAD1E4D9-8C39-58AE-A79A-8A4A902C9B33','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EAD1E4D9-8C39-58AE-A79A-8A4A902C9B33','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D64F48F5-E2C7-509A-BBAB-005418832A04', 'sequence': {'long': 1795}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 21532672}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D64F48F5-E2C7-509A-BBAB-005418832A04','1795','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925833352243','aue_mmap','21532672','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D64F48F5-E2C7-509A-BBAB-005418832A04','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D64F48F5-E2C7-509A-BBAB-005418832A04','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D64F48F5-E2C7-509A-BBAB-005418832A04','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '20142158-A72E-56AF-99C6-3C7BED30B79F', 'sequence': {'long': 1796}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 21532672}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'20142158-A72E-56AF-99C6-3C7BED30B79F','1796','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925833352243','aue_mmap','21532672','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'20142158-A72E-56AF-99C6-3C7BED30B79F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'20142158-A72E-56AF-99C6-3C7BED30B79F','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'20142158-A72E-56AF-99C6-3C7BED30B79F','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '77C67454-DF56-50E0-B0D9-DEEC8A5C9918', 'sequence': {'long': 1797}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925833352243, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'77C67454-DF56-50E0-B0D9-DEEC8A5C9918','1797','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925833352243','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'77C67454-DF56-50E0-B0D9-DEEC8A5C9918','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'77C67454-DF56-50E0-B0D9-DEEC8A5C9918','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'77C67454-DF56-50E0-B0D9-DEEC8A5C9918','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '53983484-1466-5866-82C5-12D7015BDA89', 'sequence': {'long': 1798}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': {'string': '/lib/libelf.so.2'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'53983484-1466-5866-82C5-12D7015BDA89','1798','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','/lib/libelf.so.2','1522706925843359594','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'53983484-1466-5866-82C5-12D7015BDA89','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'53983484-1466-5866-82C5-12D7015BDA89','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'53983484-1466-5866-82C5-12D7015BDA89','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '02C0B549-6066-5B78-84F2-E977E56B757C', 'sequence': {'long': 1799}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'02C0B549-6066-5B78-84F2-E977E56B757C','1799','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706925843359594','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'02C0B549-6066-5B78-84F2-E977E56B757C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'02C0B549-6066-5B78-84F2-E977E56B757C','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'02C0B549-6066-5B78-84F2-E977E56B757C','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '46F33B2D-13A0-5250-97AF-C171B03EF497', 'sequence': {'long': 1800}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'46F33B2D-13A0-5250-97AF-C171B03EF497','1800','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706925843359594','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'46F33B2D-13A0-5250-97AF-C171B03EF497','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'46F33B2D-13A0-5250-97AF-C171B03EF497','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'46F33B2D-13A0-5250-97AF-C171B03EF497','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '869F1730-14BD-564E-8AAB-4716FDC88C37', 'sequence': {'long': 1801}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23846912}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'869F1730-14BD-564E-8AAB-4716FDC88C37','1801','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706925843359594','aue_mmap','23846912','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'869F1730-14BD-564E-8AAB-4716FDC88C37','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'869F1730-14BD-564E-8AAB-4716FDC88C37','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'869F1730-14BD-564E-8AAB-4716FDC88C37','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EB96C66D-0F35-56D0-A3ED-9F8AFDF4D683', 'sequence': {'long': 1802}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 23846912}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EB96C66D-0F35-56D0-A3ED-9F8AFDF4D683','1802','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706925843359594','aue_mmap','23846912','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EB96C66D-0F35-56D0-A3ED-9F8AFDF4D683','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EB96C66D-0F35-56D0-A3ED-9F8AFDF4D683','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EB96C66D-0F35-56D0-A3ED-9F8AFDF4D683','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6FDB6858-047F-596D-80B2-759142DFB304', 'sequence': {'long': 1803}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 26038272}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'6FDB6858-047F-596D-80B2-759142DFB304','1803','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706925843359594','aue_mmap','26038272','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6FDB6858-047F-596D-80B2-759142DFB304','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6FDB6858-047F-596D-80B2-759142DFB304','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6FDB6858-047F-596D-80B2-759142DFB304','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7E6019AE-141C-597D-9F64-589F5558100C', 'sequence': {'long': 1804}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 26038272}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7E6019AE-141C-597D-9F64-589F5558100C','1804','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706925843359594','aue_mmap','26038272','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','top','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7E6019AE-141C-597D-9F64-589F5558100C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7E6019AE-141C-597D-9F64-589F5558100C','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7E6019AE-141C-597D-9F64-589F5558100C','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C9494005-E886-5F14-838E-6E2120073A8D', 'sequence': {'long': 1805}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C9494005-E886-5F14-838E-6E2120073A8D','1805','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706925843359594','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C9494005-E886-5F14-838E-6E2120073A8D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C9494005-E886-5F14-838E-6E2120073A8D','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C9494005-E886-5F14-838E-6E2120073A8D','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EE556C9E-5E8D-564A-97A5-9C68DA09C5AA', 'sequence': {'long': 1806}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EE556C9E-5E8D-564A-97A5-9C68DA09C5AA','1806','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706925843359594','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EE556C9E-5E8D-564A-97A5-9C68DA09C5AA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EE556C9E-5E8D-564A-97A5-9C68DA09C5AA','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EE556C9E-5E8D-564A-97A5-9C68DA09C5AA','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '927E68A8-8A73-5CC7-874C-A132DDBAEF0B', 'sequence': {'long': 1807}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'927E68A8-8A73-5CC7-874C-A132DDBAEF0B','1807','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706925843359594','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'927E68A8-8A73-5CC7-874C-A132DDBAEF0B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'927E68A8-8A73-5CC7-874C-A132DDBAEF0B','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'927E68A8-8A73-5CC7-874C-A132DDBAEF0B','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '91CEE059-0222-5F16-BFF9-6487343D4920', 'sequence': {'long': 1808}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6627328}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'top', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'91CEE059-0222-5F16-BFF9-6487343D4920','1808','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706925843359594','aue_mmap','6627328','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','top','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'91CEE059-0222-5F16-BFF9-6487343D4920','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'91CEE059-0222-5F16-BFF9-6487343D4920','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'91CEE059-0222-5F16-BFF9-6487343D4920','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '62624F21-82D0-5F0A-BDE6-F8FBBA71E9B2', 'sequence': {'long': 1809}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'62624F21-82D0-5F0A-BDE6-F8FBBA71E9B2','1809','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706925843359594','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'62624F21-82D0-5F0A-BDE6-F8FBBA71E9B2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'62624F21-82D0-5F0A-BDE6-F8FBBA71E9B2','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'62624F21-82D0-5F0A-BDE6-F8FBBA71E9B2','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E2F27D77-9412-5EE2-B849-FB03A1C4F115', 'sequence': {'long': 1810}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E2F27D77-9412-5EE2-B849-FB03A1C4F115','1810','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706925843359594','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E2F27D77-9412-5EE2-B849-FB03A1C4F115','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E2F27D77-9412-5EE2-B849-FB03A1C4F115','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E2F27D77-9412-5EE2-B849-FB03A1C4F115','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9F38EE33-8D31-50E7-917F-F4B0F74E6538', 'sequence': {'long': 1811}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 272}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/nsswitch.conf', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9F38EE33-8D31-50E7-917F-F4B0F74E6538','1811','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706925843359594','aue_read','272','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/nsswitch.conf','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9F38EE33-8D31-50E7-917F-F4B0F74E6538','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9F38EE33-8D31-50E7-917F-F4B0F74E6538','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9F38EE33-8D31-50E7-917F-F4B0F74E6538','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A2CFC23D-6972-54C7-8FC7-62F92CD8049A', 'sequence': {'long': 1812}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/nsswitch.conf', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A2CFC23D-6972-54C7-8FC7-62F92CD8049A','1812','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706925843359594','aue_read','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/nsswitch.conf','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A2CFC23D-6972-54C7-8FC7-62F92CD8049A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A2CFC23D-6972-54C7-8FC7-62F92CD8049A','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A2CFC23D-6972-54C7-8FC7-62F92CD8049A','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FE4EB997-2381-5359-858E-0B8BDE280EC0', 'sequence': {'long': 1813}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FE4EB997-2381-5359-858E-0B8BDE280EC0','1813','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','1522706925843359594','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FE4EB997-2381-5359-858E-0B8BDE280EC0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FE4EB997-2381-5359-858E-0B8BDE280EC0','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FE4EB997-2381-5359-858E-0B8BDE280EC0','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '04FBED81-EB09-5EDE-A9B8-E3BA6F9D9542', 'sequence': {'long': 1814}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'04FBED81-EB09-5EDE-A9B8-E3BA6F9D9542','1814','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925843359594','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'04FBED81-EB09-5EDE-A9B8-E3BA6F9D9542','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'04FBED81-EB09-5EDE-A9B8-E3BA6F9D9542','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'04FBED81-EB09-5EDE-A9B8-E3BA6F9D9542','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B8906E2B-3DBD-545C-AE7C-6975AB011E02', 'sequence': {'long': 1815}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925843359594, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B8906E2B-3DBD-545C-AE7C-6975AB011E02','1815','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925843359594','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B8906E2B-3DBD-545C-AE7C-6975AB011E02','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B8906E2B-3DBD-545C-AE7C-6975AB011E02','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B8906E2B-3DBD-545C-AE7C-6975AB011E02','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5526A2F6-B8DF-549B-BDFA-4491375FFDD0', 'sequence': {'long': 1816}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5526A2F6-B8DF-549B-BDFA-4491375FFDD0','1816','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925853351694','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5526A2F6-B8DF-549B-BDFA-4491375FFDD0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5526A2F6-B8DF-549B-BDFA-4491375FFDD0','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5526A2F6-B8DF-549B-BDFA-4491375FFDD0','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '08004725-A208-58B1-B525-112A59617160', 'sequence': {'long': 1817}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'08004725-A208-58B1-B525-112A59617160','1817','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925853351694','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'08004725-A208-58B1-B525-112A59617160','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'08004725-A208-58B1-B525-112A59617160','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'08004725-A208-58B1-B525-112A59617160','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AD7CBB8B-602F-55CC-9F2D-E29E8E900A21', 'sequence': {'long': 1818}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AD7CBB8B-602F-55CC-9F2D-E29E8E900A21','1818','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925853351694','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AD7CBB8B-602F-55CC-9F2D-E29E8E900A21','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AD7CBB8B-602F-55CC-9F2D-E29E8E900A21','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AD7CBB8B-602F-55CC-9F2D-E29E8E900A21','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '99AB7142-068D-56C0-BE46-07DAB41B8A95', 'sequence': {'long': 1819}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'99AB7142-068D-56C0-BE46-07DAB41B8A95','1819','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925853351694','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'99AB7142-068D-56C0-BE46-07DAB41B8A95','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'99AB7142-068D-56C0-BE46-07DAB41B8A95','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'99AB7142-068D-56C0-BE46-07DAB41B8A95','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '75649917-01BC-5474-BCAE-9B04CBDED903', 'sequence': {'long': 1820}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'75649917-01BC-5474-BCAE-9B04CBDED903','1820','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925853351694','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'75649917-01BC-5474-BCAE-9B04CBDED903','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'75649917-01BC-5474-BCAE-9B04CBDED903','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'75649917-01BC-5474-BCAE-9B04CBDED903','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D32B659-F817-59B8-B97F-7A87B1F0752E', 'sequence': {'long': 1821}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D32B659-F817-59B8-B97F-7A87B1F0752E','1821','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925853351694','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D32B659-F817-59B8-B97F-7A87B1F0752E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D32B659-F817-59B8-B97F-7A87B1F0752E','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7D32B659-F817-59B8-B97F-7A87B1F0752E','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '69A2CB73-7E38-5E2D-81C7-F7D6CF0C8784', 'sequence': {'long': 1822}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'69A2CB73-7E38-5E2D-81C7-F7D6CF0C8784','1822','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925853351694','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'69A2CB73-7E38-5E2D-81C7-F7D6CF0C8784','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'69A2CB73-7E38-5E2D-81C7-F7D6CF0C8784','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'69A2CB73-7E38-5E2D-81C7-F7D6CF0C8784','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2007436B-D6F7-59D1-A3DD-17D472858650', 'sequence': {'long': 1823}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2007436B-D6F7-59D1-A3DD-17D472858650','1823','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925853351694','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2007436B-D6F7-59D1-A3DD-17D472858650','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2007436B-D6F7-59D1-A3DD-17D472858650','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2007436B-D6F7-59D1-A3DD-17D472858650','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DECC6221-2BD9-5EFF-8639-7013274C64A6', 'sequence': {'long': 1824}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '1633500B-D34B-8058-8BD3-ABB7D880915E'}, 'predicateObjectPath': {'string': '/dev/null'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '4', 'return_value': '4', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DECC6221-2BD9-5EFF-8639-7013274C64A6','1824','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','1633500B-D34B-8058-8BD3-ABB7D880915E','/dev/null','1522706925853351694','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','4','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DECC6221-2BD9-5EFF-8639-7013274C64A6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DECC6221-2BD9-5EFF-8639-7013274C64A6','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DECC6221-2BD9-5EFF-8639-7013274C64A6','1633500B-D34B-8058-8BD3-ABB7D880915E','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1CA7937E-779D-5623-9D0A-02351E682DC1', 'sequence': {'long': 1825}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '1633500B-D34B-8058-8BD3-ABB7D880915E'}, 'predicateObjectPath': {'string': '/dev/null'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '5', 'return_value': '5', 'fd': '-100', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1CA7937E-779D-5623-9D0A-02351E682DC1','1825','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','1633500B-D34B-8058-8BD3-ABB7D880915E','/dev/null','1522706925853351694','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','5','5','-100','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1CA7937E-779D-5623-9D0A-02351E682DC1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1CA7937E-779D-5623-9D0A-02351E682DC1','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1CA7937E-779D-5623-9D0A-02351E682DC1','1633500B-D34B-8058-8BD3-ABB7D880915E','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7F242788-EA61-5619-84CE-BA535BBE4816', 'sequence': {'long': 1826}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '6', 'return_value': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7F242788-EA61-5619-84CE-BA535BBE4816','1826','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706925853351694','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','6','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7F242788-EA61-5619-84CE-BA535BBE4816','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7F242788-EA61-5619-84CE-BA535BBE4816','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7F242788-EA61-5619-84CE-BA535BBE4816','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B054580D-CCFD-5CB9-A0B5-C62FCC3BB28C', 'sequence': {'long': 1827}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B054580D-CCFD-5CB9-A0B5-C62FCC3BB28C','1827','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706925853351694','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B054580D-CCFD-5CB9-A0B5-C62FCC3BB28C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B054580D-CCFD-5CB9-A0B5-C62FCC3BB28C','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B054580D-CCFD-5CB9-A0B5-C62FCC3BB28C','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DB2CFE89-1F41-5226-91BD-1883F3407A8C', 'sequence': {'long': 1828}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DB2CFE89-1F41-5226-91BD-1883F3407A8C','1828','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706925853351694','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DB2CFE89-1F41-5226-91BD-1883F3407A8C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DB2CFE89-1F41-5226-91BD-1883F3407A8C','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DB2CFE89-1F41-5226-91BD-1883F3407A8C','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '02EF5320-7FE8-5169-8120-9F679F034955', 'sequence': {'long': 1829}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': {'string': '/usr/share/misc/termcap.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/misc/termcap.db', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'02EF5320-7FE8-5169-8120-9F679F034955','1829','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','/usr/share/misc/termcap.db','1522706925853351694','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/misc/termcap.db','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'02EF5320-7FE8-5169-8120-9F679F034955','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'02EF5320-7FE8-5169-8120-9F679F034955','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'02EF5320-7FE8-5169-8120-9F679F034955','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '90836CBD-C688-58EC-8ABA-63C953B13586', 'sequence': {'long': 1830}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'D5D2F4F4-4EC5-6456-854E-5E2A46640650'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'90836CBD-C688-58EC-8ABA-63C953B13586','1830','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','D5D2F4F4-4EC5-6456-854E-5E2A46640650','1522706925853351694','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'90836CBD-C688-58EC-8ABA-63C953B13586','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'90836CBD-C688-58EC-8ABA-63C953B13586','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'90836CBD-C688-58EC-8ABA-63C953B13586','D5D2F4F4-4EC5-6456-854E-5E2A46640650','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '22AF7010-0EE1-5EAF-BCFE-C1B06FDBB13A', 'sequence': {'long': 1831}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/UTC'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '6', 'return_value': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'22AF7010-0EE1-5EAF-BCFE-C1B06FDBB13A','1831','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','/usr/share/zoneinfo/UTC','1522706925853351694','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','6','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'22AF7010-0EE1-5EAF-BCFE-C1B06FDBB13A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'22AF7010-0EE1-5EAF-BCFE-C1B06FDBB13A','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'22AF7010-0EE1-5EAF-BCFE-C1B06FDBB13A','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ABC8BC90-0C4D-550C-98B9-DB9CE8814012', 'sequence': {'long': 1832}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/UTC'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 118}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/zoneinfo/UTC', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ABC8BC90-0C4D-550C-98B9-DB9CE8814012','1832','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','/usr/share/zoneinfo/UTC','1522706925853351694','aue_read','118','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/zoneinfo/UTC','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ABC8BC90-0C4D-550C-98B9-DB9CE8814012','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ABC8BC90-0C4D-550C-98B9-DB9CE8814012','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ABC8BC90-0C4D-550C-98B9-DB9CE8814012','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E2F1AD95-E021-536A-B5C8-7832633FA13E', 'sequence': {'long': 1833}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E2F1AD95-E021-536A-B5C8-7832633FA13E','1833','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','1522706925853351694','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E2F1AD95-E021-536A-B5C8-7832633FA13E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E2F1AD95-E021-536A-B5C8-7832633FA13E','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E2F1AD95-E021-536A-B5C8-7832633FA13E','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '62DD15A7-3E0C-584D-BAAB-BC45A465B5ED', 'sequence': {'long': 1834}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/posixrules'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '2C00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '6', 'return_value': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'62DD15A7-3E0C-584D-BAAB-BC45A465B5ED','1834','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','/usr/share/zoneinfo/posixrules','1522706925853351694','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','2C00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','6','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'62DD15A7-3E0C-584D-BAAB-BC45A465B5ED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'62DD15A7-3E0C-584D-BAAB-BC45A465B5ED','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'62DD15A7-3E0C-584D-BAAB-BC45A465B5ED','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1E7F2334-3117-565D-A8E9-506DB42CAFE8', 'sequence': {'long': 1835}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/posixrules'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 3519}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/zoneinfo/posixrules', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1E7F2334-3117-565D-A8E9-506DB42CAFE8','1835','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','/usr/share/zoneinfo/posixrules','1522706925853351694','aue_read','3519','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/zoneinfo/posixrules','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1E7F2334-3117-565D-A8E9-506DB42CAFE8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1E7F2334-3117-565D-A8E9-506DB42CAFE8','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1E7F2334-3117-565D-A8E9-506DB42CAFE8','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DC3FFCFC-A4E4-552C-9A27-CA6DE0782C9D', 'sequence': {'long': 1836}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '6', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DC3FFCFC-A4E4-552C-9A27-CA6DE0782C9D','1836','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','1522706925853351694','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','6','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DC3FFCFC-A4E4-552C-9A27-CA6DE0782C9D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DC3FFCFC-A4E4-552C-9A27-CA6DE0782C9D','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DC3FFCFC-A4E4-552C-9A27-CA6DE0782C9D','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F14999FF-F437-5896-832B-BDDD2F83588E', 'sequence': {'long': 1837}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925853351694, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F14999FF-F437-5896-832B-BDDD2F83588E','1837','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','1522706925853351694','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F14999FF-F437-5896-832B-BDDD2F83588E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F14999FF-F437-5896-832B-BDDD2F83588E','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F14999FF-F437-5896-832B-BDDD2F83588E','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '546C1172-7B7B-5E36-B869-8CB9292D2CD2', 'sequence': {'long': 1838}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'546C1172-7B7B-5E36-B869-8CB9292D2CD2','1838','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'546C1172-7B7B-5E36-B869-8CB9292D2CD2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'546C1172-7B7B-5E36-B869-8CB9292D2CD2','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'546C1172-7B7B-5E36-B869-8CB9292D2CD2','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0560E835-50E7-581A-B26E-3307BBA2A53A', 'sequence': {'long': 1839}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0560E835-50E7-581A-B26E-3307BBA2A53A','1839','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0560E835-50E7-581A-B26E-3307BBA2A53A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0560E835-50E7-581A-B26E-3307BBA2A53A','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0560E835-50E7-581A-B26E-3307BBA2A53A','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D48E7DD-5DE7-5500-BA42-E96D8293393D', 'sequence': {'long': 1840}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D48E7DD-5DE7-5500-BA42-E96D8293393D','1840','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D48E7DD-5DE7-5500-BA42-E96D8293393D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D48E7DD-5DE7-5500-BA42-E96D8293393D','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7D48E7DD-5DE7-5500-BA42-E96D8293393D','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7EDA86DE-EDBE-57C2-A282-1E7033647F38', 'sequence': {'long': 1841}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7EDA86DE-EDBE-57C2-A282-1E7033647F38','1841','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7EDA86DE-EDBE-57C2-A282-1E7033647F38','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7EDA86DE-EDBE-57C2-A282-1E7033647F38','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7EDA86DE-EDBE-57C2-A282-1E7033647F38','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '235C175D-4C35-5D6B-AE8F-680062BEDAF4', 'sequence': {'long': 1842}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'235C175D-4C35-5D6B-AE8F-680062BEDAF4','1842','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'235C175D-4C35-5D6B-AE8F-680062BEDAF4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'235C175D-4C35-5D6B-AE8F-680062BEDAF4','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'235C175D-4C35-5D6B-AE8F-680062BEDAF4','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3A67C9E8-9C19-56F9-85A5-338239BC505E', 'sequence': {'long': 1843}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3A67C9E8-9C19-56F9-85A5-338239BC505E','1843','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3A67C9E8-9C19-56F9-85A5-338239BC505E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3A67C9E8-9C19-56F9-85A5-338239BC505E','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3A67C9E8-9C19-56F9-85A5-338239BC505E','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BAA7252F-6733-552E-9DA6-8C4F1BFC7162', 'sequence': {'long': 1844}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BAA7252F-6733-552E-9DA6-8C4F1BFC7162','1844','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BAA7252F-6733-552E-9DA6-8C4F1BFC7162','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BAA7252F-6733-552E-9DA6-8C4F1BFC7162','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BAA7252F-6733-552E-9DA6-8C4F1BFC7162','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6546D82C-632C-51A7-8900-F923AD51BE71', 'sequence': {'long': 1845}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6546D82C-632C-51A7-8900-F923AD51BE71','1845','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6546D82C-632C-51A7-8900-F923AD51BE71','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6546D82C-632C-51A7-8900-F923AD51BE71','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6546D82C-632C-51A7-8900-F923AD51BE71','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DFF397AA-1BD9-51AE-8395-938A8C231E88', 'sequence': {'long': 1846}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DFF397AA-1BD9-51AE-8395-938A8C231E88','1846','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DFF397AA-1BD9-51AE-8395-938A8C231E88','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DFF397AA-1BD9-51AE-8395-938A8C231E88','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DFF397AA-1BD9-51AE-8395-938A8C231E88','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BD5056AE-2B5F-54B1-8987-546F84452947', 'sequence': {'long': 1847}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BD5056AE-2B5F-54B1-8987-546F84452947','1847','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BD5056AE-2B5F-54B1-8987-546F84452947','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BD5056AE-2B5F-54B1-8987-546F84452947','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BD5056AE-2B5F-54B1-8987-546F84452947','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '331A9DCD-2C39-5562-95BC-AD3CAC1D8A25', 'sequence': {'long': 1848}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'331A9DCD-2C39-5562-95BC-AD3CAC1D8A25','1848','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','1522706925863352134','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'331A9DCD-2C39-5562-95BC-AD3CAC1D8A25','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'331A9DCD-2C39-5562-95BC-AD3CAC1D8A25','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'331A9DCD-2C39-5562-95BC-AD3CAC1D8A25','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '548AC10F-43A1-5C6D-B3A1-99DB96550220', 'sequence': {'long': 1849}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'548AC10F-43A1-5C6D-B3A1-99DB96550220','1849','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'548AC10F-43A1-5C6D-B3A1-99DB96550220','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'548AC10F-43A1-5C6D-B3A1-99DB96550220','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'548AC10F-43A1-5C6D-B3A1-99DB96550220','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8C9B89C0-083F-51F9-89DE-1A9E30FE9078', 'sequence': {'long': 1850}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8C9B89C0-083F-51F9-89DE-1A9E30FE9078','1850','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8C9B89C0-083F-51F9-89DE-1A9E30FE9078','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8C9B89C0-083F-51F9-89DE-1A9E30FE9078','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8C9B89C0-083F-51F9-89DE-1A9E30FE9078','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C8E4F802-013D-5004-BBF5-97E6949A21B6', 'sequence': {'long': 1851}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C8E4F802-013D-5004-BBF5-97E6949A21B6','1851','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C8E4F802-013D-5004-BBF5-97E6949A21B6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C8E4F802-013D-5004-BBF5-97E6949A21B6','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C8E4F802-013D-5004-BBF5-97E6949A21B6','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EA8BD43A-3E20-559A-9EF3-1043B0A49DAC', 'sequence': {'long': 1852}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EA8BD43A-3E20-559A-9EF3-1043B0A49DAC','1852','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EA8BD43A-3E20-559A-9EF3-1043B0A49DAC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EA8BD43A-3E20-559A-9EF3-1043B0A49DAC','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EA8BD43A-3E20-559A-9EF3-1043B0A49DAC','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7B92B2A9-8508-5A31-9EA9-333B55447AA3', 'sequence': {'long': 1853}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7B92B2A9-8508-5A31-9EA9-333B55447AA3','1853','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7B92B2A9-8508-5A31-9EA9-333B55447AA3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7B92B2A9-8508-5A31-9EA9-333B55447AA3','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7B92B2A9-8508-5A31-9EA9-333B55447AA3','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '26C440A1-6AC5-57A9-81C4-DAF7988E0A82', 'sequence': {'long': 1854}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'26C440A1-6AC5-57A9-81C4-DAF7988E0A82','1854','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'26C440A1-6AC5-57A9-81C4-DAF7988E0A82','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'26C440A1-6AC5-57A9-81C4-DAF7988E0A82','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'26C440A1-6AC5-57A9-81C4-DAF7988E0A82','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6D584D1C-217A-5E78-9449-45E66E000BA0', 'sequence': {'long': 1855}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6D584D1C-217A-5E78-9449-45E66E000BA0','1855','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6D584D1C-217A-5E78-9449-45E66E000BA0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6D584D1C-217A-5E78-9449-45E66E000BA0','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6D584D1C-217A-5E78-9449-45E66E000BA0','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E9B709A6-58BF-5AC4-9A3C-DC74BAE19112', 'sequence': {'long': 1856}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E9B709A6-58BF-5AC4-9A3C-DC74BAE19112','1856','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E9B709A6-58BF-5AC4-9A3C-DC74BAE19112','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E9B709A6-58BF-5AC4-9A3C-DC74BAE19112','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E9B709A6-58BF-5AC4-9A3C-DC74BAE19112','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '35E547AA-DD0F-5391-BC98-FB7D2E25FF04', 'sequence': {'long': 1857}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'35E547AA-DD0F-5391-BC98-FB7D2E25FF04','1857','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'35E547AA-DD0F-5391-BC98-FB7D2E25FF04','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'35E547AA-DD0F-5391-BC98-FB7D2E25FF04','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'35E547AA-DD0F-5391-BC98-FB7D2E25FF04','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '15F4F2ED-0A40-55C6-8A86-56A245434F3A', 'sequence': {'long': 1858}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'15F4F2ED-0A40-55C6-8A86-56A245434F3A','1858','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'15F4F2ED-0A40-55C6-8A86-56A245434F3A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'15F4F2ED-0A40-55C6-8A86-56A245434F3A','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'15F4F2ED-0A40-55C6-8A86-56A245434F3A','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BD4A2265-68DD-5A22-9F20-A5BA7B005AC7', 'sequence': {'long': 1859}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BD4A2265-68DD-5A22-9F20-A5BA7B005AC7','1859','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','1522706925863352134','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BD4A2265-68DD-5A22-9F20-A5BA7B005AC7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BD4A2265-68DD-5A22-9F20-A5BA7B005AC7','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BD4A2265-68DD-5A22-9F20-A5BA7B005AC7','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0ED649C4-DA2D-5012-9B9C-21241B9C61E4', 'sequence': {'long': 1860}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0ED649C4-DA2D-5012-9B9C-21241B9C61E4','1860','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0ED649C4-DA2D-5012-9B9C-21241B9C61E4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0ED649C4-DA2D-5012-9B9C-21241B9C61E4','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0ED649C4-DA2D-5012-9B9C-21241B9C61E4','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C28743A0-508A-5E76-82F0-800E42A4E95D', 'sequence': {'long': 1861}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C28743A0-508A-5E76-82F0-800E42A4E95D','1861','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C28743A0-508A-5E76-82F0-800E42A4E95D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C28743A0-508A-5E76-82F0-800E42A4E95D','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C28743A0-508A-5E76-82F0-800E42A4E95D','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B1443099-3C19-50DF-A381-7BA4B82A6012', 'sequence': {'long': 1862}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B1443099-3C19-50DF-A381-7BA4B82A6012','1862','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B1443099-3C19-50DF-A381-7BA4B82A6012','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B1443099-3C19-50DF-A381-7BA4B82A6012','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B1443099-3C19-50DF-A381-7BA4B82A6012','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '10738FDB-0C66-5C32-8297-359FB03A0593', 'sequence': {'long': 1863}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'10738FDB-0C66-5C32-8297-359FB03A0593','1863','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'10738FDB-0C66-5C32-8297-359FB03A0593','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'10738FDB-0C66-5C32-8297-359FB03A0593','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'10738FDB-0C66-5C32-8297-359FB03A0593','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '427DD33B-C064-5AB0-8F82-2A720F44A904', 'sequence': {'long': 1864}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'427DD33B-C064-5AB0-8F82-2A720F44A904','1864','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'427DD33B-C064-5AB0-8F82-2A720F44A904','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'427DD33B-C064-5AB0-8F82-2A720F44A904','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'427DD33B-C064-5AB0-8F82-2A720F44A904','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E5EE92F7-D3A2-57B8-A272-12FA75E69794', 'sequence': {'long': 1865}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925863352134, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E5EE92F7-D3A2-57B8-A272-12FA75E69794','1865','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925863352134','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E5EE92F7-D3A2-57B8-A272-12FA75E69794','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E5EE92F7-D3A2-57B8-A272-12FA75E69794','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E5EE92F7-D3A2-57B8-A272-12FA75E69794','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '246DFDDF-C8F9-5C25-AA6D-688FE2E6ACFF', 'sequence': {'long': 1866}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'246DFDDF-C8F9-5C25-AA6D-688FE2E6ACFF','1866','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925873355725','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'246DFDDF-C8F9-5C25-AA6D-688FE2E6ACFF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'246DFDDF-C8F9-5C25-AA6D-688FE2E6ACFF','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'246DFDDF-C8F9-5C25-AA6D-688FE2E6ACFF','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A81408E5-862A-5AC9-B212-78540308CD16', 'sequence': {'long': 1867}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A81408E5-862A-5AC9-B212-78540308CD16','1867','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925873355725','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A81408E5-862A-5AC9-B212-78540308CD16','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A81408E5-862A-5AC9-B212-78540308CD16','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A81408E5-862A-5AC9-B212-78540308CD16','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '09E4FA74-FFCE-55CC-9839-6752254155A5', 'sequence': {'long': 1868}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'09E4FA74-FFCE-55CC-9839-6752254155A5','1868','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925873355725','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'09E4FA74-FFCE-55CC-9839-6752254155A5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'09E4FA74-FFCE-55CC-9839-6752254155A5','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'09E4FA74-FFCE-55CC-9839-6752254155A5','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2BB44712-C13A-5F25-97E5-78CE0987D18B', 'sequence': {'long': 1869}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2BB44712-C13A-5F25-97E5-78CE0987D18B','1869','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706925873355725','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2BB44712-C13A-5F25-97E5-78CE0987D18B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2BB44712-C13A-5F25-97E5-78CE0987D18B','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2BB44712-C13A-5F25-97E5-78CE0987D18B','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '495C64C1-FF49-5A10-A322-EB58A99C1F83', 'sequence': {'long': 1870}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'495C64C1-FF49-5A10-A322-EB58A99C1F83','1870','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','1522706925873355725','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'495C64C1-FF49-5A10-A322-EB58A99C1F83','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'495C64C1-FF49-5A10-A322-EB58A99C1F83','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'495C64C1-FF49-5A10-A322-EB58A99C1F83','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D5F712C1-16A2-58E3-9A02-CFC09EA1E6D1', 'sequence': {'long': 1871}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'A5D22DC1-224A-51B2-B4C8-1002ED63EC0C'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1649}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '1', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D5F712C1-16A2-58E3-9A02-CFC09EA1E6D1','1871','EVENT_WRITE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','A5D22DC1-224A-51B2-B4C8-1002ED63EC0C','<unknown>','1522706925873355725','aue_write','1649','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','1','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D5F712C1-16A2-58E3-9A02-CFC09EA1E6D1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D5F712C1-16A2-58E3-9A02-CFC09EA1E6D1','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D5F712C1-16A2-58E3-9A02-CFC09EA1E6D1','A5D22DC1-224A-51B2-B4C8-1002ED63EC0C','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8FF9E49B-DAC9-54ED-8662-3A25536CCFF8', 'sequence': {'long': 1872}, 'type': 'EVENT_READ', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'A5D22DC1-224A-51B2-B4C8-1002ED63EC0C'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1649}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '0', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8FF9E49B-DAC9-54ED-8662-3A25536CCFF8','1872','EVENT_READ','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','A5D22DC1-224A-51B2-B4C8-1002ED63EC0C','<unknown>','1522706925873355725','aue_read','1649','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','0','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8FF9E49B-DAC9-54ED-8662-3A25536CCFF8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8FF9E49B-DAC9-54ED-8662-3A25536CCFF8','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8FF9E49B-DAC9-54ED-8662-3A25536CCFF8','A5D22DC1-224A-51B2-B4C8-1002ED63EC0C','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '94062BEB-4FC5-5188-BBFB-D419A8848769', 'sequence': {'long': 1873}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B02A9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'top', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'94062BEB-4FC5-5188-BBFB-D419A8848769','1873','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','1522706925873355725','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','top','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'94062BEB-4FC5-5188-BBFB-D419A8848769','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'94062BEB-4FC5-5188-BBFB-D419A8848769','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'94062BEB-4FC5-5188-BBFB-D419A8848769','699B02A9-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BFFF333E-D5D4-59CA-BA37-21AA7AD35D35', 'sequence': {'long': 1874}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'FADB56EB-6919-8A51-9969-955CD18AFFC9'}, 'predicateObjectPath': {'string': 'top_procs.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 810}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': 'top_procs.txt', 'fd': '1', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BFFF333E-D5D4-59CA-BA37-21AA7AD35D35','1874','EVENT_WRITE','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','FADB56EB-6919-8A51-9969-955CD18AFFC9','top_procs.txt','1522706925873355725','aue_write','810','83c8ed1f-5045-dbcd-b39f-918f0df4f851','top_procs.txt','1','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BFFF333E-D5D4-59CA-BA37-21AA7AD35D35','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BFFF333E-D5D4-59CA-BA37-21AA7AD35D35','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BFFF333E-D5D4-59CA-BA37-21AA7AD35D35','FADB56EB-6919-8A51-9969-955CD18AFFC9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A69EAD17-6BF5-55EA-9C1D-0B2EF7C0043C', 'sequence': {'long': 1875}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100259}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B55DB-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'head', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A69EAD17-6BF5-55EA-9C1D-0B2EF7C0043C','1875','EVENT_EXIT','100259','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','1522706925873355725','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','head','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A69EAD17-6BF5-55EA-9C1D-0B2EF7C0043C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A69EAD17-6BF5-55EA-9C1D-0B2EF7C0043C','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A69EAD17-6BF5-55EA-9C1D-0B2EF7C0043C','699B55DB-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2819, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706925873355725, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'69A51373-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2819','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706925873355725','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'69A51373-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'69A51373-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'69A51373-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'69A51373-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EECDBB85-086F-5285-9BAB-BDAFC3E83827', 'sequence': {'long': 1876}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2819', 'exec': 'bash', 'arg_pid': '2819', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'EECDBB85-086F-5285-9BAB-BDAFC3E83827','1876','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','1522706925873355725','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2819','bash','2819','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EECDBB85-086F-5285-9BAB-BDAFC3E83827','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EECDBB85-086F-5285-9BAB-BDAFC3E83827','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EECDBB85-086F-5285-9BAB-BDAFC3E83827','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '04C03EEC-71C7-56DF-AEA1-DDB931C12FE9', 'sequence': {'long': 1877}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'04C03EEC-71C7-56DF-AEA1-DDB931C12FE9','1877','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706925873355725','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'04C03EEC-71C7-56DF-AEA1-DDB931C12FE9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'04C03EEC-71C7-56DF-AEA1-DDB931C12FE9','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'04C03EEC-71C7-56DF-AEA1-DDB931C12FE9','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7F82EAC8-9063-53A2-8746-15E5EA20C86C', 'sequence': {'long': 1878}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C836AA2-BB54-3A58-94BB-1E5D583A637E'}, 'predicateObjectPath': {'string': '/bin/sleep'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'sleep 1', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7F82EAC8-9063-53A2-8746-15E5EA20C86C','1878','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','6C836AA2-BB54-3A58-94BB-1E5D583A637E','/bin/sleep','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706925873355725','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','sleep 1','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7F82EAC8-9063-53A2-8746-15E5EA20C86C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7F82EAC8-9063-53A2-8746-15E5EA20C86C','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7F82EAC8-9063-53A2-8746-15E5EA20C86C','6C836AA2-BB54-3A58-94BB-1E5D583A637E','affects'),(nextval('edge_number_seq'),'7F82EAC8-9063-53A2-8746-15E5EA20C86C','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7A34485A-256D-5996-A8AF-1D644B51B851', 'sequence': {'long': 1879}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7A34485A-256D-5996-A8AF-1D644B51B851','1879','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706925873355725','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7A34485A-256D-5996-A8AF-1D644B51B851','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7A34485A-256D-5996-A8AF-1D644B51B851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7A34485A-256D-5996-A8AF-1D644B51B851','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DE8D4B8F-1A22-54C4-9BFE-58B3EBA1D1E6', 'sequence': {'long': 1880}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DE8D4B8F-1A22-54C4-9BFE-58B3EBA1D1E6','1880','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706925873355725','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DE8D4B8F-1A22-54C4-9BFE-58B3EBA1D1E6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DE8D4B8F-1A22-54C4-9BFE-58B3EBA1D1E6','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DE8D4B8F-1A22-54C4-9BFE-58B3EBA1D1E6','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0A8B88F7-A8F4-5E8A-849D-784C4375ECEB', 'sequence': {'long': 1881}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0A8B88F7-A8F4-5E8A-849D-784C4375ECEB','1881','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706925873355725','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0A8B88F7-A8F4-5E8A-849D-784C4375ECEB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0A8B88F7-A8F4-5E8A-849D-784C4375ECEB','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0A8B88F7-A8F4-5E8A-849D-784C4375ECEB','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6E66F03F-2B0F-5B11-BF14-962F8D13895D', 'sequence': {'long': 1882}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6E66F03F-2B0F-5B11-BF14-962F8D13895D','1882','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706925873355725','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6E66F03F-2B0F-5B11-BF14-962F8D13895D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6E66F03F-2B0F-5B11-BF14-962F8D13895D','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6E66F03F-2B0F-5B11-BF14-962F8D13895D','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7C4D5404-AE53-5DA6-93D3-8A056BD9F9E6', 'sequence': {'long': 1883}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7C4D5404-AE53-5DA6-93D3-8A056BD9F9E6','1883','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706925873355725','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7C4D5404-AE53-5DA6-93D3-8A056BD9F9E6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7C4D5404-AE53-5DA6-93D3-8A056BD9F9E6','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7C4D5404-AE53-5DA6-93D3-8A056BD9F9E6','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B9D01A85-A8A2-5A85-B5A9-81BBECD3A8FF', 'sequence': {'long': 1884}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B9D01A85-A8A2-5A85-B5A9-81BBECD3A8FF','1884','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706925873355725','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B9D01A85-A8A2-5A85-B5A9-81BBECD3A8FF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B9D01A85-A8A2-5A85-B5A9-81BBECD3A8FF','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B9D01A85-A8A2-5A85-B5A9-81BBECD3A8FF','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C7A6ECC4-CADD-59FB-A10D-F7A95C4919FB', 'sequence': {'long': 1885}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C7A6ECC4-CADD-59FB-A10D-F7A95C4919FB','1885','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706925873355725','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C7A6ECC4-CADD-59FB-A10D-F7A95C4919FB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C7A6ECC4-CADD-59FB-A10D-F7A95C4919FB','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C7A6ECC4-CADD-59FB-A10D-F7A95C4919FB','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '987EC746-DD03-58A9-8CEF-12AAAADB2745', 'sequence': {'long': 1886}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'987EC746-DD03-58A9-8CEF-12AAAADB2745','1886','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706925873355725','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'987EC746-DD03-58A9-8CEF-12AAAADB2745','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'987EC746-DD03-58A9-8CEF-12AAAADB2745','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'987EC746-DD03-58A9-8CEF-12AAAADB2745','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C67A09EB-8C1B-5BFC-A97A-475CD5666737', 'sequence': {'long': 1887}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'C67A09EB-8C1B-5BFC-A97A-475CD5666737','1887','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925873355725','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C67A09EB-8C1B-5BFC-A97A-475CD5666737','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C67A09EB-8C1B-5BFC-A97A-475CD5666737','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C67A09EB-8C1B-5BFC-A97A-475CD5666737','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DFDDFA7E-9BC6-552A-BE40-A396CE06E967', 'sequence': {'long': 1888}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925873355725, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'DFDDFA7E-9BC6-552A-BE40-A396CE06E967','1888','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925873355725','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DFDDFA7E-9BC6-552A-BE40-A396CE06E967','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DFDDFA7E-9BC6-552A-BE40-A396CE06E967','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DFDDFA7E-9BC6-552A-BE40-A396CE06E967','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '837A37CE-F72D-569C-97BD-18BA935D34FF', 'sequence': {'long': 1889}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925883353275, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'837A37CE-F72D-569C-97BD-18BA935D34FF','1889','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925883353275','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'837A37CE-F72D-569C-97BD-18BA935D34FF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'837A37CE-F72D-569C-97BD-18BA935D34FF','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'837A37CE-F72D-569C-97BD-18BA935D34FF','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3CE75364-0BF7-50C0-A6E9-BDD366D43798', 'sequence': {'long': 1890}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925883353275, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'3CE75364-0BF7-50C0-A6E9-BDD366D43798','1890','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925883353275','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3CE75364-0BF7-50C0-A6E9-BDD366D43798','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3CE75364-0BF7-50C0-A6E9-BDD366D43798','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3CE75364-0BF7-50C0-A6E9-BDD366D43798','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A1C81768-2D73-562F-9B54-99FA34602806', 'sequence': {'long': 1891}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925883353275, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A1C81768-2D73-562F-9B54-99FA34602806','1891','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925883353275','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A1C81768-2D73-562F-9B54-99FA34602806','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A1C81768-2D73-562F-9B54-99FA34602806','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A1C81768-2D73-562F-9B54-99FA34602806','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AC13C3D2-124B-5238-8B3F-2581BF04E782', 'sequence': {'long': 1892}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925883353275, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'AC13C3D2-124B-5238-8B3F-2581BF04E782','1892','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925883353275','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AC13C3D2-124B-5238-8B3F-2581BF04E782','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AC13C3D2-124B-5238-8B3F-2581BF04E782','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AC13C3D2-124B-5238-8B3F-2581BF04E782','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F4A66441-B9BC-5B9E-B949-CB2955F322F9', 'sequence': {'long': 1893}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925883353275, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F4A66441-B9BC-5B9E-B949-CB2955F322F9','1893','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706925883353275','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F4A66441-B9BC-5B9E-B949-CB2955F322F9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F4A66441-B9BC-5B9E-B949-CB2955F322F9','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F4A66441-B9BC-5B9E-B949-CB2955F322F9','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '33173EA1-0EEB-54CD-A48C-361779480E87', 'sequence': {'long': 1894}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925883353275, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'33173EA1-0EEB-54CD-A48C-361779480E87','1894','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706925883353275','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'33173EA1-0EEB-54CD-A48C-361779480E87','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'33173EA1-0EEB-54CD-A48C-361779480E87','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'33173EA1-0EEB-54CD-A48C-361779480E87','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4473FCAE-DF49-53FB-A5A8-BEF03C40CDD3', 'sequence': {'long': 1895}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925883353275, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'4473FCAE-DF49-53FB-A5A8-BEF03C40CDD3','1895','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706925883353275','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4473FCAE-DF49-53FB-A5A8-BEF03C40CDD3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4473FCAE-DF49-53FB-A5A8-BEF03C40CDD3','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4473FCAE-DF49-53FB-A5A8-BEF03C40CDD3','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '855E67EB-22AC-5C73-BB73-0F47F9B04E47', 'sequence': {'long': 1896}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925883353275, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'855E67EB-22AC-5C73-BB73-0F47F9B04E47','1896','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706925883353275','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'855E67EB-22AC-5C73-BB73-0F47F9B04E47','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'855E67EB-22AC-5C73-BB73-0F47F9B04E47','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'855E67EB-22AC-5C73-BB73-0F47F9B04E47','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '77F5465E-6DA5-5D07-9BFB-FC4682228A43', 'sequence': {'long': 1897}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706925883353275, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'77F5465E-6DA5-5D07-9BFB-FC4682228A43','1897','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706925883353275','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'77F5465E-6DA5-5D07-9BFB-FC4682228A43','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'77F5465E-6DA5-5D07-9BFB-FC4682228A43','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'77F5465E-6DA5-5D07-9BFB-FC4682228A43','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EF258BAE-EF9B-5944-BBA8-7C610A1A5DE2', 'sequence': {'long': 1898}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B65A4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926823351959, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EF258BAE-EF9B-5944-BBA8-7C610A1A5DE2','1898','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','699B65A4-36C2-11E8-BF66-D9AA8AFF4A69','1522706926823351959','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EF258BAE-EF9B-5944-BBA8-7C610A1A5DE2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EF258BAE-EF9B-5944-BBA8-7C610A1A5DE2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EF258BAE-EF9B-5944-BBA8-7C610A1A5DE2','699B65A4-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4E33F4EE-D568-50DB-AAD6-F9F1AAE89EB0', 'sequence': {'long': 1899}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '699B6658-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926823351959, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4E33F4EE-D568-50DB-AAD6-F9F1AAE89EB0','1899','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','699B6658-36C2-11E8-BF66-D9AA8AFF4A69','1522706926823351959','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4E33F4EE-D568-50DB-AAD6-F9F1AAE89EB0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4E33F4EE-D568-50DB-AAD6-F9F1AAE89EB0','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4E33F4EE-D568-50DB-AAD6-F9F1AAE89EB0','699B6658-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6A35CA58-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6A35CA58-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6A35CA58-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6A35CA58-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6A35C99A-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6A35C99A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6A35C99A-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6A35C99A-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '83625326-383A-5F36-ADD2-AC87710FAE65', 'sequence': {'long': 1900}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A35C99A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A35CA58-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706926823351959, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'83625326-383A-5F36-ADD2-AC87710FAE65','1900','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6A35C99A-36C2-11E8-BF66-D9AA8AFF4A69','6A35CA58-36C2-11E8-BF66-D9AA8AFF4A69','1522706926823351959','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'83625326-383A-5F36-ADD2-AC87710FAE65','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'83625326-383A-5F36-ADD2-AC87710FAE65','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'83625326-383A-5F36-ADD2-AC87710FAE65','6A35C99A-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'83625326-383A-5F36-ADD2-AC87710FAE65','6A35CA58-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E62CD4DA-D8C1-51FD-A00F-C543253AB79D', 'sequence': {'long': 1901}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926823351959, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E62CD4DA-D8C1-51FD-A00F-C543253AB79D','1901','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706926823351959','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E62CD4DA-D8C1-51FD-A00F-C543253AB79D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E62CD4DA-D8C1-51FD-A00F-C543253AB79D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '51314C10-38FE-535D-811C-51C32BE20896', 'sequence': {'long': 1902}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926823351959, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'51314C10-38FE-535D-811C-51C32BE20896','1902','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706926823351959','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'51314C10-38FE-535D-811C-51C32BE20896','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'51314C10-38FE-535D-811C-51C32BE20896','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B5363C68-B6C6-5203-92AB-5E974D1C5277', 'sequence': {'long': 1903}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926823351959, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B5363C68-B6C6-5203-92AB-5E974D1C5277','1903','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706926823351959','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B5363C68-B6C6-5203-92AB-5E974D1C5277','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B5363C68-B6C6-5203-92AB-5E974D1C5277','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6F4D91C9-9B46-50AC-828F-F176CEED5E46', 'sequence': {'long': 1904}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926823351959, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6F4D91C9-9B46-50AC-828F-F176CEED5E46','1904','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706926823351959','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6F4D91C9-9B46-50AC-828F-F176CEED5E46','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6F4D91C9-9B46-50AC-828F-F176CEED5E46','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DC55A8F6-16F0-5925-8343-81A982B7D078', 'sequence': {'long': 1905}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '69A51373-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DC55A8F6-16F0-5925-8343-81A982B7D078','1905','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','1522706926893350741','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DC55A8F6-16F0-5925-8343-81A982B7D078','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DC55A8F6-16F0-5925-8343-81A982B7D078','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DC55A8F6-16F0-5925-8343-81A982B7D078','69A51373-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2820, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706926893350741, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'6A404274-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2820','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706926893350741','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6A404274-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6A404274-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'6A404274-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'6A404274-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C0C9DBB0-AE99-5F40-AFFF-8936BA372B95', 'sequence': {'long': 1906}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2820', 'exec': 'bash', 'arg_pid': '2820', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'C0C9DBB0-AE99-5F40-AFFF-8936BA372B95','1906','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','1522706926893350741','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2820','bash','2820','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C0C9DBB0-AE99-5F40-AFFF-8936BA372B95','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C0C9DBB0-AE99-5F40-AFFF-8936BA372B95','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C0C9DBB0-AE99-5F40-AFFF-8936BA372B95','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '10E0E261-6D5E-574E-AE83-EFBE0AFAAEF3', 'sequence': {'long': 1907}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'10E0E261-6D5E-574E-AE83-EFBE0AFAAEF3','1907','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706926893350741','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'10E0E261-6D5E-574E-AE83-EFBE0AFAAEF3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'10E0E261-6D5E-574E-AE83-EFBE0AFAAEF3','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'10E0E261-6D5E-574E-AE83-EFBE0AFAAEF3','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5618040D-E07C-5A5D-8698-2209421F0F76', 'sequence': {'long': 1908}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0A5174D8-80FB-4258-BB80-C79A98427D6A'}, 'predicateObjectPath': {'string': '/bin/date'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'date', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5618040D-E07C-5A5D-8698-2209421F0F76','1908','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','0A5174D8-80FB-4258-BB80-C79A98427D6A','/bin/date','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706926893350741','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','date','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5618040D-E07C-5A5D-8698-2209421F0F76','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5618040D-E07C-5A5D-8698-2209421F0F76','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5618040D-E07C-5A5D-8698-2209421F0F76','0A5174D8-80FB-4258-BB80-C79A98427D6A','affects'),(nextval('edge_number_seq'),'5618040D-E07C-5A5D-8698-2209421F0F76','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BBB747D9-B6E7-5592-AE6E-00D0C60474C6', 'sequence': {'long': 1909}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BBB747D9-B6E7-5592-AE6E-00D0C60474C6','1909','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706926893350741','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BBB747D9-B6E7-5592-AE6E-00D0C60474C6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BBB747D9-B6E7-5592-AE6E-00D0C60474C6','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BBB747D9-B6E7-5592-AE6E-00D0C60474C6','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9BED508A-339A-5A45-A991-BCBD50BBD2DA', 'sequence': {'long': 1910}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9BED508A-339A-5A45-A991-BCBD50BBD2DA','1910','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706926893350741','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9BED508A-339A-5A45-A991-BCBD50BBD2DA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9BED508A-339A-5A45-A991-BCBD50BBD2DA','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9BED508A-339A-5A45-A991-BCBD50BBD2DA','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3BF99FFA-82F3-5490-8A51-8B66DB63CC5D', 'sequence': {'long': 1911}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3BF99FFA-82F3-5490-8A51-8B66DB63CC5D','1911','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706926893350741','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3BF99FFA-82F3-5490-8A51-8B66DB63CC5D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3BF99FFA-82F3-5490-8A51-8B66DB63CC5D','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3BF99FFA-82F3-5490-8A51-8B66DB63CC5D','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AA09A29A-70BF-5FE9-8481-DBA2080BBAC7', 'sequence': {'long': 1912}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AA09A29A-70BF-5FE9-8481-DBA2080BBAC7','1912','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706926893350741','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AA09A29A-70BF-5FE9-8481-DBA2080BBAC7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AA09A29A-70BF-5FE9-8481-DBA2080BBAC7','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AA09A29A-70BF-5FE9-8481-DBA2080BBAC7','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BD8787AE-B8AE-5906-80B8-56B422C3B5C7', 'sequence': {'long': 1913}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BD8787AE-B8AE-5906-80B8-56B422C3B5C7','1913','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706926893350741','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BD8787AE-B8AE-5906-80B8-56B422C3B5C7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BD8787AE-B8AE-5906-80B8-56B422C3B5C7','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BD8787AE-B8AE-5906-80B8-56B422C3B5C7','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '23F3B750-A05A-5767-976F-EDD2A716ADED', 'sequence': {'long': 1914}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'23F3B750-A05A-5767-976F-EDD2A716ADED','1914','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706926893350741','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'23F3B750-A05A-5767-976F-EDD2A716ADED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'23F3B750-A05A-5767-976F-EDD2A716ADED','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'23F3B750-A05A-5767-976F-EDD2A716ADED','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C8BF6451-4954-5603-B777-EFAA3190A962', 'sequence': {'long': 1915}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C8BF6451-4954-5603-B777-EFAA3190A962','1915','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706926893350741','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C8BF6451-4954-5603-B777-EFAA3190A962','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C8BF6451-4954-5603-B777-EFAA3190A962','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C8BF6451-4954-5603-B777-EFAA3190A962','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4CA1FA49-707F-5EE7-8728-6CC4EAC4B3AC', 'sequence': {'long': 1916}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4CA1FA49-707F-5EE7-8728-6CC4EAC4B3AC','1916','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706926893350741','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4CA1FA49-707F-5EE7-8728-6CC4EAC4B3AC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4CA1FA49-707F-5EE7-8728-6CC4EAC4B3AC','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4CA1FA49-707F-5EE7-8728-6CC4EAC4B3AC','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '835A3C0E-D596-5C8A-BDE7-E85751292077', 'sequence': {'long': 1917}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6578176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'835A3C0E-D596-5C8A-BDE7-E85751292077','1917','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926893350741','aue_mmap','6578176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'835A3C0E-D596-5C8A-BDE7-E85751292077','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'835A3C0E-D596-5C8A-BDE7-E85751292077','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'835A3C0E-D596-5C8A-BDE7-E85751292077','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D70154E7-747B-573C-93B9-8A027814C581', 'sequence': {'long': 1918}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6578176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'D70154E7-747B-573C-93B9-8A027814C581','1918','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926893350741','aue_mmap','6578176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D70154E7-747B-573C-93B9-8A027814C581','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D70154E7-747B-573C-93B9-8A027814C581','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D70154E7-747B-573C-93B9-8A027814C581','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '86BFBFF8-8BD4-5DEB-AB23-A6B3C55CCAC8', 'sequence': {'long': 1919}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8552448}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'86BFBFF8-8BD4-5DEB-AB23-A6B3C55CCAC8','1919','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926893350741','aue_mmap','8552448','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'86BFBFF8-8BD4-5DEB-AB23-A6B3C55CCAC8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'86BFBFF8-8BD4-5DEB-AB23-A6B3C55CCAC8','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'86BFBFF8-8BD4-5DEB-AB23-A6B3C55CCAC8','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8B66BED3-00C4-5C05-8682-F6788FED2E1C', 'sequence': {'long': 1920}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8552448}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'8B66BED3-00C4-5C05-8682-F6788FED2E1C','1920','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926893350741','aue_mmap','8552448','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8B66BED3-00C4-5C05-8682-F6788FED2E1C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8B66BED3-00C4-5C05-8682-F6788FED2E1C','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8B66BED3-00C4-5C05-8682-F6788FED2E1C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '42D59C68-0492-537D-8609-97B29769E052', 'sequence': {'long': 1921}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12439552}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'42D59C68-0492-537D-8609-97B29769E052','1921','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926893350741','aue_mmap','12439552','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'42D59C68-0492-537D-8609-97B29769E052','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'42D59C68-0492-537D-8609-97B29769E052','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'42D59C68-0492-537D-8609-97B29769E052','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '74EEAA45-169A-53AD-ADB5-0008005E19F1', 'sequence': {'long': 1922}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12439552}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'74EEAA45-169A-53AD-ADB5-0008005E19F1','1922','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926893350741','aue_mmap','12439552','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','date','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'74EEAA45-169A-53AD-ADB5-0008005E19F1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'74EEAA45-169A-53AD-ADB5-0008005E19F1','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'74EEAA45-169A-53AD-ADB5-0008005E19F1','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F82632A8-7D58-54B8-AB3C-D8B9DDA9D67C', 'sequence': {'long': 1923}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F82632A8-7D58-54B8-AB3C-D8B9DDA9D67C','1923','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926893350741','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F82632A8-7D58-54B8-AB3C-D8B9DDA9D67C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F82632A8-7D58-54B8-AB3C-D8B9DDA9D67C','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F82632A8-7D58-54B8-AB3C-D8B9DDA9D67C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '44336419-8375-5D9D-8A91-B2F84017033B', 'sequence': {'long': 1924}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'44336419-8375-5D9D-8A91-B2F84017033B','1924','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706926893350741','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'44336419-8375-5D9D-8A91-B2F84017033B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'44336419-8375-5D9D-8A91-B2F84017033B','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'44336419-8375-5D9D-8A91-B2F84017033B','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2A9F16AF-DE5A-5BCC-B207-024020A0E63B', 'sequence': {'long': 1925}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6578176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2A9F16AF-DE5A-5BCC-B207-024020A0E63B','1925','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706926893350741','aue_mmap','6578176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','date','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2A9F16AF-DE5A-5BCC-B207-024020A0E63B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2A9F16AF-DE5A-5BCC-B207-024020A0E63B','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2A9F16AF-DE5A-5BCC-B207-024020A0E63B','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7196B11E-3474-57CC-8F2A-58CA1F534AD5', 'sequence': {'long': 1926}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926893350741, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6578176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'date', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7196B11E-3474-57CC-8F2A-58CA1F534AD5','1926','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706926893350741','aue_mmap','6578176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','date','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7196B11E-3474-57CC-8F2A-58CA1F534AD5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7196B11E-3474-57CC-8F2A-58CA1F534AD5','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7196B11E-3474-57CC-8F2A-58CA1F534AD5','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3992EB4-AD63-5282-913A-4705D485B81D', 'sequence': {'long': 1927}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3992EB4-AD63-5282-913A-4705D485B81D','1927','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706926903353422','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3992EB4-AD63-5282-913A-4705D485B81D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3992EB4-AD63-5282-913A-4705D485B81D','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B3992EB4-AD63-5282-913A-4705D485B81D','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2DB0B4A6-C217-568C-82D2-4C51F2D019A0', 'sequence': {'long': 1928}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/UTC'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2DB0B4A6-C217-568C-82D2-4C51F2D019A0','1928','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','/usr/share/zoneinfo/UTC','1522706926903353422','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2DB0B4A6-C217-568C-82D2-4C51F2D019A0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2DB0B4A6-C217-568C-82D2-4C51F2D019A0','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2DB0B4A6-C217-568C-82D2-4C51F2D019A0','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1A6A0219-F4B2-5326-B770-0AE3AAB7ED63', 'sequence': {'long': 1929}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/UTC'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 118}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/zoneinfo/UTC', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1A6A0219-F4B2-5326-B770-0AE3AAB7ED63','1929','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','/usr/share/zoneinfo/UTC','1522706926903353422','aue_read','118','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/zoneinfo/UTC','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1A6A0219-F4B2-5326-B770-0AE3AAB7ED63','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1A6A0219-F4B2-5326-B770-0AE3AAB7ED63','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1A6A0219-F4B2-5326-B770-0AE3AAB7ED63','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B30C7226-E3D3-53FE-B824-9CC006B0CA7C', 'sequence': {'long': 1930}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B30C7226-E3D3-53FE-B824-9CC006B0CA7C','1930','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','1522706926903353422','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B30C7226-E3D3-53FE-B824-9CC006B0CA7C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B30C7226-E3D3-53FE-B824-9CC006B0CA7C','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B30C7226-E3D3-53FE-B824-9CC006B0CA7C','AE441C70-DEC0-BD5F-80DE-3DE4DFBDF253','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '69F7391E-4E57-5560-8E04-1DD9000D7090', 'sequence': {'long': 1931}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/posixrules'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '2C00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'69F7391E-4E57-5560-8E04-1DD9000D7090','1931','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','/usr/share/zoneinfo/posixrules','1522706926903353422','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','2C00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'69F7391E-4E57-5560-8E04-1DD9000D7090','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'69F7391E-4E57-5560-8E04-1DD9000D7090','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'69F7391E-4E57-5560-8E04-1DD9000D7090','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '69F9B6AE-D0BB-5C63-B51E-1769FB0E4816', 'sequence': {'long': 1932}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': {'string': '/usr/share/zoneinfo/posixrules'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 3519}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/usr/share/zoneinfo/posixrules', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'69F9B6AE-D0BB-5C63-B51E-1769FB0E4816','1932','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','/usr/share/zoneinfo/posixrules','1522706926903353422','aue_read','3519','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/usr/share/zoneinfo/posixrules','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'69F9B6AE-D0BB-5C63-B51E-1769FB0E4816','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'69F9B6AE-D0BB-5C63-B51E-1769FB0E4816','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'69F9B6AE-D0BB-5C63-B51E-1769FB0E4816','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3A758094-64EF-5230-BFF7-21D493F6D48D', 'sequence': {'long': 1933}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '104A8C35-2200-3156-8022-4129E631EA52'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3A758094-64EF-5230-BFF7-21D493F6D48D','1933','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','104A8C35-2200-3156-8022-4129E631EA52','1522706926903353422','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3A758094-64EF-5230-BFF7-21D493F6D48D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3A758094-64EF-5230-BFF7-21D493F6D48D','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3A758094-64EF-5230-BFF7-21D493F6D48D','104A8C35-2200-3156-8022-4129E631EA52','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9ACB179F-72B6-583B-BB87-972D558F10A9', 'sequence': {'long': 1934}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0245C10A-DC39-5352-B9DC-21665253BC2F'}, 'predicateObjectPath': {'string': '/data/gather_stats_uma.txt'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 29}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/data/gather_stats_uma.txt', 'fd': '1', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9ACB179F-72B6-583B-BB87-972D558F10A9','1934','EVENT_WRITE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','0245C10A-DC39-5352-B9DC-21665253BC2F','/data/gather_stats_uma.txt','1522706926903353422','aue_write','29','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/data/gather_stats_uma.txt','1','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9ACB179F-72B6-583B-BB87-972D558F10A9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9ACB179F-72B6-583B-BB87-972D558F10A9','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9ACB179F-72B6-583B-BB87-972D558F10A9','0245C10A-DC39-5352-B9DC-21665253BC2F','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E80AB838-B882-5534-901C-79C0BD25AB83', 'sequence': {'long': 1935}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A404274-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'date', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E80AB838-B882-5534-901C-79C0BD25AB83','1935','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','1522706926903353422','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','date','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E80AB838-B882-5534-901C-79C0BD25AB83','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E80AB838-B882-5534-901C-79C0BD25AB83','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E80AB838-B882-5534-901C-79C0BD25AB83','6A404274-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2821, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706926903353422, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2821','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706926903353422','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D8E14F1C-EA6F-5C51-AEA5-5F4EC45F2508', 'sequence': {'long': 1936}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2821', 'exec': 'bash', 'arg_pid': '2821', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'D8E14F1C-EA6F-5C51-AEA5-5F4EC45F2508','1936','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','1522706926903353422','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2821','bash','2821','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D8E14F1C-EA6F-5C51-AEA5-5F4EC45F2508','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D8E14F1C-EA6F-5C51-AEA5-5F4EC45F2508','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D8E14F1C-EA6F-5C51-AEA5-5F4EC45F2508','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DB695073-4F6A-53E3-AFB6-DBB21ED5978B', 'sequence': {'long': 1937}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DB695073-4F6A-53E3-AFB6-DBB21ED5978B','1937','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706926903353422','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DB695073-4F6A-53E3-AFB6-DBB21ED5978B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DB695073-4F6A-53E3-AFB6-DBB21ED5978B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DB695073-4F6A-53E3-AFB6-DBB21ED5978B','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6120CC49-1555-51A8-A3AD-3E4FE2CA265D', 'sequence': {'long': 1938}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76899EA5-9D25-4352-A59D-8CB74243F4C0'}, 'predicateObjectPath': {'string': '/usr/local/sbin/lsof'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'lsof -a -c python3.6 -i TCP', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6120CC49-1555-51A8-A3AD-3E4FE2CA265D','1938','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','76899EA5-9D25-4352-A59D-8CB74243F4C0','/usr/local/sbin/lsof','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706926903353422','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','lsof -a -c python3.6 -i TCP','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6120CC49-1555-51A8-A3AD-3E4FE2CA265D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6120CC49-1555-51A8-A3AD-3E4FE2CA265D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6120CC49-1555-51A8-A3AD-3E4FE2CA265D','76899EA5-9D25-4352-A59D-8CB74243F4C0','affects'),(nextval('edge_number_seq'),'6120CC49-1555-51A8-A3AD-3E4FE2CA265D','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '14D06042-0BFC-5E67-9B3B-DF6CF1AD5ADA', 'sequence': {'long': 1939}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'14D06042-0BFC-5E67-9B3B-DF6CF1AD5ADA','1939','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706926903353422','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'14D06042-0BFC-5E67-9B3B-DF6CF1AD5ADA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'14D06042-0BFC-5E67-9B3B-DF6CF1AD5ADA','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'14D06042-0BFC-5E67-9B3B-DF6CF1AD5ADA','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7E1A5041-5523-55DF-8505-4901EAB8B916', 'sequence': {'long': 1940}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7E1A5041-5523-55DF-8505-4901EAB8B916','1940','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706926903353422','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7E1A5041-5523-55DF-8505-4901EAB8B916','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7E1A5041-5523-55DF-8505-4901EAB8B916','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7E1A5041-5523-55DF-8505-4901EAB8B916','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '651B7D43-B57E-5EC7-A76A-104D39C78197', 'sequence': {'long': 1941}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'651B7D43-B57E-5EC7-A76A-104D39C78197','1941','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706926903353422','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'651B7D43-B57E-5EC7-A76A-104D39C78197','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'651B7D43-B57E-5EC7-A76A-104D39C78197','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'651B7D43-B57E-5EC7-A76A-104D39C78197','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '36841C38-B856-506B-B99F-DDA1D66ABB2D', 'sequence': {'long': 1942}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'36841C38-B856-506B-B99F-DDA1D66ABB2D','1942','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706926903353422','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'36841C38-B856-506B-B99F-DDA1D66ABB2D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'36841C38-B856-506B-B99F-DDA1D66ABB2D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'36841C38-B856-506B-B99F-DDA1D66ABB2D','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '53773628-4B2A-5330-B8A0-B5D7FA6C5A05', 'sequence': {'long': 1943}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'53773628-4B2A-5330-B8A0-B5D7FA6C5A05','1943','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706926903353422','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'53773628-4B2A-5330-B8A0-B5D7FA6C5A05','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'53773628-4B2A-5330-B8A0-B5D7FA6C5A05','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'53773628-4B2A-5330-B8A0-B5D7FA6C5A05','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '817C7DAC-A358-5330-9CA8-BE12C13DFE35', 'sequence': {'long': 1944}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'817C7DAC-A358-5330-9CA8-BE12C13DFE35','1944','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706926903353422','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'817C7DAC-A358-5330-9CA8-BE12C13DFE35','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'817C7DAC-A358-5330-9CA8-BE12C13DFE35','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'817C7DAC-A358-5330-9CA8-BE12C13DFE35','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '59A778DD-AA6A-54C7-BE58-5DAC9C9684D5', 'sequence': {'long': 1945}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'59A778DD-AA6A-54C7-BE58-5DAC9C9684D5','1945','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706926903353422','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'59A778DD-AA6A-54C7-BE58-5DAC9C9684D5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'59A778DD-AA6A-54C7-BE58-5DAC9C9684D5','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'59A778DD-AA6A-54C7-BE58-5DAC9C9684D5','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '39186218-CD03-5162-91F9-9FA9D31B08D5', 'sequence': {'long': 1946}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': {'string': '/lib/libkvm.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'39186218-CD03-5162-91F9-9FA9D31B08D5','1946','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','/lib/libkvm.so.7','1522706926903353422','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'39186218-CD03-5162-91F9-9FA9D31B08D5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'39186218-CD03-5162-91F9-9FA9D31B08D5','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'39186218-CD03-5162-91F9-9FA9D31B08D5','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A9001F7E-153B-548E-B540-9DB73830833D', 'sequence': {'long': 1947}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A9001F7E-153B-548E-B540-9DB73830833D','1947','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706926903353422','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A9001F7E-153B-548E-B540-9DB73830833D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A9001F7E-153B-548E-B540-9DB73830833D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A9001F7E-153B-548E-B540-9DB73830833D','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1F687577-7E40-5BE9-8820-9C5CF94C25D0', 'sequence': {'long': 1948}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'1F687577-7E40-5BE9-8820-9C5CF94C25D0','1948','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706926903353422','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1F687577-7E40-5BE9-8820-9C5CF94C25D0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1F687577-7E40-5BE9-8820-9C5CF94C25D0','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1F687577-7E40-5BE9-8820-9C5CF94C25D0','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A3778786-4EC4-59E2-9954-1F862C6E0451', 'sequence': {'long': 1949}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926903353422, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8667136}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A3778786-4EC4-59E2-9954-1F862C6E0451','1949','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706926903353422','aue_mmap','8667136','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A3778786-4EC4-59E2-9954-1F862C6E0451','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A3778786-4EC4-59E2-9954-1F862C6E0451','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A3778786-4EC4-59E2-9954-1F862C6E0451','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9945F28D-8332-5AF8-BD4B-BF15CA7F6D8E', 'sequence': {'long': 1950}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8667136}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9945F28D-8332-5AF8-BD4B-BF15CA7F6D8E','1950','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706926913362442','aue_mmap','8667136','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9945F28D-8332-5AF8-BD4B-BF15CA7F6D8E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9945F28D-8332-5AF8-BD4B-BF15CA7F6D8E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9945F28D-8332-5AF8-BD4B-BF15CA7F6D8E','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CDAE41AA-6943-5FF2-BFCC-86B89B7B4118', 'sequence': {'long': 1951}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10825728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'CDAE41AA-6943-5FF2-BFCC-86B89B7B4118','1951','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706926913362442','aue_mmap','10825728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CDAE41AA-6943-5FF2-BFCC-86B89B7B4118','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CDAE41AA-6943-5FF2-BFCC-86B89B7B4118','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CDAE41AA-6943-5FF2-BFCC-86B89B7B4118','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '60614308-0226-5F06-97A4-140C3766B31B', 'sequence': {'long': 1952}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10825728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libkvm.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'60614308-0226-5F06-97A4-140C3766B31B','1952','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706926913362442','aue_mmap','10825728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libkvm.so.7','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'60614308-0226-5F06-97A4-140C3766B31B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'60614308-0226-5F06-97A4-140C3766B31B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'60614308-0226-5F06-97A4-140C3766B31B','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '57B320AA-A25B-5C45-8999-9084E66CFF96', 'sequence': {'long': 1953}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '718F288D-A702-1B5D-82A7-80807D1BB326'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'57B320AA-A25B-5C45-8999-9084E66CFF96','1953','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','718F288D-A702-1B5D-82A7-80807D1BB326','1522706926913362442','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'57B320AA-A25B-5C45-8999-9084E66CFF96','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'57B320AA-A25B-5C45-8999-9084E66CFF96','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'57B320AA-A25B-5C45-8999-9084E66CFF96','718F288D-A702-1B5D-82A7-80807D1BB326','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '04ED82F1-50F3-5CE0-8CEE-9B33F9C0E91F', 'sequence': {'long': 1954}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'04ED82F1-50F3-5CE0-8CEE-9B33F9C0E91F','1954','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706926913362442','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'04ED82F1-50F3-5CE0-8CEE-9B33F9C0E91F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'04ED82F1-50F3-5CE0-8CEE-9B33F9C0E91F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'04ED82F1-50F3-5CE0-8CEE-9B33F9C0E91F','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B0679D3A-174F-521E-A883-BF81896FDF38', 'sequence': {'long': 1955}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B0679D3A-174F-521E-A883-BF81896FDF38','1955','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926913362442','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B0679D3A-174F-521E-A883-BF81896FDF38','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B0679D3A-174F-521E-A883-BF81896FDF38','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B0679D3A-174F-521E-A883-BF81896FDF38','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7133ACB2-207B-554D-AAD9-860647655A4A', 'sequence': {'long': 1956}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7133ACB2-207B-554D-AAD9-860647655A4A','1956','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926913362442','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7133ACB2-207B-554D-AAD9-860647655A4A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7133ACB2-207B-554D-AAD9-860647655A4A','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7133ACB2-207B-554D-AAD9-860647655A4A','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7B133172-1305-5D08-9751-623486FA3255', 'sequence': {'long': 1957}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10829824}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7B133172-1305-5D08-9751-623486FA3255','1957','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926913362442','aue_mmap','10829824','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7B133172-1305-5D08-9751-623486FA3255','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7B133172-1305-5D08-9751-623486FA3255','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7B133172-1305-5D08-9751-623486FA3255','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '615B1B2B-2EF2-5E1E-9950-BD9639575619', 'sequence': {'long': 1958}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 10829824}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'615B1B2B-2EF2-5E1E-9950-BD9639575619','1958','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926913362442','aue_mmap','10829824','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'615B1B2B-2EF2-5E1E-9950-BD9639575619','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'615B1B2B-2EF2-5E1E-9950-BD9639575619','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'615B1B2B-2EF2-5E1E-9950-BD9639575619','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '876A75B7-E0C2-5370-993A-0E1F01AA0FBA', 'sequence': {'long': 1959}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14716928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'876A75B7-E0C2-5370-993A-0E1F01AA0FBA','1959','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926913362442','aue_mmap','14716928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'876A75B7-E0C2-5370-993A-0E1F01AA0FBA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'876A75B7-E0C2-5370-993A-0E1F01AA0FBA','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'876A75B7-E0C2-5370-993A-0E1F01AA0FBA','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '72270DE1-E203-5A83-835F-C2E93EC2F46E', 'sequence': {'long': 1960}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 14716928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'72270DE1-E203-5A83-835F-C2E93EC2F46E','1960','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926913362442','aue_mmap','14716928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'72270DE1-E203-5A83-835F-C2E93EC2F46E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'72270DE1-E203-5A83-835F-C2E93EC2F46E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'72270DE1-E203-5A83-835F-C2E93EC2F46E','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '894E2665-5DA8-5ACB-B5BF-9695FAADBF16', 'sequence': {'long': 1961}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'894E2665-5DA8-5ACB-B5BF-9695FAADBF16','1961','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706926913362442','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'894E2665-5DA8-5ACB-B5BF-9695FAADBF16','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'894E2665-5DA8-5ACB-B5BF-9695FAADBF16','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'894E2665-5DA8-5ACB-B5BF-9695FAADBF16','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5AD065DE-5AF8-5AEA-878A-C9BA6F60E2BF', 'sequence': {'long': 1962}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': {'string': '/lib/libelf.so.2'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5AD065DE-5AF8-5AEA-878A-C9BA6F60E2BF','1962','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','/lib/libelf.so.2','1522706926913362442','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5AD065DE-5AF8-5AEA-878A-C9BA6F60E2BF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5AD065DE-5AF8-5AEA-878A-C9BA6F60E2BF','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5AD065DE-5AF8-5AEA-878A-C9BA6F60E2BF','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9CDF1E81-3A25-5AF3-8018-78BA7B4B6D23', 'sequence': {'long': 1963}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9CDF1E81-3A25-5AF3-8018-78BA7B4B6D23','1963','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706926913362442','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9CDF1E81-3A25-5AF3-8018-78BA7B4B6D23','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9CDF1E81-3A25-5AF3-8018-78BA7B4B6D23','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9CDF1E81-3A25-5AF3-8018-78BA7B4B6D23','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '441F538A-9EBA-566F-949E-252637E99572', 'sequence': {'long': 1964}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'441F538A-9EBA-566F-949E-252637E99572','1964','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706926913362442','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'441F538A-9EBA-566F-949E-252637E99572','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'441F538A-9EBA-566F-949E-252637E99572','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'441F538A-9EBA-566F-949E-252637E99572','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7C5F6073-56B0-56C0-87E1-C54A1E0C19C3', 'sequence': {'long': 1965}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17031168}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7C5F6073-56B0-56C0-87E1-C54A1E0C19C3','1965','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706926913362442','aue_mmap','17031168','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7C5F6073-56B0-56C0-87E1-C54A1E0C19C3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7C5F6073-56B0-56C0-87E1-C54A1E0C19C3','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7C5F6073-56B0-56C0-87E1-C54A1E0C19C3','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9CAD7CA3-1D5C-575F-B89F-2F35F9B4E755', 'sequence': {'long': 1966}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 17031168}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'9CAD7CA3-1D5C-575F-B89F-2F35F9B4E755','1966','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706926913362442','aue_mmap','17031168','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9CAD7CA3-1D5C-575F-B89F-2F35F9B4E755','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9CAD7CA3-1D5C-575F-B89F-2F35F9B4E755','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9CAD7CA3-1D5C-575F-B89F-2F35F9B4E755','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CB9F25FF-CA16-5CF3-9579-5671A2E51914', 'sequence': {'long': 1967}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19222528}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'CB9F25FF-CA16-5CF3-9579-5671A2E51914','1967','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706926913362442','aue_mmap','19222528','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CB9F25FF-CA16-5CF3-9579-5671A2E51914','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CB9F25FF-CA16-5CF3-9579-5671A2E51914','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CB9F25FF-CA16-5CF3-9579-5671A2E51914','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2E931A06-EE30-590E-BA4F-27B0B245A7EA', 'sequence': {'long': 1968}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 19222528}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libelf.so.2', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'2E931A06-EE30-590E-BA4F-27B0B245A7EA','1968','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706926913362442','aue_mmap','19222528','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libelf.so.2','3','lsof','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2E931A06-EE30-590E-BA4F-27B0B245A7EA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2E931A06-EE30-590E-BA4F-27B0B245A7EA','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2E931A06-EE30-590E-BA4F-27B0B245A7EA','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5BEECD5F-BF99-5FD3-91AA-32F005B39846', 'sequence': {'long': 1969}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F29977F6-07A2-935B-A207-C4871B93FE07'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5BEECD5F-BF99-5FD3-91AA-32F005B39846','1969','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F29977F6-07A2-935B-A207-C4871B93FE07','1522706926913362442','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5BEECD5F-BF99-5FD3-91AA-32F005B39846','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5BEECD5F-BF99-5FD3-91AA-32F005B39846','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5BEECD5F-BF99-5FD3-91AA-32F005B39846','F29977F6-07A2-935B-A207-C4871B93FE07','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2220BEB4-AC15-5346-ACDD-E63A0EA70454', 'sequence': {'long': 1970}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2220BEB4-AC15-5346-ACDD-E63A0EA70454','1970','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706926913362442','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2220BEB4-AC15-5346-ACDD-E63A0EA70454','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2220BEB4-AC15-5346-ACDD-E63A0EA70454','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2220BEB4-AC15-5346-ACDD-E63A0EA70454','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F86450C5-1B8C-512A-B972-8A7747F6FDF2', 'sequence': {'long': 1971}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'F86450C5-1B8C-512A-B972-8A7747F6FDF2','1971','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706926913362442','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F86450C5-1B8C-512A-B972-8A7747F6FDF2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F86450C5-1B8C-512A-B972-8A7747F6FDF2','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F86450C5-1B8C-512A-B972-8A7747F6FDF2','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5EB2901A-40CE-5AC3-8E91-C092CE34591B', 'sequence': {'long': 1972}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6692864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'lsof', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'5EB2901A-40CE-5AC3-8E91-C092CE34591B','1972','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706926913362442','aue_mmap','6692864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','lsof','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5EB2901A-40CE-5AC3-8E91-C092CE34591B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5EB2901A-40CE-5AC3-8E91-C092CE34591B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5EB2901A-40CE-5AC3-8E91-C092CE34591B','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F8175B39-3820-5232-9F6C-3BE2CECC36C6', 'sequence': {'long': 1973}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F8175B39-3820-5232-9F6C-3BE2CECC36C6','1973','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706926913362442','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F8175B39-3820-5232-9F6C-3BE2CECC36C6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F8175B39-3820-5232-9F6C-3BE2CECC36C6','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F8175B39-3820-5232-9F6C-3BE2CECC36C6','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C53F242A-F11D-514C-A534-AEA843763F06', 'sequence': {'long': 1974}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '1633500B-D34B-8058-8BD3-ABB7D880915E'}, 'predicateObjectPath': {'string': '/dev/null'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '02'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C53F242A-F11D-514C-A534-AEA843763F06','1974','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','1633500B-D34B-8058-8BD3-ABB7D880915E','/dev/null','1522706926913362442','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','02','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C53F242A-F11D-514C-A534-AEA843763F06','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C53F242A-F11D-514C-A534-AEA843763F06','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C53F242A-F11D-514C-A534-AEA843763F06','1633500B-D34B-8058-8BD3-ABB7D880915E','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1F297B57-8DF0-5FFB-B1AD-C2AA20967A4C', 'sequence': {'long': 1975}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '1633500B-D34B-8058-8BD3-ABB7D880915E'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1F297B57-8DF0-5FFB-B1AD-C2AA20967A4C','1975','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','1633500B-D34B-8058-8BD3-ABB7D880915E','1522706926913362442','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1F297B57-8DF0-5FFB-B1AD-C2AA20967A4C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1F297B57-8DF0-5FFB-B1AD-C2AA20967A4C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1F297B57-8DF0-5FFB-B1AD-C2AA20967A4C','1633500B-D34B-8058-8BD3-ABB7D880915E','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7B83CD4F-62BA-542E-8C15-7D28F15BE0DF', 'sequence': {'long': 1976}, 'type': 'EVENT_MODIFY_PROCESS', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926913362442, 'name': {'string': 'aue_umask'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '18', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7B83CD4F-62BA-542E-8C15-7D28F15BE0DF','1976','EVENT_MODIFY_PROCESS','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','1522706926913362442','aue_umask','83c8ed1f-5045-dbcd-b39f-918f0df4f851','18','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7B83CD4F-62BA-542E-8C15-7D28F15BE0DF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7B83CD4F-62BA-542E-8C15-7D28F15BE0DF','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7B83CD4F-62BA-542E-8C15-7D28F15BE0DF','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EEA1B3E3-9136-56FF-BAC3-B3ED871C282D', 'sequence': {'long': 1977}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'EDC9C006-38C1-1659-8138-925D3916B899'}, 'predicateObjectPath': {'string': '/dev/mem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EEA1B3E3-9136-56FF-BAC3-B3ED871C282D','1977','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','EDC9C006-38C1-1659-8138-925D3916B899','/dev/mem','1522706926923359683','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EEA1B3E3-9136-56FF-BAC3-B3ED871C282D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EEA1B3E3-9136-56FF-BAC3-B3ED871C282D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EEA1B3E3-9136-56FF-BAC3-B3ED871C282D','EDC9C006-38C1-1659-8138-925D3916B899','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '48477220-7C23-59D0-8BF2-6511978CC699', 'sequence': {'long': 1978}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '4', 'return_value': '4', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'48477220-7C23-59D0-8BF2-6511978CC699','1978','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926923359683','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','4','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'48477220-7C23-59D0-8BF2-6511978CC699','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'48477220-7C23-59D0-8BF2-6511978CC699','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'48477220-7C23-59D0-8BF2-6511978CC699','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2F5507D4-2CDA-524F-893C-42B6717FF3F3', 'sequence': {'long': 1979}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2F5507D4-2CDA-524F-893C-42B6717FF3F3','1979','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926923359683','aue_read','4','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2F5507D4-2CDA-524F-893C-42B6717FF3F3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2F5507D4-2CDA-524F-893C-42B6717FF3F3','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2F5507D4-2CDA-524F-893C-42B6717FF3F3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '725A6B70-83D6-5F01-B88F-5FA683E22626', 'sequence': {'long': 1980}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1360}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'725A6B70-83D6-5F01-B88F-5FA683E22626','1980','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926923359683','aue_read','1360','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'725A6B70-83D6-5F01-B88F-5FA683E22626','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'725A6B70-83D6-5F01-B88F-5FA683E22626','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'725A6B70-83D6-5F01-B88F-5FA683E22626','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B7EF73B8-D507-5120-A037-598659330356', 'sequence': {'long': 1981}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79353168}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B7EF73B8-D507-5120-A037-598659330356','1981','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926923359683','aue_lseek','79353168','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B7EF73B8-D507-5120-A037-598659330356','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B7EF73B8-D507-5120-A037-598659330356','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B7EF73B8-D507-5120-A037-598659330356','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D109A79-BD82-554C-B418-EA1C03F8E857', 'sequence': {'long': 1982}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1360}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D109A79-BD82-554C-B418-EA1C03F8E857','1982','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926923359683','aue_read','1360','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D109A79-BD82-554C-B418-EA1C03F8E857','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D109A79-BD82-554C-B418-EA1C03F8E857','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7D109A79-BD82-554C-B418-EA1C03F8E857','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '833C56BF-91F6-5246-B558-60D269B2DCDC', 'sequence': {'long': 1983}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 224}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'833C56BF-91F6-5246-B558-60D269B2DCDC','1983','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926923359683','aue_read','224','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'833C56BF-91F6-5246-B558-60D269B2DCDC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'833C56BF-91F6-5246-B558-60D269B2DCDC','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'833C56BF-91F6-5246-B558-60D269B2DCDC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2FC061AB-9A1C-5D25-9FD3-D6A1FE6EA536', 'sequence': {'long': 1984}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2192}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2FC061AB-9A1C-5D25-9FD3-D6A1FE6EA536','1984','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926923359683','aue_read','2192','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2FC061AB-9A1C-5D25-9FD3-D6A1FE6EA536','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2FC061AB-9A1C-5D25-9FD3-D6A1FE6EA536','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2FC061AB-9A1C-5D25-9FD3-D6A1FE6EA536','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '445F5DFE-4B54-50CE-9FF0-73196F3310A1', 'sequence': {'long': 1985}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 50417920}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'445F5DFE-4B54-50CE-9FF0-73196F3310A1','1985','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926923359683','aue_lseek','50417920','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'445F5DFE-4B54-50CE-9FF0-73196F3310A1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'445F5DFE-4B54-50CE-9FF0-73196F3310A1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'445F5DFE-4B54-50CE-9FF0-73196F3310A1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9DC94BFC-C2CB-560C-9A97-C54F6834537F', 'sequence': {'long': 1986}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 48}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9DC94BFC-C2CB-560C-9A97-C54F6834537F','1986','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926923359683','aue_read','48','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9DC94BFC-C2CB-560C-9A97-C54F6834537F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9DC94BFC-C2CB-560C-9A97-C54F6834537F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9DC94BFC-C2CB-560C-9A97-C54F6834537F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FC8C4D57-02B2-51D2-8192-D7DFC1B11F6B', 'sequence': {'long': 1987}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FC8C4D57-02B2-51D2-8192-D7DFC1B11F6B','1987','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926923359683','aue_read','4','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FC8C4D57-02B2-51D2-8192-D7DFC1B11F6B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FC8C4D57-02B2-51D2-8192-D7DFC1B11F6B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FC8C4D57-02B2-51D2-8192-D7DFC1B11F6B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2281A6C4-CA9F-5091-B1FB-D62385A74B1B', 'sequence': {'long': 1988}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2048}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2281A6C4-CA9F-5091-B1FB-D62385A74B1B','1988','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926923359683','aue_read','2048','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2281A6C4-CA9F-5091-B1FB-D62385A74B1B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2281A6C4-CA9F-5091-B1FB-D62385A74B1B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2281A6C4-CA9F-5091-B1FB-D62385A74B1B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5C131410-E84C-5E43-8FA6-0D8DE510740E', 'sequence': {'long': 1989}, 'type': 'EVENT_CHANGE_PRINCIPAL', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_setgid'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'gid'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03E9'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'arg_gid': '1001', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_arg_gid,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5C131410-E84C-5E43-8FA6-0D8DE510740E','1989','EVENT_CHANGE_PRINCIPAL','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','1522706926923359683','aue_setgid','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','gid','03E9','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','1001','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5C131410-E84C-5E43-8FA6-0D8DE510740E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5C131410-E84C-5E43-8FA6-0D8DE510740E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5C131410-E84C-5E43-8FA6-0D8DE510740E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0AC0ECF4-09F0-559C-B2A1-4F74B282057C', 'sequence': {'long': 1990}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01B6'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '5', 'return_value': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0AC0ECF4-09F0-559C-B2A1-4F74B282057C','1990','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706926923359683','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','01B6','83c8ed1f-5045-dbcd-b39f-918f0df4f851','5','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0AC0ECF4-09F0-559C-B2A1-4F74B282057C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0AC0ECF4-09F0-559C-B2A1-4F74B282057C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0AC0ECF4-09F0-559C-B2A1-4F74B282057C','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C0A081DE-7918-55B6-AEB4-E534E9063D0E', 'sequence': {'long': 1991}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 272}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/nsswitch.conf', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C0A081DE-7918-55B6-AEB4-E534E9063D0E','1991','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706926923359683','aue_read','272','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/nsswitch.conf','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C0A081DE-7918-55B6-AEB4-E534E9063D0E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C0A081DE-7918-55B6-AEB4-E534E9063D0E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C0A081DE-7918-55B6-AEB4-E534E9063D0E','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C0ADBACB-EABF-5D67-BD30-63404B12E811', 'sequence': {'long': 1992}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': {'string': '/etc/nsswitch.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/nsswitch.conf', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C0ADBACB-EABF-5D67-BD30-63404B12E811','1992','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','/etc/nsswitch.conf','1522706926923359683','aue_read','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/nsswitch.conf','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C0ADBACB-EABF-5D67-BD30-63404B12E811','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C0ADBACB-EABF-5D67-BD30-63404B12E811','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C0ADBACB-EABF-5D67-BD30-63404B12E811','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CADB4B3F-6668-5C3F-B6C6-B51B508A1895', 'sequence': {'long': 1993}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'BCDBE64D-1703-005A-8317-44DD6A00589D'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CADB4B3F-6668-5C3F-B6C6-B51B508A1895','1993','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','BCDBE64D-1703-005A-8317-44DD6A00589D','1522706926923359683','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CADB4B3F-6668-5C3F-B6C6-B51B508A1895','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CADB4B3F-6668-5C3F-B6C6-B51B508A1895','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CADB4B3F-6668-5C3F-B6C6-B51B508A1895','BCDBE64D-1703-005A-8317-44DD6A00589D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A7F72FE8-3D07-52D8-B83D-C167802CD5B1', 'sequence': {'long': 1994}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '5', 'return_value': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A7F72FE8-3D07-52D8-B83D-C167802CD5B1','1994','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706926923359683','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','5','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A7F72FE8-3D07-52D8-B83D-C167802CD5B1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A7F72FE8-3D07-52D8-B83D-C167802CD5B1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A7F72FE8-3D07-52D8-B83D-C167802CD5B1','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F1ED3C72-1A97-54D0-A91A-4A8654EF2218', 'sequence': {'long': 1995}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926923359683, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 260}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F1ED3C72-1A97-54D0-A91A-4A8654EF2218','1995','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706926923359683','aue_read','260','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F1ED3C72-1A97-54D0-A91A-4A8654EF2218','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F1ED3C72-1A97-54D0-A91A-4A8654EF2218','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F1ED3C72-1A97-54D0-A91A-4A8654EF2218','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C3C60EFB-6D22-5F2A-9701-5D003E38FD93', 'sequence': {'long': 1996}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C3C60EFB-6D22-5F2A-9701-5D003E38FD93','1996','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706926933363583','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C3C60EFB-6D22-5F2A-9701-5D003E38FD93','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C3C60EFB-6D22-5F2A-9701-5D003E38FD93','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C3C60EFB-6D22-5F2A-9701-5D003E38FD93','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '05315F46-7E93-56E8-ACA3-914775CB5940', 'sequence': {'long': 1997}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'05315F46-7E93-56E8-ACA3-914775CB5940','1997','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706926933363583','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'05315F46-7E93-56E8-ACA3-914775CB5940','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'05315F46-7E93-56E8-ACA3-914775CB5940','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'05315F46-7E93-56E8-ACA3-914775CB5940','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '71F695A4-3AA8-5316-997E-BD3B0CF9022F', 'sequence': {'long': 1998}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'71F695A4-3AA8-5316-997E-BD3B0CF9022F','1998','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706926933363583','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'71F695A4-3AA8-5316-997E-BD3B0CF9022F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'71F695A4-3AA8-5316-997E-BD3B0CF9022F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'71F695A4-3AA8-5316-997E-BD3B0CF9022F','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3B888068-C6C6-5F83-9A14-C5FBC7B8E19D', 'sequence': {'long': 1999}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3B888068-C6C6-5F83-9A14-C5FBC7B8E19D','1999','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706926933363583','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3B888068-C6C6-5F83-9A14-C5FBC7B8E19D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3B888068-C6C6-5F83-9A14-C5FBC7B8E19D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3B888068-C6C6-5F83-9A14-C5FBC7B8E19D','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F85BE6BF-E9B9-5BB0-9F6F-737BD26B62B0', 'sequence': {'long': 2000}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F85BE6BF-E9B9-5BB0-9F6F-737BD26B62B0','2000','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706926933363583','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F85BE6BF-E9B9-5BB0-9F6F-737BD26B62B0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F85BE6BF-E9B9-5BB0-9F6F-737BD26B62B0','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F85BE6BF-E9B9-5BB0-9F6F-737BD26B62B0','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1D9F0618-7A51-55D2-8413-142295FC6189', 'sequence': {'long': 2001}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1D9F0618-7A51-55D2-8413-142295FC6189','2001','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706926933363583','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1D9F0618-7A51-55D2-8413-142295FC6189','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1D9F0618-7A51-55D2-8413-142295FC6189','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1D9F0618-7A51-55D2-8413-142295FC6189','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C111C0CB-3FD1-5C22-BED2-E600A3CCE0F9', 'sequence': {'long': 2002}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C111C0CB-3FD1-5C22-BED2-E600A3CCE0F9','2002','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706926933363583','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C111C0CB-3FD1-5C22-BED2-E600A3CCE0F9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C111C0CB-3FD1-5C22-BED2-E600A3CCE0F9','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C111C0CB-3FD1-5C22-BED2-E600A3CCE0F9','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '85543384-67FC-5434-8E71-2EFED46B1275', 'sequence': {'long': 2003}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': {'string': '/etc/pwd.db'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 4096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/pwd.db', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'85543384-67FC-5434-8E71-2EFED46B1275','2003','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','/etc/pwd.db','1522706926933363583','aue_pread','4096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/pwd.db','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'85543384-67FC-5434-8E71-2EFED46B1275','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'85543384-67FC-5434-8E71-2EFED46B1275','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'85543384-67FC-5434-8E71-2EFED46B1275','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2B1466FB-AD57-5034-BE48-5E7E386697F9', 'sequence': {'long': 2004}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2B1466FB-AD57-5034-BE48-5E7E386697F9','2004','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','1522706926933363583','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2B1466FB-AD57-5034-BE48-5E7E386697F9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2B1466FB-AD57-5034-BE48-5E7E386697F9','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2B1466FB-AD57-5034-BE48-5E7E386697F9','965F27C6-9C7D-1F5A-BD9C-255B7A1FA2E0','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EBC29AE9-CD5F-5C9D-8274-D14CF44CC7F0', 'sequence': {'long': 2005}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '154CD1C2-8134-685D-B481-18BC1D680643'}, 'predicateObjectPath': {'string': '/home/darpa/.lsof_ta1-cadets'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '5', 'return_value': '5', 'fd': '-100', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EBC29AE9-CD5F-5C9D-8274-D14CF44CC7F0','2005','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','154CD1C2-8134-685D-B481-18BC1D680643','/home/darpa/.lsof_ta1-cadets','1522706926933363583','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','5','5','-100','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EBC29AE9-CD5F-5C9D-8274-D14CF44CC7F0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EBC29AE9-CD5F-5C9D-8274-D14CF44CC7F0','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EBC29AE9-CD5F-5C9D-8274-D14CF44CC7F0','154CD1C2-8134-685D-B481-18BC1D680643','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F4E7F3A8-82C5-5361-BDEA-4145AD57BC91', 'sequence': {'long': 2006}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F4E7F3A8-82C5-5361-BDEA-4145AD57BC91','2006','EVENT_FCNTL','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','1522706926933363583','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F4E7F3A8-82C5-5361-BDEA-4145AD57BC91','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F4E7F3A8-82C5-5361-BDEA-4145AD57BC91','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '63570AB6-71A2-549F-910A-786B90FD28B1', 'sequence': {'long': 2007}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '154CD1C2-8134-685D-B481-18BC1D680643'}, 'predicateObjectPath': {'string': '/home/darpa/.lsof_ta1-cadets'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1532}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/home/darpa/.lsof_ta1-cadets', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'63570AB6-71A2-549F-910A-786B90FD28B1','2007','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','154CD1C2-8134-685D-B481-18BC1D680643','/home/darpa/.lsof_ta1-cadets','1522706926933363583','aue_read','1532','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/home/darpa/.lsof_ta1-cadets','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'63570AB6-71A2-549F-910A-786B90FD28B1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'63570AB6-71A2-549F-910A-786B90FD28B1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'63570AB6-71A2-549F-910A-786B90FD28B1','154CD1C2-8134-685D-B481-18BC1D680643','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A6369CBC-B00C-5E71-AA43-D969623A206B', 'sequence': {'long': 2008}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '154CD1C2-8134-685D-B481-18BC1D680643'}, 'predicateObjectPath': {'string': '/home/darpa/.lsof_ta1-cadets'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 0}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/home/darpa/.lsof_ta1-cadets', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A6369CBC-B00C-5E71-AA43-D969623A206B','2008','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','154CD1C2-8134-685D-B481-18BC1D680643','/home/darpa/.lsof_ta1-cadets','1522706926933363583','aue_read','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/home/darpa/.lsof_ta1-cadets','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A6369CBC-B00C-5E71-AA43-D969623A206B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A6369CBC-B00C-5E71-AA43-D969623A206B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A6369CBC-B00C-5E71-AA43-D969623A206B','154CD1C2-8134-685D-B481-18BC1D680643','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '765B635C-3DD8-53C5-97BF-2D852F08EB35', 'sequence': {'long': 2009}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '154CD1C2-8134-685D-B481-18BC1D680643'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '5', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'765B635C-3DD8-53C5-97BF-2D852F08EB35','2009','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','154CD1C2-8134-685D-B481-18BC1D680643','1522706926933363583','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','5','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'765B635C-3DD8-53C5-97BF-2D852F08EB35','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'765B635C-3DD8-53C5-97BF-2D852F08EB35','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'765B635C-3DD8-53C5-97BF-2D852F08EB35','154CD1C2-8134-685D-B481-18BC1D680643','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3F84F5F7-A7B9-5288-B331-5257B4A1C3A0', 'sequence': {'long': 2010}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82579456}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3F84F5F7-A7B9-5288-B331-5257B4A1C3A0','2010','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926933363583','aue_lseek','82579456','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3F84F5F7-A7B9-5288-B331-5257B4A1C3A0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3F84F5F7-A7B9-5288-B331-5257B4A1C3A0','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3F84F5F7-A7B9-5288-B331-5257B4A1C3A0','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7E3B6431-1D9B-5DA1-BB87-428DF2933706', 'sequence': {'long': 2011}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7E3B6431-1D9B-5DA1-BB87-428DF2933706','2011','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926933363583','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7E3B6431-1D9B-5DA1-BB87-428DF2933706','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7E3B6431-1D9B-5DA1-BB87-428DF2933706','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7E3B6431-1D9B-5DA1-BB87-428DF2933706','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E968E537-A5C3-56A8-8A5D-D52A8F0476B3', 'sequence': {'long': 2012}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E968E537-A5C3-56A8-8A5D-D52A8F0476B3','2012','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926933363583','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E968E537-A5C3-56A8-8A5D-D52A8F0476B3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E968E537-A5C3-56A8-8A5D-D52A8F0476B3','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E968E537-A5C3-56A8-8A5D-D52A8F0476B3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '853712E2-4BB8-5C27-A5C7-E72F6CBE891F', 'sequence': {'long': 2013}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 187847760}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'853712E2-4BB8-5C27-A5C7-E72F6CBE891F','2013','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926933363583','aue_lseek','187847760','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'853712E2-4BB8-5C27-A5C7-E72F6CBE891F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'853712E2-4BB8-5C27-A5C7-E72F6CBE891F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'853712E2-4BB8-5C27-A5C7-E72F6CBE891F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C57AC0F3-6813-5A32-96BD-1A7D49F16D3B', 'sequence': {'long': 2014}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C57AC0F3-6813-5A32-96BD-1A7D49F16D3B','2014','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926933363583','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C57AC0F3-6813-5A32-96BD-1A7D49F16D3B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C57AC0F3-6813-5A32-96BD-1A7D49F16D3B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C57AC0F3-6813-5A32-96BD-1A7D49F16D3B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '38F8843D-819A-53CD-B43B-81DC2EA82CE1', 'sequence': {'long': 2015}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 187847888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'38F8843D-819A-53CD-B43B-81DC2EA82CE1','2015','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926933363583','aue_lseek','187847888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'38F8843D-819A-53CD-B43B-81DC2EA82CE1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'38F8843D-819A-53CD-B43B-81DC2EA82CE1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'38F8843D-819A-53CD-B43B-81DC2EA82CE1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D6C4592D-F4C8-5335-A379-E47614BD5612', 'sequence': {'long': 2016}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D6C4592D-F4C8-5335-A379-E47614BD5612','2016','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926933363583','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D6C4592D-F4C8-5335-A379-E47614BD5612','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D6C4592D-F4C8-5335-A379-E47614BD5612','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D6C4592D-F4C8-5335-A379-E47614BD5612','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DC6125BB-270D-5AC7-8807-890666BA2359', 'sequence': {'long': 2017}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81520800}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DC6125BB-270D-5AC7-8807-890666BA2359','2017','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926933363583','aue_lseek','81520800','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DC6125BB-270D-5AC7-8807-890666BA2359','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DC6125BB-270D-5AC7-8807-890666BA2359','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DC6125BB-270D-5AC7-8807-890666BA2359','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '763130E3-D56C-51FF-B8AB-9641BD9A9745', 'sequence': {'long': 2018}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'763130E3-D56C-51FF-B8AB-9641BD9A9745','2018','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926933363583','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'763130E3-D56C-51FF-B8AB-9641BD9A9745','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'763130E3-D56C-51FF-B8AB-9641BD9A9745','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'763130E3-D56C-51FF-B8AB-9641BD9A9745','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '83703A78-83B8-5103-AD4D-AA26E4C61A0B', 'sequence': {'long': 2019}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'83703A78-83B8-5103-AD4D-AA26E4C61A0B','2019','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926933363583','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'83703A78-83B8-5103-AD4D-AA26E4C61A0B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'83703A78-83B8-5103-AD4D-AA26E4C61A0B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'83703A78-83B8-5103-AD4D-AA26E4C61A0B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4DBA4DEB-8953-592A-8DE9-A85362A6F09D', 'sequence': {'long': 2020}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 188678144}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4DBA4DEB-8953-592A-8DE9-A85362A6F09D','2020','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926933363583','aue_lseek','188678144','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4DBA4DEB-8953-592A-8DE9-A85362A6F09D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4DBA4DEB-8953-592A-8DE9-A85362A6F09D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4DBA4DEB-8953-592A-8DE9-A85362A6F09D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AEA4B6BA-D2E3-5FC5-9CA2-2DEAA6A37D77', 'sequence': {'long': 2021}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AEA4B6BA-D2E3-5FC5-9CA2-2DEAA6A37D77','2021','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926933363583','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AEA4B6BA-D2E3-5FC5-9CA2-2DEAA6A37D77','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AEA4B6BA-D2E3-5FC5-9CA2-2DEAA6A37D77','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AEA4B6BA-D2E3-5FC5-9CA2-2DEAA6A37D77','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4010384E-23E0-55BB-9A40-76EB2841EBB2', 'sequence': {'long': 2022}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926933363583, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4010384E-23E0-55BB-9A40-76EB2841EBB2','2022','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926933363583','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4010384E-23E0-55BB-9A40-76EB2841EBB2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4010384E-23E0-55BB-9A40-76EB2841EBB2','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4010384E-23E0-55BB-9A40-76EB2841EBB2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E5590C9C-95B4-5D5F-8FC2-0F5D9688079E', 'sequence': {'long': 2023}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E5590C9C-95B4-5D5F-8FC2-0F5D9688079E','2023','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E5590C9C-95B4-5D5F-8FC2-0F5D9688079E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E5590C9C-95B4-5D5F-8FC2-0F5D9688079E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E5590C9C-95B4-5D5F-8FC2-0F5D9688079E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '662D03A3-94AF-5DA9-AC10-A3977362B0C1', 'sequence': {'long': 2024}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'662D03A3-94AF-5DA9-AC10-A3977362B0C1','2024','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'662D03A3-94AF-5DA9-AC10-A3977362B0C1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'662D03A3-94AF-5DA9-AC10-A3977362B0C1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'662D03A3-94AF-5DA9-AC10-A3977362B0C1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FFD5AB80-D45B-548C-A443-241260967A49', 'sequence': {'long': 2025}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80410784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FFD5AB80-D45B-548C-A443-241260967A49','2025','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926943363943','aue_lseek','80410784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FFD5AB80-D45B-548C-A443-241260967A49','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FFD5AB80-D45B-548C-A443-241260967A49','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FFD5AB80-D45B-548C-A443-241260967A49','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1D66DF22-E16C-56AE-97B9-1AEF10ACAC0A', 'sequence': {'long': 2026}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1D66DF22-E16C-56AE-97B9-1AEF10ACAC0A','2026','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1D66DF22-E16C-56AE-97B9-1AEF10ACAC0A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1D66DF22-E16C-56AE-97B9-1AEF10ACAC0A','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1D66DF22-E16C-56AE-97B9-1AEF10ACAC0A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FB4F6C20-A08E-5CA5-A23E-F92FB3DE5C35', 'sequence': {'long': 2027}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FB4F6C20-A08E-5CA5-A23E-F92FB3DE5C35','2027','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FB4F6C20-A08E-5CA5-A23E-F92FB3DE5C35','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FB4F6C20-A08E-5CA5-A23E-F92FB3DE5C35','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FB4F6C20-A08E-5CA5-A23E-F92FB3DE5C35','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F3CEEED0-FE82-5528-ABD5-0CDC5534BC56', 'sequence': {'long': 2028}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82744400}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F3CEEED0-FE82-5528-ABD5-0CDC5534BC56','2028','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926943363943','aue_lseek','82744400','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F3CEEED0-FE82-5528-ABD5-0CDC5534BC56','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F3CEEED0-FE82-5528-ABD5-0CDC5534BC56','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F3CEEED0-FE82-5528-ABD5-0CDC5534BC56','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '410FBCD9-8C39-585A-AE47-A85DC70CCD31', 'sequence': {'long': 2029}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'410FBCD9-8C39-585A-AE47-A85DC70CCD31','2029','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'410FBCD9-8C39-585A-AE47-A85DC70CCD31','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'410FBCD9-8C39-585A-AE47-A85DC70CCD31','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'410FBCD9-8C39-585A-AE47-A85DC70CCD31','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '15F43776-5D93-58D4-88D1-74BE20A6B834', 'sequence': {'long': 2030}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'15F43776-5D93-58D4-88D1-74BE20A6B834','2030','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'15F43776-5D93-58D4-88D1-74BE20A6B834','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'15F43776-5D93-58D4-88D1-74BE20A6B834','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'15F43776-5D93-58D4-88D1-74BE20A6B834','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DA9B4972-C43C-50A3-BB4B-4B26E934381F', 'sequence': {'long': 2031}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DA9B4972-C43C-50A3-BB4B-4B26E934381F','2031','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DA9B4972-C43C-50A3-BB4B-4B26E934381F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DA9B4972-C43C-50A3-BB4B-4B26E934381F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DA9B4972-C43C-50A3-BB4B-4B26E934381F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ED5A5B06-A801-534F-848B-7BEA4EB93EFF', 'sequence': {'long': 2032}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ED5A5B06-A801-534F-848B-7BEA4EB93EFF','2032','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ED5A5B06-A801-534F-848B-7BEA4EB93EFF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ED5A5B06-A801-534F-848B-7BEA4EB93EFF','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ED5A5B06-A801-534F-848B-7BEA4EB93EFF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A3B5F1CF-44AE-5163-8B53-B6EC5F5E1A04', 'sequence': {'long': 2033}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A3B5F1CF-44AE-5163-8B53-B6EC5F5E1A04','2033','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A3B5F1CF-44AE-5163-8B53-B6EC5F5E1A04','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A3B5F1CF-44AE-5163-8B53-B6EC5F5E1A04','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A3B5F1CF-44AE-5163-8B53-B6EC5F5E1A04','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '32EF5010-3AF2-580B-9BAD-267B37FFF8B4', 'sequence': {'long': 2034}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'32EF5010-3AF2-580B-9BAD-267B37FFF8B4','2034','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'32EF5010-3AF2-580B-9BAD-267B37FFF8B4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'32EF5010-3AF2-580B-9BAD-267B37FFF8B4','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'32EF5010-3AF2-580B-9BAD-267B37FFF8B4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '35A70C71-85A8-53FA-AA0D-2CB4BFAF4458', 'sequence': {'long': 2035}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83089568}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'35A70C71-85A8-53FA-AA0D-2CB4BFAF4458','2035','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926943363943','aue_lseek','83089568','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'35A70C71-85A8-53FA-AA0D-2CB4BFAF4458','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'35A70C71-85A8-53FA-AA0D-2CB4BFAF4458','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'35A70C71-85A8-53FA-AA0D-2CB4BFAF4458','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '19EBD777-4829-5D05-B971-EBFDCBEB901A', 'sequence': {'long': 2036}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'19EBD777-4829-5D05-B971-EBFDCBEB901A','2036','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'19EBD777-4829-5D05-B971-EBFDCBEB901A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'19EBD777-4829-5D05-B971-EBFDCBEB901A','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'19EBD777-4829-5D05-B971-EBFDCBEB901A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3FDB401A-1FCE-5CFB-BEE4-D75E35F1AD85', 'sequence': {'long': 2037}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83089696}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3FDB401A-1FCE-5CFB-BEE4-D75E35F1AD85','2037','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926943363943','aue_lseek','83089696','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3FDB401A-1FCE-5CFB-BEE4-D75E35F1AD85','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3FDB401A-1FCE-5CFB-BEE4-D75E35F1AD85','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3FDB401A-1FCE-5CFB-BEE4-D75E35F1AD85','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BECC1EDC-28B2-522C-A4D8-4951CCE19FBB', 'sequence': {'long': 2038}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BECC1EDC-28B2-522C-A4D8-4951CCE19FBB','2038','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BECC1EDC-28B2-522C-A4D8-4951CCE19FBB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BECC1EDC-28B2-522C-A4D8-4951CCE19FBB','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BECC1EDC-28B2-522C-A4D8-4951CCE19FBB','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '45A7DAEC-1D9E-5408-8087-94EFEF5CA811', 'sequence': {'long': 2039}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82187344}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'45A7DAEC-1D9E-5408-8087-94EFEF5CA811','2039','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926943363943','aue_lseek','82187344','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'45A7DAEC-1D9E-5408-8087-94EFEF5CA811','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'45A7DAEC-1D9E-5408-8087-94EFEF5CA811','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'45A7DAEC-1D9E-5408-8087-94EFEF5CA811','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1F0297BD-A539-5E26-AA42-A32F5E13895C', 'sequence': {'long': 2040}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1F0297BD-A539-5E26-AA42-A32F5E13895C','2040','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1F0297BD-A539-5E26-AA42-A32F5E13895C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1F0297BD-A539-5E26-AA42-A32F5E13895C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1F0297BD-A539-5E26-AA42-A32F5E13895C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EB23FA3C-0A01-5858-976F-F3C099E733DC', 'sequence': {'long': 2041}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EB23FA3C-0A01-5858-976F-F3C099E733DC','2041','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EB23FA3C-0A01-5858-976F-F3C099E733DC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EB23FA3C-0A01-5858-976F-F3C099E733DC','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EB23FA3C-0A01-5858-976F-F3C099E733DC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CD49C95C-CF63-544F-AA91-8072D73D830D', 'sequence': {'long': 2042}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80382112}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CD49C95C-CF63-544F-AA91-8072D73D830D','2042','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926943363943','aue_lseek','80382112','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CD49C95C-CF63-544F-AA91-8072D73D830D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CD49C95C-CF63-544F-AA91-8072D73D830D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CD49C95C-CF63-544F-AA91-8072D73D830D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B29CC622-6623-572D-96ED-52A0132F221D', 'sequence': {'long': 2043}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B29CC622-6623-572D-96ED-52A0132F221D','2043','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B29CC622-6623-572D-96ED-52A0132F221D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B29CC622-6623-572D-96ED-52A0132F221D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B29CC622-6623-572D-96ED-52A0132F221D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C82363F9-674C-591F-BCF8-64FFB6AAD6BE', 'sequence': {'long': 2044}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80382240}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C82363F9-674C-591F-BCF8-64FFB6AAD6BE','2044','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926943363943','aue_lseek','80382240','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C82363F9-674C-591F-BCF8-64FFB6AAD6BE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C82363F9-674C-591F-BCF8-64FFB6AAD6BE','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C82363F9-674C-591F-BCF8-64FFB6AAD6BE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DE4FCDE4-8579-548A-83E9-54B70CEA651F', 'sequence': {'long': 2045}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DE4FCDE4-8579-548A-83E9-54B70CEA651F','2045','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DE4FCDE4-8579-548A-83E9-54B70CEA651F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DE4FCDE4-8579-548A-83E9-54B70CEA651F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DE4FCDE4-8579-548A-83E9-54B70CEA651F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C0D9A16E-52A2-5401-809D-1ADF4D0D00B9', 'sequence': {'long': 2046}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82743296}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C0D9A16E-52A2-5401-809D-1ADF4D0D00B9','2046','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926943363943','aue_lseek','82743296','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C0D9A16E-52A2-5401-809D-1ADF4D0D00B9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C0D9A16E-52A2-5401-809D-1ADF4D0D00B9','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C0D9A16E-52A2-5401-809D-1ADF4D0D00B9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F74ADF2A-6E8A-58C1-A4D4-87BEE2F2566E', 'sequence': {'long': 2047}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F74ADF2A-6E8A-58C1-A4D4-87BEE2F2566E','2047','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F74ADF2A-6E8A-58C1-A4D4-87BEE2F2566E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F74ADF2A-6E8A-58C1-A4D4-87BEE2F2566E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F74ADF2A-6E8A-58C1-A4D4-87BEE2F2566E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B67023A2-F098-5E0F-AD8B-F7E5E87FC490', 'sequence': {'long': 2048}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82743424}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B67023A2-F098-5E0F-AD8B-F7E5E87FC490','2048','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926943363943','aue_lseek','82743424','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B67023A2-F098-5E0F-AD8B-F7E5E87FC490','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B67023A2-F098-5E0F-AD8B-F7E5E87FC490','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B67023A2-F098-5E0F-AD8B-F7E5E87FC490','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3AA3B38B-9802-5E37-9178-59A8126104BC', 'sequence': {'long': 2049}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3AA3B38B-9802-5E37-9178-59A8126104BC','2049','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3AA3B38B-9802-5E37-9178-59A8126104BC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3AA3B38B-9802-5E37-9178-59A8126104BC','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3AA3B38B-9802-5E37-9178-59A8126104BC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F7141A9A-C34F-547A-9E3B-7DCCF0F758AC', 'sequence': {'long': 2050}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82747392}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F7141A9A-C34F-547A-9E3B-7DCCF0F758AC','2050','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926943363943','aue_lseek','82747392','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F7141A9A-C34F-547A-9E3B-7DCCF0F758AC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F7141A9A-C34F-547A-9E3B-7DCCF0F758AC','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F7141A9A-C34F-547A-9E3B-7DCCF0F758AC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5C2C082A-4394-555D-9BB3-825D8B8F5766', 'sequence': {'long': 2051}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5C2C082A-4394-555D-9BB3-825D8B8F5766','2051','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926943363943','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5C2C082A-4394-555D-9BB3-825D8B8F5766','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5C2C082A-4394-555D-9BB3-825D8B8F5766','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5C2C082A-4394-555D-9BB3-825D8B8F5766','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9389121A-9F7C-5CFB-8B81-C0606F6B30AF', 'sequence': {'long': 2052}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926943363943, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82747520}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9389121A-9F7C-5CFB-8B81-C0606F6B30AF','2052','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926943363943','aue_lseek','82747520','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9389121A-9F7C-5CFB-8B81-C0606F6B30AF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9389121A-9F7C-5CFB-8B81-C0606F6B30AF','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9389121A-9F7C-5CFB-8B81-C0606F6B30AF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D04B2B9C-357F-5F43-BD1E-1C86F9BF470E', 'sequence': {'long': 2053}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D04B2B9C-357F-5F43-BD1E-1C86F9BF470E','2053','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D04B2B9C-357F-5F43-BD1E-1C86F9BF470E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D04B2B9C-357F-5F43-BD1E-1C86F9BF470E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D04B2B9C-357F-5F43-BD1E-1C86F9BF470E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2CBF141C-2646-511D-A9A0-2261F2B65953', 'sequence': {'long': 2054}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2CBF141C-2646-511D-A9A0-2261F2B65953','2054','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2CBF141C-2646-511D-A9A0-2261F2B65953','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2CBF141C-2646-511D-A9A0-2261F2B65953','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2CBF141C-2646-511D-A9A0-2261F2B65953','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7F43391F-32D3-5112-A612-BA75DB9BC1DA', 'sequence': {'long': 2055}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7F43391F-32D3-5112-A612-BA75DB9BC1DA','2055','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7F43391F-32D3-5112-A612-BA75DB9BC1DA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7F43391F-32D3-5112-A612-BA75DB9BC1DA','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7F43391F-32D3-5112-A612-BA75DB9BC1DA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8B10D360-4BFF-503E-A3DC-9E70E5B27CE0', 'sequence': {'long': 2056}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 197694544}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8B10D360-4BFF-503E-A3DC-9E70E5B27CE0','2056','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','197694544','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8B10D360-4BFF-503E-A3DC-9E70E5B27CE0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8B10D360-4BFF-503E-A3DC-9E70E5B27CE0','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8B10D360-4BFF-503E-A3DC-9E70E5B27CE0','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '860FF5A4-3712-505C-9FBC-17DAF23C86C9', 'sequence': {'long': 2057}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'860FF5A4-3712-505C-9FBC-17DAF23C86C9','2057','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'860FF5A4-3712-505C-9FBC-17DAF23C86C9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'860FF5A4-3712-505C-9FBC-17DAF23C86C9','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'860FF5A4-3712-505C-9FBC-17DAF23C86C9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0BC7E485-0EF7-59BF-81B7-1C8AEE35E129', 'sequence': {'long': 2058}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 197694672}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0BC7E485-0EF7-59BF-81B7-1C8AEE35E129','2058','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','197694672','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0BC7E485-0EF7-59BF-81B7-1C8AEE35E129','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0BC7E485-0EF7-59BF-81B7-1C8AEE35E129','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0BC7E485-0EF7-59BF-81B7-1C8AEE35E129','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2701E5E1-3B57-5003-8954-D097F01C9B20', 'sequence': {'long': 2059}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2701E5E1-3B57-5003-8954-D097F01C9B20','2059','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2701E5E1-3B57-5003-8954-D097F01C9B20','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2701E5E1-3B57-5003-8954-D097F01C9B20','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2701E5E1-3B57-5003-8954-D097F01C9B20','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '12403A9C-5D82-5064-95AD-196212D84BE2', 'sequence': {'long': 2060}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82842704}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'12403A9C-5D82-5064-95AD-196212D84BE2','2060','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','82842704','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'12403A9C-5D82-5064-95AD-196212D84BE2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'12403A9C-5D82-5064-95AD-196212D84BE2','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'12403A9C-5D82-5064-95AD-196212D84BE2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D8BF7563-57FC-5C07-836A-1C6C8480F252', 'sequence': {'long': 2061}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D8BF7563-57FC-5C07-836A-1C6C8480F252','2061','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D8BF7563-57FC-5C07-836A-1C6C8480F252','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D8BF7563-57FC-5C07-836A-1C6C8480F252','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D8BF7563-57FC-5C07-836A-1C6C8480F252','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3B4760EB-C040-5D28-9A0F-1871DB4817A8', 'sequence': {'long': 2062}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82842832}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3B4760EB-C040-5D28-9A0F-1871DB4817A8','2062','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','82842832','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3B4760EB-C040-5D28-9A0F-1871DB4817A8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3B4760EB-C040-5D28-9A0F-1871DB4817A8','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3B4760EB-C040-5D28-9A0F-1871DB4817A8','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '01B635C6-A0EE-5379-ABA2-6F3B59B20D37', 'sequence': {'long': 2063}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'01B635C6-A0EE-5379-ABA2-6F3B59B20D37','2063','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'01B635C6-A0EE-5379-ABA2-6F3B59B20D37','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'01B635C6-A0EE-5379-ABA2-6F3B59B20D37','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'01B635C6-A0EE-5379-ABA2-6F3B59B20D37','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9146CD32-010C-504E-9207-543750544027', 'sequence': {'long': 2064}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9146CD32-010C-504E-9207-543750544027','2064','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9146CD32-010C-504E-9207-543750544027','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9146CD32-010C-504E-9207-543750544027','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9146CD32-010C-504E-9207-543750544027','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '01826DA9-69FA-5E81-BC33-EB2F9C9DB1A3', 'sequence': {'long': 2065}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'01826DA9-69FA-5E81-BC33-EB2F9C9DB1A3','2065','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'01826DA9-69FA-5E81-BC33-EB2F9C9DB1A3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'01826DA9-69FA-5E81-BC33-EB2F9C9DB1A3','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'01826DA9-69FA-5E81-BC33-EB2F9C9DB1A3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9579D38F-E130-559E-9E19-473C46E0C687', 'sequence': {'long': 2066}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82580560}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9579D38F-E130-559E-9E19-473C46E0C687','2066','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','82580560','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9579D38F-E130-559E-9E19-473C46E0C687','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9579D38F-E130-559E-9E19-473C46E0C687','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9579D38F-E130-559E-9E19-473C46E0C687','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5CA464FC-AA7C-5112-B066-8BA6CBE085DA', 'sequence': {'long': 2067}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5CA464FC-AA7C-5112-B066-8BA6CBE085DA','2067','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5CA464FC-AA7C-5112-B066-8BA6CBE085DA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5CA464FC-AA7C-5112-B066-8BA6CBE085DA','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5CA464FC-AA7C-5112-B066-8BA6CBE085DA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D0E2016C-9AE5-5CA0-9532-80A82B9460B8', 'sequence': {'long': 2068}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D0E2016C-9AE5-5CA0-9532-80A82B9460B8','2068','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D0E2016C-9AE5-5CA0-9532-80A82B9460B8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D0E2016C-9AE5-5CA0-9532-80A82B9460B8','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D0E2016C-9AE5-5CA0-9532-80A82B9460B8','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '42DD1548-D4E4-5A55-92D7-F9ED54562732', 'sequence': {'long': 2069}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80381008}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'42DD1548-D4E4-5A55-92D7-F9ED54562732','2069','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','80381008','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'42DD1548-D4E4-5A55-92D7-F9ED54562732','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'42DD1548-D4E4-5A55-92D7-F9ED54562732','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'42DD1548-D4E4-5A55-92D7-F9ED54562732','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A8A56854-995F-534B-90C3-DD6B9D26AFBB', 'sequence': {'long': 2070}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A8A56854-995F-534B-90C3-DD6B9D26AFBB','2070','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A8A56854-995F-534B-90C3-DD6B9D26AFBB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A8A56854-995F-534B-90C3-DD6B9D26AFBB','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A8A56854-995F-534B-90C3-DD6B9D26AFBB','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AB971C45-9858-5CC3-80B9-F15B8E078E13', 'sequence': {'long': 2071}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80381136}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AB971C45-9858-5CC3-80B9-F15B8E078E13','2071','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','80381136','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AB971C45-9858-5CC3-80B9-F15B8E078E13','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AB971C45-9858-5CC3-80B9-F15B8E078E13','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AB971C45-9858-5CC3-80B9-F15B8E078E13','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5624DAA3-9E9B-5689-9F72-333E8888AA1E', 'sequence': {'long': 2072}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5624DAA3-9E9B-5689-9F72-333E8888AA1E','2072','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5624DAA3-9E9B-5689-9F72-333E8888AA1E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5624DAA3-9E9B-5689-9F72-333E8888AA1E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5624DAA3-9E9B-5689-9F72-333E8888AA1E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D3E9F443-BFC3-5619-977E-A9A2C7349B32', 'sequence': {'long': 2073}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80386208}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D3E9F443-BFC3-5619-977E-A9A2C7349B32','2073','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','80386208','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D3E9F443-BFC3-5619-977E-A9A2C7349B32','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D3E9F443-BFC3-5619-977E-A9A2C7349B32','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D3E9F443-BFC3-5619-977E-A9A2C7349B32','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BD08C001-2577-507E-8AF9-997175A75291', 'sequence': {'long': 2074}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BD08C001-2577-507E-8AF9-997175A75291','2074','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BD08C001-2577-507E-8AF9-997175A75291','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BD08C001-2577-507E-8AF9-997175A75291','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BD08C001-2577-507E-8AF9-997175A75291','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '32FACBCD-1966-542D-AFB3-B2AA62B79371', 'sequence': {'long': 2075}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80386336}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'32FACBCD-1966-542D-AFB3-B2AA62B79371','2075','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','80386336','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'32FACBCD-1966-542D-AFB3-B2AA62B79371','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'32FACBCD-1966-542D-AFB3-B2AA62B79371','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'32FACBCD-1966-542D-AFB3-B2AA62B79371','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DD8D5E55-EDAA-559A-A9CC-D8BCBFCECD36', 'sequence': {'long': 2076}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DD8D5E55-EDAA-559A-A9CC-D8BCBFCECD36','2076','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DD8D5E55-EDAA-559A-A9CC-D8BCBFCECD36','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DD8D5E55-EDAA-559A-A9CC-D8BCBFCECD36','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DD8D5E55-EDAA-559A-A9CC-D8BCBFCECD36','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D608DD5-B870-5533-BC66-F7DDDA18D862', 'sequence': {'long': 2077}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82186240}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D608DD5-B870-5533-BC66-F7DDDA18D862','2077','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','82186240','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D608DD5-B870-5533-BC66-F7DDDA18D862','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D608DD5-B870-5533-BC66-F7DDDA18D862','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7D608DD5-B870-5533-BC66-F7DDDA18D862','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '66E984C2-4346-56C2-95EC-CE5AFD620139', 'sequence': {'long': 2078}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'66E984C2-4346-56C2-95EC-CE5AFD620139','2078','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'66E984C2-4346-56C2-95EC-CE5AFD620139','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'66E984C2-4346-56C2-95EC-CE5AFD620139','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'66E984C2-4346-56C2-95EC-CE5AFD620139','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '01547151-92C9-5B79-B2AE-48445D54B274', 'sequence': {'long': 2079}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82186368}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'01547151-92C9-5B79-B2AE-48445D54B274','2079','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','82186368','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'01547151-92C9-5B79-B2AE-48445D54B274','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'01547151-92C9-5B79-B2AE-48445D54B274','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'01547151-92C9-5B79-B2AE-48445D54B274','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9428DB17-4340-5D47-BF83-20C777722CE9', 'sequence': {'long': 2080}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9428DB17-4340-5D47-BF83-20C777722CE9','2080','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9428DB17-4340-5D47-BF83-20C777722CE9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9428DB17-4340-5D47-BF83-20C777722CE9','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9428DB17-4340-5D47-BF83-20C777722CE9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C1A1F6AF-67D7-550E-9F5F-4D381446F438', 'sequence': {'long': 2081}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81959072}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C1A1F6AF-67D7-550E-9F5F-4D381446F438','2081','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926953351153','aue_lseek','81959072','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C1A1F6AF-67D7-550E-9F5F-4D381446F438','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C1A1F6AF-67D7-550E-9F5F-4D381446F438','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C1A1F6AF-67D7-550E-9F5F-4D381446F438','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6CCEE123-52BF-5DD6-9DEE-BB4F2E418370', 'sequence': {'long': 2082}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6CCEE123-52BF-5DD6-9DEE-BB4F2E418370','2082','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6CCEE123-52BF-5DD6-9DEE-BB4F2E418370','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6CCEE123-52BF-5DD6-9DEE-BB4F2E418370','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6CCEE123-52BF-5DD6-9DEE-BB4F2E418370','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '43596BE0-7B1E-5590-A250-88074E56870E', 'sequence': {'long': 2083}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926953351153, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'43596BE0-7B1E-5590-A250-88074E56870E','2083','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926953351153','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'43596BE0-7B1E-5590-A250-88074E56870E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'43596BE0-7B1E-5590-A250-88074E56870E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'43596BE0-7B1E-5590-A250-88074E56870E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '08E5D77D-6700-5C60-B390-950067F9D216', 'sequence': {'long': 2084}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83085472}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'08E5D77D-6700-5C60-B390-950067F9D216','2084','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','83085472','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'08E5D77D-6700-5C60-B390-950067F9D216','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'08E5D77D-6700-5C60-B390-950067F9D216','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'08E5D77D-6700-5C60-B390-950067F9D216','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FFA0EABB-78BC-579B-AECB-AD636AFE62B2', 'sequence': {'long': 2085}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FFA0EABB-78BC-579B-AECB-AD636AFE62B2','2085','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FFA0EABB-78BC-579B-AECB-AD636AFE62B2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FFA0EABB-78BC-579B-AECB-AD636AFE62B2','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FFA0EABB-78BC-579B-AECB-AD636AFE62B2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CAC66F32-8A0D-5D0B-BDE0-0B54BF926ADA', 'sequence': {'long': 2086}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CAC66F32-8A0D-5D0B-BDE0-0B54BF926ADA','2086','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CAC66F32-8A0D-5D0B-BDE0-0B54BF926ADA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CAC66F32-8A0D-5D0B-BDE0-0B54BF926ADA','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CAC66F32-8A0D-5D0B-BDE0-0B54BF926ADA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '25443C54-8EED-557D-967A-AD2F1C38E146', 'sequence': {'long': 2087}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81526784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'25443C54-8EED-557D-967A-AD2F1C38E146','2087','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','81526784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'25443C54-8EED-557D-967A-AD2F1C38E146','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'25443C54-8EED-557D-967A-AD2F1C38E146','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'25443C54-8EED-557D-967A-AD2F1C38E146','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F83A6A5A-9369-5C18-A527-9BAB7674FB9A', 'sequence': {'long': 2088}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F83A6A5A-9369-5C18-A527-9BAB7674FB9A','2088','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F83A6A5A-9369-5C18-A527-9BAB7674FB9A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F83A6A5A-9369-5C18-A527-9BAB7674FB9A','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F83A6A5A-9369-5C18-A527-9BAB7674FB9A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '543258DE-4DDF-5E61-AF4C-205FCEDFD5FA', 'sequence': {'long': 2089}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81526912}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'543258DE-4DDF-5E61-AF4C-205FCEDFD5FA','2089','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','81526912','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'543258DE-4DDF-5E61-AF4C-205FCEDFD5FA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'543258DE-4DDF-5E61-AF4C-205FCEDFD5FA','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'543258DE-4DDF-5E61-AF4C-205FCEDFD5FA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1E07F6F1-21B7-5A7B-8D3C-2BC4A8CB58C5', 'sequence': {'long': 2090}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1E07F6F1-21B7-5A7B-8D3C-2BC4A8CB58C5','2090','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1E07F6F1-21B7-5A7B-8D3C-2BC4A8CB58C5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1E07F6F1-21B7-5A7B-8D3C-2BC4A8CB58C5','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1E07F6F1-21B7-5A7B-8D3C-2BC4A8CB58C5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '541BA2CF-B292-54F2-9B79-88940FBF360D', 'sequence': {'long': 2091}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83091456}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'541BA2CF-B292-54F2-9B79-88940FBF360D','2091','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','83091456','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'541BA2CF-B292-54F2-9B79-88940FBF360D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'541BA2CF-B292-54F2-9B79-88940FBF360D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'541BA2CF-B292-54F2-9B79-88940FBF360D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2E570CD4-245F-5183-B3B6-2262C40330A1', 'sequence': {'long': 2092}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2E570CD4-245F-5183-B3B6-2262C40330A1','2092','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2E570CD4-245F-5183-B3B6-2262C40330A1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2E570CD4-245F-5183-B3B6-2262C40330A1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2E570CD4-245F-5183-B3B6-2262C40330A1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CA249A37-6ED4-5E44-9B4A-39F718AF2338', 'sequence': {'long': 2093}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83091584}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CA249A37-6ED4-5E44-9B4A-39F718AF2338','2093','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','83091584','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CA249A37-6ED4-5E44-9B4A-39F718AF2338','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CA249A37-6ED4-5E44-9B4A-39F718AF2338','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CA249A37-6ED4-5E44-9B4A-39F718AF2338','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1657A1D3-5735-5CA6-8373-7070DD40964E', 'sequence': {'long': 2094}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1657A1D3-5735-5CA6-8373-7070DD40964E','2094','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1657A1D3-5735-5CA6-8373-7070DD40964E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1657A1D3-5735-5CA6-8373-7070DD40964E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1657A1D3-5735-5CA6-8373-7070DD40964E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '703228DF-7C61-58AB-839A-B31618C90409', 'sequence': {'long': 2095}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82749600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'703228DF-7C61-58AB-839A-B31618C90409','2095','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','82749600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'703228DF-7C61-58AB-839A-B31618C90409','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'703228DF-7C61-58AB-839A-B31618C90409','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'703228DF-7C61-58AB-839A-B31618C90409','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '823A7260-792A-5E7B-93E5-8B49CD9551C7', 'sequence': {'long': 2096}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'823A7260-792A-5E7B-93E5-8B49CD9551C7','2096','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'823A7260-792A-5E7B-93E5-8B49CD9551C7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'823A7260-792A-5E7B-93E5-8B49CD9551C7','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'823A7260-792A-5E7B-93E5-8B49CD9551C7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5C81007B-260F-569F-A011-375CBB716031', 'sequence': {'long': 2097}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82749728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5C81007B-260F-569F-A011-375CBB716031','2097','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','82749728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5C81007B-260F-569F-A011-375CBB716031','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5C81007B-260F-569F-A011-375CBB716031','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5C81007B-260F-569F-A011-375CBB716031','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B7C9466B-4A46-5597-AD76-B491AF048E43', 'sequence': {'long': 2098}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B7C9466B-4A46-5597-AD76-B491AF048E43','2098','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B7C9466B-4A46-5597-AD76-B491AF048E43','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B7C9466B-4A46-5597-AD76-B491AF048E43','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B7C9466B-4A46-5597-AD76-B491AF048E43','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '32884536-3799-5D07-84FC-CEB7EBBC0AAE', 'sequence': {'long': 2099}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82182144}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'32884536-3799-5D07-84FC-CEB7EBBC0AAE','2099','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','82182144','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'32884536-3799-5D07-84FC-CEB7EBBC0AAE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'32884536-3799-5D07-84FC-CEB7EBBC0AAE','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'32884536-3799-5D07-84FC-CEB7EBBC0AAE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '71279F16-AB2B-5531-8E7B-C260DACEC953', 'sequence': {'long': 2100}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'71279F16-AB2B-5531-8E7B-C260DACEC953','2100','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'71279F16-AB2B-5531-8E7B-C260DACEC953','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'71279F16-AB2B-5531-8E7B-C260DACEC953','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'71279F16-AB2B-5531-8E7B-C260DACEC953','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '951D93B4-1EF5-5A46-8591-BB9390E9F4E6', 'sequence': {'long': 2101}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82182272}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'951D93B4-1EF5-5A46-8591-BB9390E9F4E6','2101','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','82182272','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'951D93B4-1EF5-5A46-8591-BB9390E9F4E6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'951D93B4-1EF5-5A46-8591-BB9390E9F4E6','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'951D93B4-1EF5-5A46-8591-BB9390E9F4E6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '159F4113-DCD7-5FD5-BD5A-A9D6B0CCD816', 'sequence': {'long': 2102}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'159F4113-DCD7-5FD5-BD5A-A9D6B0CCD816','2102','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'159F4113-DCD7-5FD5-BD5A-A9D6B0CCD816','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'159F4113-DCD7-5FD5-BD5A-A9D6B0CCD816','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'159F4113-DCD7-5FD5-BD5A-A9D6B0CCD816','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '54EBD1DA-5F97-54E6-A7B5-B22C57A10A2C', 'sequence': {'long': 2103}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81574048}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'54EBD1DA-5F97-54E6-A7B5-B22C57A10A2C','2103','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','81574048','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54EBD1DA-5F97-54E6-A7B5-B22C57A10A2C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54EBD1DA-5F97-54E6-A7B5-B22C57A10A2C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'54EBD1DA-5F97-54E6-A7B5-B22C57A10A2C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '47DAA254-73E9-5989-B7CF-A907C5A390D3', 'sequence': {'long': 2104}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'47DAA254-73E9-5989-B7CF-A907C5A390D3','2104','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'47DAA254-73E9-5989-B7CF-A907C5A390D3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'47DAA254-73E9-5989-B7CF-A907C5A390D3','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'47DAA254-73E9-5989-B7CF-A907C5A390D3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '70A13627-74D3-518A-9A50-B78FA7B2F464', 'sequence': {'long': 2105}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81574176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'70A13627-74D3-518A-9A50-B78FA7B2F464','2105','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','81574176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'70A13627-74D3-518A-9A50-B78FA7B2F464','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'70A13627-74D3-518A-9A50-B78FA7B2F464','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'70A13627-74D3-518A-9A50-B78FA7B2F464','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '04996D6F-2339-5B72-8E01-A853F8D47447', 'sequence': {'long': 2106}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'04996D6F-2339-5B72-8E01-A853F8D47447','2106','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'04996D6F-2339-5B72-8E01-A853F8D47447','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'04996D6F-2339-5B72-8E01-A853F8D47447','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'04996D6F-2339-5B72-8E01-A853F8D47447','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '39DF6818-B2BA-569C-89B0-A568857E7DF2', 'sequence': {'long': 2107}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81523792}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'39DF6818-B2BA-569C-89B0-A568857E7DF2','2107','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','81523792','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'39DF6818-B2BA-569C-89B0-A568857E7DF2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'39DF6818-B2BA-569C-89B0-A568857E7DF2','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'39DF6818-B2BA-569C-89B0-A568857E7DF2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '666E91A3-9C54-5527-8750-E26B41A27A00', 'sequence': {'long': 2108}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'666E91A3-9C54-5527-8750-E26B41A27A00','2108','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'666E91A3-9C54-5527-8750-E26B41A27A00','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'666E91A3-9C54-5527-8750-E26B41A27A00','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'666E91A3-9C54-5527-8750-E26B41A27A00','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FDEFBC00-6CD6-55FD-9AD1-2569AA81B0AC', 'sequence': {'long': 2109}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81523920}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FDEFBC00-6CD6-55FD-9AD1-2569AA81B0AC','2109','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','81523920','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FDEFBC00-6CD6-55FD-9AD1-2569AA81B0AC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FDEFBC00-6CD6-55FD-9AD1-2569AA81B0AC','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FDEFBC00-6CD6-55FD-9AD1-2569AA81B0AC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8EBE8F04-5764-5DF1-A4C1-0DAB2D18C1F3', 'sequence': {'long': 2110}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8EBE8F04-5764-5DF1-A4C1-0DAB2D18C1F3','2110','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8EBE8F04-5764-5DF1-A4C1-0DAB2D18C1F3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8EBE8F04-5764-5DF1-A4C1-0DAB2D18C1F3','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8EBE8F04-5764-5DF1-A4C1-0DAB2D18C1F3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CA3B009A-4AB7-5F7D-8016-AECBE97CCF07', 'sequence': {'long': 2111}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83083264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CA3B009A-4AB7-5F7D-8016-AECBE97CCF07','2111','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','83083264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CA3B009A-4AB7-5F7D-8016-AECBE97CCF07','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CA3B009A-4AB7-5F7D-8016-AECBE97CCF07','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CA3B009A-4AB7-5F7D-8016-AECBE97CCF07','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E186EE32-DCBC-57F0-8D18-902E2B55444A', 'sequence': {'long': 2112}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E186EE32-DCBC-57F0-8D18-902E2B55444A','2112','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E186EE32-DCBC-57F0-8D18-902E2B55444A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E186EE32-DCBC-57F0-8D18-902E2B55444A','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E186EE32-DCBC-57F0-8D18-902E2B55444A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4563B5E0-1A1A-5922-98B8-59CA2C817655', 'sequence': {'long': 2113}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83083392}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4563B5E0-1A1A-5922-98B8-59CA2C817655','2113','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926963353174','aue_lseek','83083392','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4563B5E0-1A1A-5922-98B8-59CA2C817655','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4563B5E0-1A1A-5922-98B8-59CA2C817655','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4563B5E0-1A1A-5922-98B8-59CA2C817655','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C6DD2853-06D4-59BE-BE9D-5E909876403F', 'sequence': {'long': 2114}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926963353174, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C6DD2853-06D4-59BE-BE9D-5E909876403F','2114','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926963353174','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C6DD2853-06D4-59BE-BE9D-5E909876403F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C6DD2853-06D4-59BE-BE9D-5E909876403F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C6DD2853-06D4-59BE-BE9D-5E909876403F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '47A49CE6-E59F-5317-9EF2-7A64AF06411D', 'sequence': {'long': 2115}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80384000}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'47A49CE6-E59F-5317-9EF2-7A64AF06411D','2115','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','80384000','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'47A49CE6-E59F-5317-9EF2-7A64AF06411D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'47A49CE6-E59F-5317-9EF2-7A64AF06411D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'47A49CE6-E59F-5317-9EF2-7A64AF06411D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4BFDA0F0-ADCD-567E-8878-D4D132678136', 'sequence': {'long': 2116}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4BFDA0F0-ADCD-567E-8878-D4D132678136','2116','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4BFDA0F0-ADCD-567E-8878-D4D132678136','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4BFDA0F0-ADCD-567E-8878-D4D132678136','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4BFDA0F0-ADCD-567E-8878-D4D132678136','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E8CDAB26-E5C4-5843-9A33-356CDC00B412', 'sequence': {'long': 2117}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80384128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E8CDAB26-E5C4-5843-9A33-356CDC00B412','2117','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','80384128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E8CDAB26-E5C4-5843-9A33-356CDC00B412','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E8CDAB26-E5C4-5843-9A33-356CDC00B412','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E8CDAB26-E5C4-5843-9A33-356CDC00B412','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6C9F17ED-7299-532C-BDF3-2F56574A34EC', 'sequence': {'long': 2118}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6C9F17ED-7299-532C-BDF3-2F56574A34EC','2118','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6C9F17ED-7299-532C-BDF3-2F56574A34EC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6C9F17ED-7299-532C-BDF3-2F56574A34EC','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6C9F17ED-7299-532C-BDF3-2F56574A34EC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A625D755-C16A-527A-8FEE-F5973C16F495', 'sequence': {'long': 2119}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82839712}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A625D755-C16A-527A-8FEE-F5973C16F495','2119','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','82839712','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A625D755-C16A-527A-8FEE-F5973C16F495','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A625D755-C16A-527A-8FEE-F5973C16F495','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A625D755-C16A-527A-8FEE-F5973C16F495','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A3DCEFA6-17F0-5284-BB6F-4D6290BED3FB', 'sequence': {'long': 2120}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A3DCEFA6-17F0-5284-BB6F-4D6290BED3FB','2120','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A3DCEFA6-17F0-5284-BB6F-4D6290BED3FB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A3DCEFA6-17F0-5284-BB6F-4D6290BED3FB','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A3DCEFA6-17F0-5284-BB6F-4D6290BED3FB','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F75D1731-575B-5620-B1CC-B07EC7679D6C', 'sequence': {'long': 2121}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82839840}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F75D1731-575B-5620-B1CC-B07EC7679D6C','2121','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','82839840','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F75D1731-575B-5620-B1CC-B07EC7679D6C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F75D1731-575B-5620-B1CC-B07EC7679D6C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F75D1731-575B-5620-B1CC-B07EC7679D6C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '02593508-C6ED-533D-9A7C-6D8E34182060', 'sequence': {'long': 2122}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'02593508-C6ED-533D-9A7C-6D8E34182060','2122','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'02593508-C6ED-533D-9A7C-6D8E34182060','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'02593508-C6ED-533D-9A7C-6D8E34182060','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'02593508-C6ED-533D-9A7C-6D8E34182060','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '476F914D-FC60-5613-A162-25B249A0078B', 'sequence': {'long': 2123}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82841600}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'476F914D-FC60-5613-A162-25B249A0078B','2123','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','82841600','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'476F914D-FC60-5613-A162-25B249A0078B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'476F914D-FC60-5613-A162-25B249A0078B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'476F914D-FC60-5613-A162-25B249A0078B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E6A3DC6F-E84B-53AB-8F80-12F93125F498', 'sequence': {'long': 2124}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E6A3DC6F-E84B-53AB-8F80-12F93125F498','2124','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E6A3DC6F-E84B-53AB-8F80-12F93125F498','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E6A3DC6F-E84B-53AB-8F80-12F93125F498','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E6A3DC6F-E84B-53AB-8F80-12F93125F498','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '92A988A0-0702-5B70-BB84-BA7DBED64388', 'sequence': {'long': 2125}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82841728}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'92A988A0-0702-5B70-BB84-BA7DBED64388','2125','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','82841728','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'92A988A0-0702-5B70-BB84-BA7DBED64388','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'92A988A0-0702-5B70-BB84-BA7DBED64388','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'92A988A0-0702-5B70-BB84-BA7DBED64388','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D78A3350-432C-52AC-95EA-818ABF20D239', 'sequence': {'long': 2126}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D78A3350-432C-52AC-95EA-818ABF20D239','2126','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D78A3350-432C-52AC-95EA-818ABF20D239','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D78A3350-432C-52AC-95EA-818ABF20D239','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D78A3350-432C-52AC-95EA-818ABF20D239','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DF988280-9249-5E6D-A6C4-942D00D34A45', 'sequence': {'long': 2127}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 187846656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DF988280-9249-5E6D-A6C4-942D00D34A45','2127','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','187846656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DF988280-9249-5E6D-A6C4-942D00D34A45','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DF988280-9249-5E6D-A6C4-942D00D34A45','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DF988280-9249-5E6D-A6C4-942D00D34A45','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DE86A749-4BC7-5398-8167-7FB92C6E1B77', 'sequence': {'long': 2128}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DE86A749-4BC7-5398-8167-7FB92C6E1B77','2128','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DE86A749-4BC7-5398-8167-7FB92C6E1B77','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DE86A749-4BC7-5398-8167-7FB92C6E1B77','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DE86A749-4BC7-5398-8167-7FB92C6E1B77','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0906B1B0-563B-54F4-96AF-E7766BF04C59', 'sequence': {'long': 2129}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 187846784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0906B1B0-563B-54F4-96AF-E7766BF04C59','2129','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','187846784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0906B1B0-563B-54F4-96AF-E7766BF04C59','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0906B1B0-563B-54F4-96AF-E7766BF04C59','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0906B1B0-563B-54F4-96AF-E7766BF04C59','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A836D92C-3CB4-5FBC-B119-25B326093693', 'sequence': {'long': 2130}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A836D92C-3CB4-5FBC-B119-25B326093693','2130','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A836D92C-3CB4-5FBC-B119-25B326093693','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A836D92C-3CB4-5FBC-B119-25B326093693','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A836D92C-3CB4-5FBC-B119-25B326093693','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2B678F85-5CC6-5A25-A4B7-AD760EB5BFE2', 'sequence': {'long': 2131}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 188679248}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2B678F85-5CC6-5A25-A4B7-AD760EB5BFE2','2131','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','188679248','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2B678F85-5CC6-5A25-A4B7-AD760EB5BFE2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2B678F85-5CC6-5A25-A4B7-AD760EB5BFE2','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2B678F85-5CC6-5A25-A4B7-AD760EB5BFE2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AF776D99-AD59-5E12-9BB9-04E1E3E9C6C6', 'sequence': {'long': 2132}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AF776D99-AD59-5E12-9BB9-04E1E3E9C6C6','2132','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AF776D99-AD59-5E12-9BB9-04E1E3E9C6C6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AF776D99-AD59-5E12-9BB9-04E1E3E9C6C6','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AF776D99-AD59-5E12-9BB9-04E1E3E9C6C6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '90C5B9CD-D505-503B-8DDD-C847E8A8C3E9', 'sequence': {'long': 2133}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 188679376}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'90C5B9CD-D505-503B-8DDD-C847E8A8C3E9','2133','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','188679376','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'90C5B9CD-D505-503B-8DDD-C847E8A8C3E9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'90C5B9CD-D505-503B-8DDD-C847E8A8C3E9','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'90C5B9CD-D505-503B-8DDD-C847E8A8C3E9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '672D0029-120C-59CF-A31A-830BC4F53E9F', 'sequence': {'long': 2134}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'672D0029-120C-59CF-A31A-830BC4F53E9F','2134','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'672D0029-120C-59CF-A31A-830BC4F53E9F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'672D0029-120C-59CF-A31A-830BC4F53E9F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'672D0029-120C-59CF-A31A-830BC4F53E9F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7428D1E2-C306-52D5-8D65-22048D1DBD2F', 'sequence': {'long': 2135}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82745504}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7428D1E2-C306-52D5-8D65-22048D1DBD2F','2135','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','82745504','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7428D1E2-C306-52D5-8D65-22048D1DBD2F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7428D1E2-C306-52D5-8D65-22048D1DBD2F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7428D1E2-C306-52D5-8D65-22048D1DBD2F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A088E5FB-748D-5021-832C-8152483DC32D', 'sequence': {'long': 2136}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A088E5FB-748D-5021-832C-8152483DC32D','2136','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A088E5FB-748D-5021-832C-8152483DC32D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A088E5FB-748D-5021-832C-8152483DC32D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A088E5FB-748D-5021-832C-8152483DC32D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8DDD61F3-4211-505B-B2C5-6B1FBD77A642', 'sequence': {'long': 2137}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82745632}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8DDD61F3-4211-505B-B2C5-6B1FBD77A642','2137','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','82745632','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8DDD61F3-4211-505B-B2C5-6B1FBD77A642','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8DDD61F3-4211-505B-B2C5-6B1FBD77A642','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8DDD61F3-4211-505B-B2C5-6B1FBD77A642','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '44F6BFF9-FFDD-5000-ACA9-9450CBEBF9E2', 'sequence': {'long': 2138}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'44F6BFF9-FFDD-5000-ACA9-9450CBEBF9E2','2138','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'44F6BFF9-FFDD-5000-ACA9-9450CBEBF9E2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'44F6BFF9-FFDD-5000-ACA9-9450CBEBF9E2','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'44F6BFF9-FFDD-5000-ACA9-9450CBEBF9E2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '64BF9298-B9A5-593B-9530-3820F63E4158', 'sequence': {'long': 2139}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82837504}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'64BF9298-B9A5-593B-9530-3820F63E4158','2139','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','82837504','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'64BF9298-B9A5-593B-9530-3820F63E4158','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'64BF9298-B9A5-593B-9530-3820F63E4158','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'64BF9298-B9A5-593B-9530-3820F63E4158','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D46FAC02-538B-5AB5-8504-6C5522FF254E', 'sequence': {'long': 2140}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D46FAC02-538B-5AB5-8504-6C5522FF254E','2140','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D46FAC02-538B-5AB5-8504-6C5522FF254E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D46FAC02-538B-5AB5-8504-6C5522FF254E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D46FAC02-538B-5AB5-8504-6C5522FF254E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AB6F1A7F-AD1D-5A66-BE7F-FF4676E6413B', 'sequence': {'long': 2141}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82837632}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AB6F1A7F-AD1D-5A66-BE7F-FF4676E6413B','2141','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','82837632','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AB6F1A7F-AD1D-5A66-BE7F-FF4676E6413B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AB6F1A7F-AD1D-5A66-BE7F-FF4676E6413B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AB6F1A7F-AD1D-5A66-BE7F-FF4676E6413B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '799BBE25-B509-544D-BFA7-F84D5B03CCE5', 'sequence': {'long': 2142}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'799BBE25-B509-544D-BFA7-F84D5B03CCE5','2142','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'799BBE25-B509-544D-BFA7-F84D5B03CCE5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'799BBE25-B509-544D-BFA7-F84D5B03CCE5','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'799BBE25-B509-544D-BFA7-F84D5B03CCE5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '97A812BA-3944-551B-BC1E-3DAFD7E0AE51', 'sequence': {'long': 2143}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82843808}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'97A812BA-3944-551B-BC1E-3DAFD7E0AE51','2143','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','82843808','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'97A812BA-3944-551B-BC1E-3DAFD7E0AE51','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'97A812BA-3944-551B-BC1E-3DAFD7E0AE51','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'97A812BA-3944-551B-BC1E-3DAFD7E0AE51','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9F6B89E0-C499-5401-BE89-F924768130BA', 'sequence': {'long': 2144}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9F6B89E0-C499-5401-BE89-F924768130BA','2144','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926973354994','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9F6B89E0-C499-5401-BE89-F924768130BA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9F6B89E0-C499-5401-BE89-F924768130BA','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9F6B89E0-C499-5401-BE89-F924768130BA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F85EFD87-F1E8-5B26-88DF-744CDABB23EB', 'sequence': {'long': 2145}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926973354994, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82843936}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F85EFD87-F1E8-5B26-88DF-744CDABB23EB','2145','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926973354994','aue_lseek','82843936','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F85EFD87-F1E8-5B26-88DF-744CDABB23EB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F85EFD87-F1E8-5B26-88DF-744CDABB23EB','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F85EFD87-F1E8-5B26-88DF-744CDABB23EB','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8F34704E-35F4-5431-9BD2-191D7C44A43D', 'sequence': {'long': 2146}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8F34704E-35F4-5431-9BD2-191D7C44A43D','2146','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8F34704E-35F4-5431-9BD2-191D7C44A43D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8F34704E-35F4-5431-9BD2-191D7C44A43D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8F34704E-35F4-5431-9BD2-191D7C44A43D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2B96A56C-93C1-5A4B-A130-45FF889E8444', 'sequence': {'long': 2147}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81956864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2B96A56C-93C1-5A4B-A130-45FF889E8444','2147','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','81956864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2B96A56C-93C1-5A4B-A130-45FF889E8444','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2B96A56C-93C1-5A4B-A130-45FF889E8444','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2B96A56C-93C1-5A4B-A130-45FF889E8444','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A4F17743-88D4-574B-A592-4C155955836B', 'sequence': {'long': 2148}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A4F17743-88D4-574B-A592-4C155955836B','2148','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A4F17743-88D4-574B-A592-4C155955836B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A4F17743-88D4-574B-A592-4C155955836B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A4F17743-88D4-574B-A592-4C155955836B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '239832C2-E0FC-5719-ABDA-2AE699FD88A7', 'sequence': {'long': 2149}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81956992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'239832C2-E0FC-5719-ABDA-2AE699FD88A7','2149','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','81956992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'239832C2-E0FC-5719-ABDA-2AE699FD88A7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'239832C2-E0FC-5719-ABDA-2AE699FD88A7','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'239832C2-E0FC-5719-ABDA-2AE699FD88A7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EB3223A6-E7E6-52A0-BD38-2B85EDB8027C', 'sequence': {'long': 2150}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EB3223A6-E7E6-52A0-BD38-2B85EDB8027C','2150','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EB3223A6-E7E6-52A0-BD38-2B85EDB8027C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EB3223A6-E7E6-52A0-BD38-2B85EDB8027C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EB3223A6-E7E6-52A0-BD38-2B85EDB8027C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '54879D1A-B107-527A-94BF-78B383859EA6', 'sequence': {'long': 2151}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82184352}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'54879D1A-B107-527A-94BF-78B383859EA6','2151','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','82184352','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54879D1A-B107-527A-94BF-78B383859EA6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54879D1A-B107-527A-94BF-78B383859EA6','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'54879D1A-B107-527A-94BF-78B383859EA6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '61109B4B-1484-569E-84D8-3A1C3DD80DB2', 'sequence': {'long': 2152}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'61109B4B-1484-569E-84D8-3A1C3DD80DB2','2152','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'61109B4B-1484-569E-84D8-3A1C3DD80DB2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'61109B4B-1484-569E-84D8-3A1C3DD80DB2','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'61109B4B-1484-569E-84D8-3A1C3DD80DB2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9A2A8330-49B0-512C-BC5A-0CF5D6D8B7D4', 'sequence': {'long': 2153}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 193990656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9A2A8330-49B0-512C-BC5A-0CF5D6D8B7D4','2153','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','193990656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9A2A8330-49B0-512C-BC5A-0CF5D6D8B7D4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9A2A8330-49B0-512C-BC5A-0CF5D6D8B7D4','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9A2A8330-49B0-512C-BC5A-0CF5D6D8B7D4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FD7C18A4-B72C-5617-AB6A-9D6F0F23A7AF', 'sequence': {'long': 2154}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FD7C18A4-B72C-5617-AB6A-9D6F0F23A7AF','2154','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FD7C18A4-B72C-5617-AB6A-9D6F0F23A7AF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FD7C18A4-B72C-5617-AB6A-9D6F0F23A7AF','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FD7C18A4-B72C-5617-AB6A-9D6F0F23A7AF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '64F5D34A-5981-5A60-94A3-F8E15EADD6A9', 'sequence': {'long': 2155}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81018880}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'64F5D34A-5981-5A60-94A3-F8E15EADD6A9','2155','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','81018880','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'64F5D34A-5981-5A60-94A3-F8E15EADD6A9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'64F5D34A-5981-5A60-94A3-F8E15EADD6A9','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'64F5D34A-5981-5A60-94A3-F8E15EADD6A9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CC72CAD2-A0B3-5D59-9091-A49F0C9CC062', 'sequence': {'long': 2156}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CC72CAD2-A0B3-5D59-9091-A49F0C9CC062','2156','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CC72CAD2-A0B3-5D59-9091-A49F0C9CC062','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CC72CAD2-A0B3-5D59-9091-A49F0C9CC062','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CC72CAD2-A0B3-5D59-9091-A49F0C9CC062','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2A5C9EB8-67C5-54B1-BC1D-097138BF07B9', 'sequence': {'long': 2157}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80375808}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2A5C9EB8-67C5-54B1-BC1D-097138BF07B9','2157','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','80375808','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2A5C9EB8-67C5-54B1-BC1D-097138BF07B9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2A5C9EB8-67C5-54B1-BC1D-097138BF07B9','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2A5C9EB8-67C5-54B1-BC1D-097138BF07B9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CE1577B3-A307-5251-A0FC-B05E58DC0B49', 'sequence': {'long': 2158}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CE1577B3-A307-5251-A0FC-B05E58DC0B49','2158','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CE1577B3-A307-5251-A0FC-B05E58DC0B49','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CE1577B3-A307-5251-A0FC-B05E58DC0B49','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CE1577B3-A307-5251-A0FC-B05E58DC0B49','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '78DC9DF0-4AE0-57DE-8525-83550640EA14', 'sequence': {'long': 2159}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59823184}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'78DC9DF0-4AE0-57DE-8525-83550640EA14','2159','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','59823184','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'78DC9DF0-4AE0-57DE-8525-83550640EA14','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'78DC9DF0-4AE0-57DE-8525-83550640EA14','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'78DC9DF0-4AE0-57DE-8525-83550640EA14','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '539718E3-C061-523D-A9E9-A8B987EFC4B4', 'sequence': {'long': 2160}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'539718E3-C061-523D-A9E9-A8B987EFC4B4','2160','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'539718E3-C061-523D-A9E9-A8B987EFC4B4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'539718E3-C061-523D-A9E9-A8B987EFC4B4','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'539718E3-C061-523D-A9E9-A8B987EFC4B4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '68148D70-51EA-55B2-90AB-C5190AC5F1F4', 'sequence': {'long': 2161}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59823312}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'68148D70-51EA-55B2-90AB-C5190AC5F1F4','2161','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','59823312','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'68148D70-51EA-55B2-90AB-C5190AC5F1F4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'68148D70-51EA-55B2-90AB-C5190AC5F1F4','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'68148D70-51EA-55B2-90AB-C5190AC5F1F4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '26630010-217B-57D6-A0C4-82EB6D23000A', 'sequence': {'long': 2162}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'26630010-217B-57D6-A0C4-82EB6D23000A','2162','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'26630010-217B-57D6-A0C4-82EB6D23000A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'26630010-217B-57D6-A0C4-82EB6D23000A','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'26630010-217B-57D6-A0C4-82EB6D23000A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E828931B-BB12-5A52-97F7-82D77247C22C', 'sequence': {'long': 2163}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 82354176}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E828931B-BB12-5A52-97F7-82D77247C22C','2163','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','82354176','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E828931B-BB12-5A52-97F7-82D77247C22C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E828931B-BB12-5A52-97F7-82D77247C22C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E828931B-BB12-5A52-97F7-82D77247C22C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0B808BBD-24A9-5153-A764-29F087E63A63', 'sequence': {'long': 2164}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0B808BBD-24A9-5153-A764-29F087E63A63','2164','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0B808BBD-24A9-5153-A764-29F087E63A63','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0B808BBD-24A9-5153-A764-29F087E63A63','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0B808BBD-24A9-5153-A764-29F087E63A63','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E202A38E-74FF-5298-ACC7-81DABAC578DD', 'sequence': {'long': 2165}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 190091264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E202A38E-74FF-5298-ACC7-81DABAC578DD','2165','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','190091264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E202A38E-74FF-5298-ACC7-81DABAC578DD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E202A38E-74FF-5298-ACC7-81DABAC578DD','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E202A38E-74FF-5298-ACC7-81DABAC578DD','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '365E9722-B3A6-5934-A3AD-771FD24E785F', 'sequence': {'long': 2166}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'365E9722-B3A6-5934-A3AD-771FD24E785F','2166','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'365E9722-B3A6-5934-A3AD-771FD24E785F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'365E9722-B3A6-5934-A3AD-771FD24E785F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'365E9722-B3A6-5934-A3AD-771FD24E785F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6F467179-02BE-534B-A740-D301E9CBC027', 'sequence': {'long': 2167}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81960960}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6F467179-02BE-534B-A740-D301E9CBC027','2167','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','81960960','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6F467179-02BE-534B-A740-D301E9CBC027','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6F467179-02BE-534B-A740-D301E9CBC027','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6F467179-02BE-534B-A740-D301E9CBC027','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D1611BE-F405-5B50-9139-E0A164B17D2F', 'sequence': {'long': 2168}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D1611BE-F405-5B50-9139-E0A164B17D2F','2168','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D1611BE-F405-5B50-9139-E0A164B17D2F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D1611BE-F405-5B50-9139-E0A164B17D2F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7D1611BE-F405-5B50-9139-E0A164B17D2F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '315E324C-40CE-574A-B245-014B7A1002ED', 'sequence': {'long': 2169}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81961088}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'315E324C-40CE-574A-B245-014B7A1002ED','2169','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','81961088','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'315E324C-40CE-574A-B245-014B7A1002ED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'315E324C-40CE-574A-B245-014B7A1002ED','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'315E324C-40CE-574A-B245-014B7A1002ED','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2535B8CA-7FE2-55F9-B691-E006E8B3A926', 'sequence': {'long': 2170}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2535B8CA-7FE2-55F9-B691-E006E8B3A926','2170','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2535B8CA-7FE2-55F9-B691-E006E8B3A926','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2535B8CA-7FE2-55F9-B691-E006E8B3A926','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2535B8CA-7FE2-55F9-B691-E006E8B3A926','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '45B20CD3-0569-56B1-94C7-691705256E58', 'sequence': {'long': 2171}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80388096}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'45B20CD3-0569-56B1-94C7-691705256E58','2171','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','80388096','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'45B20CD3-0569-56B1-94C7-691705256E58','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'45B20CD3-0569-56B1-94C7-691705256E58','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'45B20CD3-0569-56B1-94C7-691705256E58','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '55223265-60F7-57C7-9C20-A0BCC329A2D7', 'sequence': {'long': 2172}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'55223265-60F7-57C7-9C20-A0BCC329A2D7','2172','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'55223265-60F7-57C7-9C20-A0BCC329A2D7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'55223265-60F7-57C7-9C20-A0BCC329A2D7','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'55223265-60F7-57C7-9C20-A0BCC329A2D7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2FBF41C8-A24E-5FDC-B66F-38647DBF69C3', 'sequence': {'long': 2173}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 80388224}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2FBF41C8-A24E-5FDC-B66F-38647DBF69C3','2173','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','80388224','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2FBF41C8-A24E-5FDC-B66F-38647DBF69C3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2FBF41C8-A24E-5FDC-B66F-38647DBF69C3','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2FBF41C8-A24E-5FDC-B66F-38647DBF69C3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D2F09985-3A14-57E8-B3F8-E03A4A5F93A7', 'sequence': {'long': 2174}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D2F09985-3A14-57E8-B3F8-E03A4A5F93A7','2174','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D2F09985-3A14-57E8-B3F8-E03A4A5F93A7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D2F09985-3A14-57E8-B3F8-E03A4A5F93A7','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D2F09985-3A14-57E8-B3F8-E03A4A5F93A7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '98C74830-B2F4-5405-BD67-166D2D29EF8D', 'sequence': {'long': 2175}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81524896}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'98C74830-B2F4-5405-BD67-166D2D29EF8D','2175','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926983351875','aue_lseek','81524896','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'98C74830-B2F4-5405-BD67-166D2D29EF8D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'98C74830-B2F4-5405-BD67-166D2D29EF8D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'98C74830-B2F4-5405-BD67-166D2D29EF8D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3FA32DD7-9A19-5BAF-BE51-BFF2532B691B', 'sequence': {'long': 2176}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926983351875, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3FA32DD7-9A19-5BAF-BE51-BFF2532B691B','2176','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926983351875','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3FA32DD7-9A19-5BAF-BE51-BFF2532B691B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3FA32DD7-9A19-5BAF-BE51-BFF2532B691B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3FA32DD7-9A19-5BAF-BE51-BFF2532B691B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2402349E-5814-5992-A4C6-237907EA5927', 'sequence': {'long': 2177}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81525024}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2402349E-5814-5992-A4C6-237907EA5927','2177','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','81525024','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2402349E-5814-5992-A4C6-237907EA5927','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2402349E-5814-5992-A4C6-237907EA5927','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2402349E-5814-5992-A4C6-237907EA5927','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7A500218-C655-544F-A1F2-A0C1FE2D5C8B', 'sequence': {'long': 2178}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7A500218-C655-544F-A1F2-A0C1FE2D5C8B','2178','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7A500218-C655-544F-A1F2-A0C1FE2D5C8B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7A500218-C655-544F-A1F2-A0C1FE2D5C8B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7A500218-C655-544F-A1F2-A0C1FE2D5C8B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0E5AA0EF-6B7C-5DFA-95AC-4E286A08CA1B', 'sequence': {'long': 2179}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59822080}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0E5AA0EF-6B7C-5DFA-95AC-4E286A08CA1B','2179','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','59822080','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0E5AA0EF-6B7C-5DFA-95AC-4E286A08CA1B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0E5AA0EF-6B7C-5DFA-95AC-4E286A08CA1B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0E5AA0EF-6B7C-5DFA-95AC-4E286A08CA1B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '91A6E6E3-C8BA-5DC6-B4FC-FAF83EF688E7', 'sequence': {'long': 2180}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'91A6E6E3-C8BA-5DC6-B4FC-FAF83EF688E7','2180','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'91A6E6E3-C8BA-5DC6-B4FC-FAF83EF688E7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'91A6E6E3-C8BA-5DC6-B4FC-FAF83EF688E7','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'91A6E6E3-C8BA-5DC6-B4FC-FAF83EF688E7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9444BD80-2485-5393-81DC-2521B1C5A6D5', 'sequence': {'long': 2181}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59822208}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9444BD80-2485-5393-81DC-2521B1C5A6D5','2181','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','59822208','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9444BD80-2485-5393-81DC-2521B1C5A6D5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9444BD80-2485-5393-81DC-2521B1C5A6D5','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9444BD80-2485-5393-81DC-2521B1C5A6D5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F7B66E3A-A4D3-5B2B-BC54-71D6EA541497', 'sequence': {'long': 2182}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F7B66E3A-A4D3-5B2B-BC54-71D6EA541497','2182','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F7B66E3A-A4D3-5B2B-BC54-71D6EA541497','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F7B66E3A-A4D3-5B2B-BC54-71D6EA541497','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F7B66E3A-A4D3-5B2B-BC54-71D6EA541497','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0B84E899-4A0B-5ED3-AE57-F3C21AD74449', 'sequence': {'long': 2183}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83093664}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0B84E899-4A0B-5ED3-AE57-F3C21AD74449','2183','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','83093664','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0B84E899-4A0B-5ED3-AE57-F3C21AD74449','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0B84E899-4A0B-5ED3-AE57-F3C21AD74449','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0B84E899-4A0B-5ED3-AE57-F3C21AD74449','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D92C9F35-EC98-5FEE-9946-4435AAE613E8', 'sequence': {'long': 2184}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D92C9F35-EC98-5FEE-9946-4435AAE613E8','2184','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D92C9F35-EC98-5FEE-9946-4435AAE613E8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D92C9F35-EC98-5FEE-9946-4435AAE613E8','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D92C9F35-EC98-5FEE-9946-4435AAE613E8','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E5AD0329-ADD8-58E4-9D5F-D00F1A30E4EA', 'sequence': {'long': 2185}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 83093792}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E5AD0329-ADD8-58E4-9D5F-D00F1A30E4EA','2185','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','83093792','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E5AD0329-ADD8-58E4-9D5F-D00F1A30E4EA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E5AD0329-ADD8-58E4-9D5F-D00F1A30E4EA','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E5AD0329-ADD8-58E4-9D5F-D00F1A30E4EA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A2E6C840-2961-5DAE-ADD3-0FE238C4170D', 'sequence': {'long': 2186}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A2E6C840-2961-5DAE-ADD3-0FE238C4170D','2186','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A2E6C840-2961-5DAE-ADD3-0FE238C4170D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A2E6C840-2961-5DAE-ADD3-0FE238C4170D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A2E6C840-2961-5DAE-ADD3-0FE238C4170D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '530049C9-F60E-53F1-9940-D5CA17842E49', 'sequence': {'long': 2187}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79369296}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'530049C9-F60E-53F1-9940-D5CA17842E49','2187','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','79369296','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'530049C9-F60E-53F1-9940-D5CA17842E49','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'530049C9-F60E-53F1-9940-D5CA17842E49','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'530049C9-F60E-53F1-9940-D5CA17842E49','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C7122CA1-8068-5943-AC58-A647190E8EC5', 'sequence': {'long': 2188}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C7122CA1-8068-5943-AC58-A647190E8EC5','2188','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C7122CA1-8068-5943-AC58-A647190E8EC5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C7122CA1-8068-5943-AC58-A647190E8EC5','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C7122CA1-8068-5943-AC58-A647190E8EC5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6F10658A-545D-547F-B7EC-D58335E2A613', 'sequence': {'long': 2189}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79369424}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6F10658A-545D-547F-B7EC-D58335E2A613','2189','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','79369424','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6F10658A-545D-547F-B7EC-D58335E2A613','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6F10658A-545D-547F-B7EC-D58335E2A613','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6F10658A-545D-547F-B7EC-D58335E2A613','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '134DC37B-9436-5D48-866D-1A68F841CC28', 'sequence': {'long': 2190}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'134DC37B-9436-5D48-866D-1A68F841CC28','2190','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'134DC37B-9436-5D48-866D-1A68F841CC28','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'134DC37B-9436-5D48-866D-1A68F841CC28','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'134DC37B-9436-5D48-866D-1A68F841CC28','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D29DFF39-49DB-5AAD-9BC5-7BC429AF01E8', 'sequence': {'long': 2191}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81963168}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D29DFF39-49DB-5AAD-9BC5-7BC429AF01E8','2191','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','81963168','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D29DFF39-49DB-5AAD-9BC5-7BC429AF01E8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D29DFF39-49DB-5AAD-9BC5-7BC429AF01E8','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D29DFF39-49DB-5AAD-9BC5-7BC429AF01E8','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C2E58756-808C-5A9F-92F6-4DBBE4CEBCB6', 'sequence': {'long': 2192}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C2E58756-808C-5A9F-92F6-4DBBE4CEBCB6','2192','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C2E58756-808C-5A9F-92F6-4DBBE4CEBCB6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C2E58756-808C-5A9F-92F6-4DBBE4CEBCB6','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C2E58756-808C-5A9F-92F6-4DBBE4CEBCB6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FD29EC0F-90A5-5479-8E74-819806B89A1F', 'sequence': {'long': 2193}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 81963296}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FD29EC0F-90A5-5479-8E74-819806B89A1F','2193','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','81963296','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FD29EC0F-90A5-5479-8E74-819806B89A1F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FD29EC0F-90A5-5479-8E74-819806B89A1F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FD29EC0F-90A5-5479-8E74-819806B89A1F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2A01DFC6-F7A9-5F08-A129-BDE285BB6285', 'sequence': {'long': 2194}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2A01DFC6-F7A9-5F08-A129-BDE285BB6285','2194','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2A01DFC6-F7A9-5F08-A129-BDE285BB6285','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2A01DFC6-F7A9-5F08-A129-BDE285BB6285','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2A01DFC6-F7A9-5F08-A129-BDE285BB6285','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B61176BA-903C-54E8-B8BD-52DADE66E3B9', 'sequence': {'long': 2195}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79856720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B61176BA-903C-54E8-B8BD-52DADE66E3B9','2195','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','79856720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B61176BA-903C-54E8-B8BD-52DADE66E3B9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B61176BA-903C-54E8-B8BD-52DADE66E3B9','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B61176BA-903C-54E8-B8BD-52DADE66E3B9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '16BBB3D5-67BA-57A9-9E95-F07B4236677A', 'sequence': {'long': 2196}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'16BBB3D5-67BA-57A9-9E95-F07B4236677A','2196','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'16BBB3D5-67BA-57A9-9E95-F07B4236677A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'16BBB3D5-67BA-57A9-9E95-F07B4236677A','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'16BBB3D5-67BA-57A9-9E95-F07B4236677A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4D7FAE99-9CC8-5DDF-BD49-AD2E630A01A6', 'sequence': {'long': 2197}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79856848}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4D7FAE99-9CC8-5DDF-BD49-AD2E630A01A6','2197','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','79856848','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4D7FAE99-9CC8-5DDF-BD49-AD2E630A01A6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4D7FAE99-9CC8-5DDF-BD49-AD2E630A01A6','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4D7FAE99-9CC8-5DDF-BD49-AD2E630A01A6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D417AFDB-AB9D-5FDF-92C2-1E9FC4CCD03C', 'sequence': {'long': 2198}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D417AFDB-AB9D-5FDF-92C2-1E9FC4CCD03C','2198','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D417AFDB-AB9D-5FDF-92C2-1E9FC4CCD03C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D417AFDB-AB9D-5FDF-92C2-1E9FC4CCD03C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D417AFDB-AB9D-5FDF-92C2-1E9FC4CCD03C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9B0FEE99-247A-5A33-9AD0-65C9425700B0', 'sequence': {'long': 2199}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79857824}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9B0FEE99-247A-5A33-9AD0-65C9425700B0','2199','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','79857824','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9B0FEE99-247A-5A33-9AD0-65C9425700B0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9B0FEE99-247A-5A33-9AD0-65C9425700B0','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9B0FEE99-247A-5A33-9AD0-65C9425700B0','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0156AA7D-0D9E-5893-933B-589548301D2F', 'sequence': {'long': 2200}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0156AA7D-0D9E-5893-933B-589548301D2F','2200','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0156AA7D-0D9E-5893-933B-589548301D2F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0156AA7D-0D9E-5893-933B-589548301D2F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0156AA7D-0D9E-5893-933B-589548301D2F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EA01018E-5C55-5BC7-8A6A-D9392B65454D', 'sequence': {'long': 2201}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79857952}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EA01018E-5C55-5BC7-8A6A-D9392B65454D','2201','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','79857952','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EA01018E-5C55-5BC7-8A6A-D9392B65454D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EA01018E-5C55-5BC7-8A6A-D9392B65454D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EA01018E-5C55-5BC7-8A6A-D9392B65454D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '09AC87B3-CCAD-5BDD-8218-BCD0F5D98C91', 'sequence': {'long': 2202}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'09AC87B3-CCAD-5BDD-8218-BCD0F5D98C91','2202','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'09AC87B3-CCAD-5BDD-8218-BCD0F5D98C91','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'09AC87B3-CCAD-5BDD-8218-BCD0F5D98C91','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'09AC87B3-CCAD-5BDD-8218-BCD0F5D98C91','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '36D79CF2-BFC7-5226-8D06-F4400BC094D4', 'sequence': {'long': 2203}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79859712}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'36D79CF2-BFC7-5226-8D06-F4400BC094D4','2203','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','79859712','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'36D79CF2-BFC7-5226-8D06-F4400BC094D4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'36D79CF2-BFC7-5226-8D06-F4400BC094D4','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'36D79CF2-BFC7-5226-8D06-F4400BC094D4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D0A05EA1-EA46-5565-A913-40F4BC7C70E2', 'sequence': {'long': 2204}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D0A05EA1-EA46-5565-A913-40F4BC7C70E2','2204','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D0A05EA1-EA46-5565-A913-40F4BC7C70E2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D0A05EA1-EA46-5565-A913-40F4BC7C70E2','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D0A05EA1-EA46-5565-A913-40F4BC7C70E2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D322A3C4-A67A-5126-A323-C19125A993D7', 'sequence': {'long': 2205}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79859840}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D322A3C4-A67A-5126-A323-C19125A993D7','2205','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','79859840','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D322A3C4-A67A-5126-A323-C19125A993D7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D322A3C4-A67A-5126-A323-C19125A993D7','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D322A3C4-A67A-5126-A323-C19125A993D7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A8950018-9A23-5716-B940-8433A85E9468', 'sequence': {'long': 2206}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A8950018-9A23-5716-B940-8433A85E9468','2206','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706926993350205','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A8950018-9A23-5716-B940-8433A85E9468','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A8950018-9A23-5716-B940-8433A85E9468','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A8950018-9A23-5716-B940-8433A85E9468','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DD4D3FCF-A0F6-5D94-AEFA-7B540AC31C80', 'sequence': {'long': 2207}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706926993350205, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79860816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DD4D3FCF-A0F6-5D94-AEFA-7B540AC31C80','2207','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706926993350205','aue_lseek','79860816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DD4D3FCF-A0F6-5D94-AEFA-7B540AC31C80','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DD4D3FCF-A0F6-5D94-AEFA-7B540AC31C80','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DD4D3FCF-A0F6-5D94-AEFA-7B540AC31C80','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '13204532-E187-5458-AC4B-691DBCFCF854', 'sequence': {'long': 2208}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'13204532-E187-5458-AC4B-691DBCFCF854','2208','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'13204532-E187-5458-AC4B-691DBCFCF854','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'13204532-E187-5458-AC4B-691DBCFCF854','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'13204532-E187-5458-AC4B-691DBCFCF854','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8116000E-4230-58CF-BFD6-F26E94A262FE', 'sequence': {'long': 2209}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79860944}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8116000E-4230-58CF-BFD6-F26E94A262FE','2209','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79860944','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8116000E-4230-58CF-BFD6-F26E94A262FE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8116000E-4230-58CF-BFD6-F26E94A262FE','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8116000E-4230-58CF-BFD6-F26E94A262FE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E4D4B720-81A2-50F3-8789-4FC3F026CA19', 'sequence': {'long': 2210}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E4D4B720-81A2-50F3-8789-4FC3F026CA19','2210','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E4D4B720-81A2-50F3-8789-4FC3F026CA19','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E4D4B720-81A2-50F3-8789-4FC3F026CA19','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E4D4B720-81A2-50F3-8789-4FC3F026CA19','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D99BFE6F-56E5-516B-9AFE-F5ACDB6D3D4C', 'sequence': {'long': 2211}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79861920}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D99BFE6F-56E5-516B-9AFE-F5ACDB6D3D4C','2211','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79861920','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D99BFE6F-56E5-516B-9AFE-F5ACDB6D3D4C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D99BFE6F-56E5-516B-9AFE-F5ACDB6D3D4C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D99BFE6F-56E5-516B-9AFE-F5ACDB6D3D4C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '16888E87-0B6E-5513-9DC1-EF12B883A397', 'sequence': {'long': 2212}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'16888E87-0B6E-5513-9DC1-EF12B883A397','2212','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'16888E87-0B6E-5513-9DC1-EF12B883A397','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'16888E87-0B6E-5513-9DC1-EF12B883A397','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'16888E87-0B6E-5513-9DC1-EF12B883A397','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8D30AAB4-0CBC-5F1C-BBE5-89673801E918', 'sequence': {'long': 2213}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79862048}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8D30AAB4-0CBC-5F1C-BBE5-89673801E918','2213','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79862048','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8D30AAB4-0CBC-5F1C-BBE5-89673801E918','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8D30AAB4-0CBC-5F1C-BBE5-89673801E918','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8D30AAB4-0CBC-5F1C-BBE5-89673801E918','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7583E338-FA46-54A0-8C52-2A275D21D268', 'sequence': {'long': 2214}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7583E338-FA46-54A0-8C52-2A275D21D268','2214','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7583E338-FA46-54A0-8C52-2A275D21D268','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7583E338-FA46-54A0-8C52-2A275D21D268','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7583E338-FA46-54A0-8C52-2A275D21D268','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2D6C0F1D-FEC8-544F-A345-E5C153B86B06', 'sequence': {'long': 2215}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79863808}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2D6C0F1D-FEC8-544F-A345-E5C153B86B06','2215','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79863808','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2D6C0F1D-FEC8-544F-A345-E5C153B86B06','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2D6C0F1D-FEC8-544F-A345-E5C153B86B06','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2D6C0F1D-FEC8-544F-A345-E5C153B86B06','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E25C9988-8576-5A77-81FA-165B3C23FC9A', 'sequence': {'long': 2216}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E25C9988-8576-5A77-81FA-165B3C23FC9A','2216','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E25C9988-8576-5A77-81FA-165B3C23FC9A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E25C9988-8576-5A77-81FA-165B3C23FC9A','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E25C9988-8576-5A77-81FA-165B3C23FC9A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F4F01EC6-1061-5EBC-9AD9-29BDAB355D75', 'sequence': {'long': 2217}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79863936}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F4F01EC6-1061-5EBC-9AD9-29BDAB355D75','2217','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79863936','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F4F01EC6-1061-5EBC-9AD9-29BDAB355D75','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F4F01EC6-1061-5EBC-9AD9-29BDAB355D75','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F4F01EC6-1061-5EBC-9AD9-29BDAB355D75','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EC5CDA53-EBEB-55B3-A8C7-C23E9760D6C1', 'sequence': {'long': 2218}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EC5CDA53-EBEB-55B3-A8C7-C23E9760D6C1','2218','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EC5CDA53-EBEB-55B3-A8C7-C23E9760D6C1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EC5CDA53-EBEB-55B3-A8C7-C23E9760D6C1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EC5CDA53-EBEB-55B3-A8C7-C23E9760D6C1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '92C31007-A1A3-5FD8-B55B-5E8C3D1C4156', 'sequence': {'long': 2219}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79864912}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'92C31007-A1A3-5FD8-B55B-5E8C3D1C4156','2219','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79864912','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'92C31007-A1A3-5FD8-B55B-5E8C3D1C4156','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'92C31007-A1A3-5FD8-B55B-5E8C3D1C4156','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'92C31007-A1A3-5FD8-B55B-5E8C3D1C4156','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C6B3255F-D627-5F83-A840-49F369C270EE', 'sequence': {'long': 2220}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C6B3255F-D627-5F83-A840-49F369C270EE','2220','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C6B3255F-D627-5F83-A840-49F369C270EE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C6B3255F-D627-5F83-A840-49F369C270EE','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C6B3255F-D627-5F83-A840-49F369C270EE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '04283BB4-636F-59A0-A35E-6D73D939273A', 'sequence': {'long': 2221}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79865040}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'04283BB4-636F-59A0-A35E-6D73D939273A','2221','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79865040','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'04283BB4-636F-59A0-A35E-6D73D939273A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'04283BB4-636F-59A0-A35E-6D73D939273A','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'04283BB4-636F-59A0-A35E-6D73D939273A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F98654D6-3914-5120-A21E-41BCE421AE2A', 'sequence': {'long': 2222}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F98654D6-3914-5120-A21E-41BCE421AE2A','2222','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F98654D6-3914-5120-A21E-41BCE421AE2A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F98654D6-3914-5120-A21E-41BCE421AE2A','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F98654D6-3914-5120-A21E-41BCE421AE2A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '387CFCC7-FC47-5F47-A4E6-F0DB99BDC34F', 'sequence': {'long': 2223}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79866016}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'387CFCC7-FC47-5F47-A4E6-F0DB99BDC34F','2223','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79866016','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'387CFCC7-FC47-5F47-A4E6-F0DB99BDC34F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'387CFCC7-FC47-5F47-A4E6-F0DB99BDC34F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'387CFCC7-FC47-5F47-A4E6-F0DB99BDC34F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F68464C1-E5E8-5478-BDF0-3B56FDD9F0A3', 'sequence': {'long': 2224}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F68464C1-E5E8-5478-BDF0-3B56FDD9F0A3','2224','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F68464C1-E5E8-5478-BDF0-3B56FDD9F0A3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F68464C1-E5E8-5478-BDF0-3B56FDD9F0A3','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F68464C1-E5E8-5478-BDF0-3B56FDD9F0A3','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FB273877-060F-5E2D-A675-0B2984FFC7E5', 'sequence': {'long': 2225}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79866144}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FB273877-060F-5E2D-A675-0B2984FFC7E5','2225','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79866144','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FB273877-060F-5E2D-A675-0B2984FFC7E5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FB273877-060F-5E2D-A675-0B2984FFC7E5','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FB273877-060F-5E2D-A675-0B2984FFC7E5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CC8BF911-5662-59D6-8CDA-345BAD60BA8C', 'sequence': {'long': 2226}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CC8BF911-5662-59D6-8CDA-345BAD60BA8C','2226','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CC8BF911-5662-59D6-8CDA-345BAD60BA8C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CC8BF911-5662-59D6-8CDA-345BAD60BA8C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'CC8BF911-5662-59D6-8CDA-345BAD60BA8C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B63B0E92-963D-565D-9D8F-E45CDC76B3B8', 'sequence': {'long': 2227}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79370400}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B63B0E92-963D-565D-9D8F-E45CDC76B3B8','2227','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79370400','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B63B0E92-963D-565D-9D8F-E45CDC76B3B8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B63B0E92-963D-565D-9D8F-E45CDC76B3B8','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B63B0E92-963D-565D-9D8F-E45CDC76B3B8','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5EEF9C20-2D61-5385-A98C-9C2E64297C5C', 'sequence': {'long': 2228}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5EEF9C20-2D61-5385-A98C-9C2E64297C5C','2228','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5EEF9C20-2D61-5385-A98C-9C2E64297C5C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5EEF9C20-2D61-5385-A98C-9C2E64297C5C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5EEF9C20-2D61-5385-A98C-9C2E64297C5C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4C8A3323-A5A0-50D5-8079-A87A9D17BC4F', 'sequence': {'long': 2229}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79370528}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4C8A3323-A5A0-50D5-8079-A87A9D17BC4F','2229','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79370528','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4C8A3323-A5A0-50D5-8079-A87A9D17BC4F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4C8A3323-A5A0-50D5-8079-A87A9D17BC4F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4C8A3323-A5A0-50D5-8079-A87A9D17BC4F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '501E24C3-66B0-5F59-84B9-C9956313B06C', 'sequence': {'long': 2230}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'501E24C3-66B0-5F59-84B9-C9956313B06C','2230','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'501E24C3-66B0-5F59-84B9-C9956313B06C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'501E24C3-66B0-5F59-84B9-C9956313B06C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'501E24C3-66B0-5F59-84B9-C9956313B06C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '50990847-B144-5415-94DB-4131B64380EE', 'sequence': {'long': 2231}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79372288}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'50990847-B144-5415-94DB-4131B64380EE','2231','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79372288','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'50990847-B144-5415-94DB-4131B64380EE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'50990847-B144-5415-94DB-4131B64380EE','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'50990847-B144-5415-94DB-4131B64380EE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B867333A-BB11-5B8B-B005-8454D34F1879', 'sequence': {'long': 2232}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B867333A-BB11-5B8B-B005-8454D34F1879','2232','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B867333A-BB11-5B8B-B005-8454D34F1879','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B867333A-BB11-5B8B-B005-8454D34F1879','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B867333A-BB11-5B8B-B005-8454D34F1879','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FBE0F5A5-F03C-5533-BFDD-2769AF677E01', 'sequence': {'long': 2233}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79372416}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FBE0F5A5-F03C-5533-BFDD-2769AF677E01','2233','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79372416','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FBE0F5A5-F03C-5533-BFDD-2769AF677E01','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FBE0F5A5-F03C-5533-BFDD-2769AF677E01','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FBE0F5A5-F03C-5533-BFDD-2769AF677E01','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6E58BAAF-FA20-5854-98B2-36F86A37C2D0', 'sequence': {'long': 2234}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6E58BAAF-FA20-5854-98B2-36F86A37C2D0','2234','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6E58BAAF-FA20-5854-98B2-36F86A37C2D0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6E58BAAF-FA20-5854-98B2-36F86A37C2D0','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6E58BAAF-FA20-5854-98B2-36F86A37C2D0','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B8F88CFE-3B3C-59D2-AD66-BE647DFB05CC', 'sequence': {'long': 2235}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79373392}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B8F88CFE-3B3C-59D2-AD66-BE647DFB05CC','2235','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79373392','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B8F88CFE-3B3C-59D2-AD66-BE647DFB05CC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B8F88CFE-3B3C-59D2-AD66-BE647DFB05CC','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B8F88CFE-3B3C-59D2-AD66-BE647DFB05CC','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F4D3A374-4984-5ED2-83CD-33CA9EF59585', 'sequence': {'long': 2236}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F4D3A374-4984-5ED2-83CD-33CA9EF59585','2236','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F4D3A374-4984-5ED2-83CD-33CA9EF59585','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F4D3A374-4984-5ED2-83CD-33CA9EF59585','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F4D3A374-4984-5ED2-83CD-33CA9EF59585','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5F74075F-0519-5C1C-B873-8E5E0EBCAB48', 'sequence': {'long': 2237}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79373520}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5F74075F-0519-5C1C-B873-8E5E0EBCAB48','2237','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927003352395','aue_lseek','79373520','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5F74075F-0519-5C1C-B873-8E5E0EBCAB48','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5F74075F-0519-5C1C-B873-8E5E0EBCAB48','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5F74075F-0519-5C1C-B873-8E5E0EBCAB48','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '367FC23E-168C-51A3-8C0C-C159EED9ACFA', 'sequence': {'long': 2238}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927003352395, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'367FC23E-168C-51A3-8C0C-C159EED9ACFA','2238','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927003352395','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'367FC23E-168C-51A3-8C0C-C159EED9ACFA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'367FC23E-168C-51A3-8C0C-C159EED9ACFA','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'367FC23E-168C-51A3-8C0C-C159EED9ACFA','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2B81125E-667A-51E9-AD1F-BA575479783B', 'sequence': {'long': 2239}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79374496}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2B81125E-667A-51E9-AD1F-BA575479783B','2239','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','79374496','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2B81125E-667A-51E9-AD1F-BA575479783B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2B81125E-667A-51E9-AD1F-BA575479783B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2B81125E-667A-51E9-AD1F-BA575479783B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9E76A2D7-5D9A-56A8-A9C8-5B41866E8EC5', 'sequence': {'long': 2240}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9E76A2D7-5D9A-56A8-A9C8-5B41866E8EC5','2240','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9E76A2D7-5D9A-56A8-A9C8-5B41866E8EC5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9E76A2D7-5D9A-56A8-A9C8-5B41866E8EC5','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9E76A2D7-5D9A-56A8-A9C8-5B41866E8EC5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4DC7D8EF-0C76-551B-ABFC-7276B3E55C2C', 'sequence': {'long': 2241}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 79374624}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4DC7D8EF-0C76-551B-ABFC-7276B3E55C2C','2241','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','79374624','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4DC7D8EF-0C76-551B-ABFC-7276B3E55C2C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4DC7D8EF-0C76-551B-ABFC-7276B3E55C2C','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4DC7D8EF-0C76-551B-ABFC-7276B3E55C2C','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '50891A22-9925-5E90-87C7-58D58FC71617', 'sequence': {'long': 2242}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'50891A22-9925-5E90-87C7-58D58FC71617','2242','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'50891A22-9925-5E90-87C7-58D58FC71617','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'50891A22-9925-5E90-87C7-58D58FC71617','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'50891A22-9925-5E90-87C7-58D58FC71617','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3FFE7E5E-FB22-5487-9139-C08F7150584E', 'sequence': {'long': 2243}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59824288}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3FFE7E5E-FB22-5487-9139-C08F7150584E','2243','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','59824288','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3FFE7E5E-FB22-5487-9139-C08F7150584E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3FFE7E5E-FB22-5487-9139-C08F7150584E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3FFE7E5E-FB22-5487-9139-C08F7150584E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '05BAAC32-32A8-5C91-B9CC-C86DFBDF1CF1', 'sequence': {'long': 2244}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'05BAAC32-32A8-5C91-B9CC-C86DFBDF1CF1','2244','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'05BAAC32-32A8-5C91-B9CC-C86DFBDF1CF1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'05BAAC32-32A8-5C91-B9CC-C86DFBDF1CF1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'05BAAC32-32A8-5C91-B9CC-C86DFBDF1CF1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3A287809-76B2-5424-865F-4764DC033B51', 'sequence': {'long': 2245}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 59824416}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3A287809-76B2-5424-865F-4764DC033B51','2245','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','59824416','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3A287809-76B2-5424-865F-4764DC033B51','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3A287809-76B2-5424-865F-4764DC033B51','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3A287809-76B2-5424-865F-4764DC033B51','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B1562B27-9480-5CAD-9178-469807577F48', 'sequence': {'long': 2246}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B1562B27-9480-5CAD-9178-469807577F48','2246','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B1562B27-9480-5CAD-9178-469807577F48','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B1562B27-9480-5CAD-9178-469807577F48','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B1562B27-9480-5CAD-9178-469807577F48','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BE589266-9BA1-5308-B138-7F08B154F9C0', 'sequence': {'long': 2247}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56430592}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BE589266-9BA1-5308-B138-7F08B154F9C0','2247','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56430592','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BE589266-9BA1-5308-B138-7F08B154F9C0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BE589266-9BA1-5308-B138-7F08B154F9C0','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BE589266-9BA1-5308-B138-7F08B154F9C0','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '975DE7FC-41AE-53F1-8B96-ECABF3F2E9E1', 'sequence': {'long': 2248}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'975DE7FC-41AE-53F1-8B96-ECABF3F2E9E1','2248','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'975DE7FC-41AE-53F1-8B96-ECABF3F2E9E1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'975DE7FC-41AE-53F1-8B96-ECABF3F2E9E1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'975DE7FC-41AE-53F1-8B96-ECABF3F2E9E1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E9C7ADC8-42C0-5ACE-8880-CC4A011E149D', 'sequence': {'long': 2249}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56430720}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E9C7ADC8-42C0-5ACE-8880-CC4A011E149D','2249','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56430720','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E9C7ADC8-42C0-5ACE-8880-CC4A011E149D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E9C7ADC8-42C0-5ACE-8880-CC4A011E149D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E9C7ADC8-42C0-5ACE-8880-CC4A011E149D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7FEF2164-5492-5E03-9CD0-E29054C8DB51', 'sequence': {'long': 2250}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7FEF2164-5492-5E03-9CD0-E29054C8DB51','2250','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7FEF2164-5492-5E03-9CD0-E29054C8DB51','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7FEF2164-5492-5E03-9CD0-E29054C8DB51','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7FEF2164-5492-5E03-9CD0-E29054C8DB51','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '939965AC-2C5D-510C-A323-877375C004B2', 'sequence': {'long': 2251}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56431696}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'939965AC-2C5D-510C-A323-877375C004B2','2251','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56431696','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'939965AC-2C5D-510C-A323-877375C004B2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'939965AC-2C5D-510C-A323-877375C004B2','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'939965AC-2C5D-510C-A323-877375C004B2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '675D1190-86CF-5931-BBBB-03DF44C401CD', 'sequence': {'long': 2252}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'675D1190-86CF-5931-BBBB-03DF44C401CD','2252','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'675D1190-86CF-5931-BBBB-03DF44C401CD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'675D1190-86CF-5931-BBBB-03DF44C401CD','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'675D1190-86CF-5931-BBBB-03DF44C401CD','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F9840FD5-2654-5294-9692-1B28AC5547E4', 'sequence': {'long': 2253}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56431824}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F9840FD5-2654-5294-9692-1B28AC5547E4','2253','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56431824','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F9840FD5-2654-5294-9692-1B28AC5547E4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F9840FD5-2654-5294-9692-1B28AC5547E4','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F9840FD5-2654-5294-9692-1B28AC5547E4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5AF5AC1A-2427-5005-B5C3-855CC49D40B2', 'sequence': {'long': 2254}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5AF5AC1A-2427-5005-B5C3-855CC49D40B2','2254','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5AF5AC1A-2427-5005-B5C3-855CC49D40B2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5AF5AC1A-2427-5005-B5C3-855CC49D40B2','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5AF5AC1A-2427-5005-B5C3-855CC49D40B2','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4032189C-C1ED-5EFB-88A4-503FEC5A937F', 'sequence': {'long': 2255}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56432800}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4032189C-C1ED-5EFB-88A4-503FEC5A937F','2255','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56432800','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4032189C-C1ED-5EFB-88A4-503FEC5A937F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4032189C-C1ED-5EFB-88A4-503FEC5A937F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4032189C-C1ED-5EFB-88A4-503FEC5A937F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4F3E5975-6162-524E-98B0-FF37B15525C1', 'sequence': {'long': 2256}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4F3E5975-6162-524E-98B0-FF37B15525C1','2256','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4F3E5975-6162-524E-98B0-FF37B15525C1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4F3E5975-6162-524E-98B0-FF37B15525C1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4F3E5975-6162-524E-98B0-FF37B15525C1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '90A4BCB5-5664-5B8E-9A0A-32BF3A44E3FE', 'sequence': {'long': 2257}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56432928}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'90A4BCB5-5664-5B8E-9A0A-32BF3A44E3FE','2257','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56432928','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'90A4BCB5-5664-5B8E-9A0A-32BF3A44E3FE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'90A4BCB5-5664-5B8E-9A0A-32BF3A44E3FE','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'90A4BCB5-5664-5B8E-9A0A-32BF3A44E3FE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '465AEFF3-EA42-5973-97F0-323E21DCF8FD', 'sequence': {'long': 2258}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'465AEFF3-EA42-5973-97F0-323E21DCF8FD','2258','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'465AEFF3-EA42-5973-97F0-323E21DCF8FD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'465AEFF3-EA42-5973-97F0-323E21DCF8FD','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'465AEFF3-EA42-5973-97F0-323E21DCF8FD','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AEF68B78-41D5-557D-B943-FE1E652E45F1', 'sequence': {'long': 2259}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56434688}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AEF68B78-41D5-557D-B943-FE1E652E45F1','2259','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56434688','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AEF68B78-41D5-557D-B943-FE1E652E45F1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AEF68B78-41D5-557D-B943-FE1E652E45F1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AEF68B78-41D5-557D-B943-FE1E652E45F1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '849C3F13-B88A-5EE7-B505-9DC1F6BEB1DD', 'sequence': {'long': 2260}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'849C3F13-B88A-5EE7-B505-9DC1F6BEB1DD','2260','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'849C3F13-B88A-5EE7-B505-9DC1F6BEB1DD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'849C3F13-B88A-5EE7-B505-9DC1F6BEB1DD','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'849C3F13-B88A-5EE7-B505-9DC1F6BEB1DD','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2AE42829-4438-58ED-8A02-181AA5B06DF6', 'sequence': {'long': 2261}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56434816}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2AE42829-4438-58ED-8A02-181AA5B06DF6','2261','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56434816','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2AE42829-4438-58ED-8A02-181AA5B06DF6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2AE42829-4438-58ED-8A02-181AA5B06DF6','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2AE42829-4438-58ED-8A02-181AA5B06DF6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B44AAD09-0DBD-5A2C-9D9F-96519F25556E', 'sequence': {'long': 2262}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B44AAD09-0DBD-5A2C-9D9F-96519F25556E','2262','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B44AAD09-0DBD-5A2C-9D9F-96519F25556E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B44AAD09-0DBD-5A2C-9D9F-96519F25556E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B44AAD09-0DBD-5A2C-9D9F-96519F25556E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BABF8ADF-E872-5043-BA07-CCB51F00F053', 'sequence': {'long': 2263}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56435792}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BABF8ADF-E872-5043-BA07-CCB51F00F053','2263','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56435792','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BABF8ADF-E872-5043-BA07-CCB51F00F053','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BABF8ADF-E872-5043-BA07-CCB51F00F053','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BABF8ADF-E872-5043-BA07-CCB51F00F053','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C0C81062-550F-5087-97BF-9C090A45709A', 'sequence': {'long': 2264}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C0C81062-550F-5087-97BF-9C090A45709A','2264','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C0C81062-550F-5087-97BF-9C090A45709A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C0C81062-550F-5087-97BF-9C090A45709A','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C0C81062-550F-5087-97BF-9C090A45709A','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D81D9C4A-04F8-5DD7-8D80-CCF3ABCC52FE', 'sequence': {'long': 2265}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56435920}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D81D9C4A-04F8-5DD7-8D80-CCF3ABCC52FE','2265','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56435920','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D81D9C4A-04F8-5DD7-8D80-CCF3ABCC52FE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D81D9C4A-04F8-5DD7-8D80-CCF3ABCC52FE','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D81D9C4A-04F8-5DD7-8D80-CCF3ABCC52FE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9739B85B-117E-576B-8F8E-9151F02EA347', 'sequence': {'long': 2266}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9739B85B-117E-576B-8F8E-9151F02EA347','2266','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9739B85B-117E-576B-8F8E-9151F02EA347','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9739B85B-117E-576B-8F8E-9151F02EA347','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9739B85B-117E-576B-8F8E-9151F02EA347','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A1816841-F4E0-557C-A3EF-7BF8AD3753D1', 'sequence': {'long': 2267}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56436896}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A1816841-F4E0-557C-A3EF-7BF8AD3753D1','2267','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56436896','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A1816841-F4E0-557C-A3EF-7BF8AD3753D1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A1816841-F4E0-557C-A3EF-7BF8AD3753D1','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A1816841-F4E0-557C-A3EF-7BF8AD3753D1','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C6787F99-7321-5D73-A0AD-9634773A9F9F', 'sequence': {'long': 2268}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C6787F99-7321-5D73-A0AD-9634773A9F9F','2268','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927013350216','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C6787F99-7321-5D73-A0AD-9634773A9F9F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C6787F99-7321-5D73-A0AD-9634773A9F9F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C6787F99-7321-5D73-A0AD-9634773A9F9F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '23CAC4FE-C874-5CEA-B8B5-3216E4EFC20F', 'sequence': {'long': 2269}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927013350216, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56437024}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'23CAC4FE-C874-5CEA-B8B5-3216E4EFC20F','2269','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927013350216','aue_lseek','56437024','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'23CAC4FE-C874-5CEA-B8B5-3216E4EFC20F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'23CAC4FE-C874-5CEA-B8B5-3216E4EFC20F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'23CAC4FE-C874-5CEA-B8B5-3216E4EFC20F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C867F6CB-DF33-5B3C-A094-4838B85A1ECE', 'sequence': {'long': 2270}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C867F6CB-DF33-5B3C-A094-4838B85A1ECE','2270','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927023354916','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C867F6CB-DF33-5B3C-A094-4838B85A1ECE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C867F6CB-DF33-5B3C-A094-4838B85A1ECE','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C867F6CB-DF33-5B3C-A094-4838B85A1ECE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '97CD3794-BE66-56F2-9A13-364A01FE5ABE', 'sequence': {'long': 2271}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56438784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'97CD3794-BE66-56F2-9A13-364A01FE5ABE','2271','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927023354916','aue_lseek','56438784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'97CD3794-BE66-56F2-9A13-364A01FE5ABE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'97CD3794-BE66-56F2-9A13-364A01FE5ABE','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'97CD3794-BE66-56F2-9A13-364A01FE5ABE','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3ADCA0C2-A919-5169-B6A4-DCCBEA9BE26F', 'sequence': {'long': 2272}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3ADCA0C2-A919-5169-B6A4-DCCBEA9BE26F','2272','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927023354916','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3ADCA0C2-A919-5169-B6A4-DCCBEA9BE26F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3ADCA0C2-A919-5169-B6A4-DCCBEA9BE26F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3ADCA0C2-A919-5169-B6A4-DCCBEA9BE26F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '75F2A5A2-73BC-518D-BD5E-CBA14F4B76D4', 'sequence': {'long': 2273}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56438912}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'75F2A5A2-73BC-518D-BD5E-CBA14F4B76D4','2273','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927023354916','aue_lseek','56438912','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'75F2A5A2-73BC-518D-BD5E-CBA14F4B76D4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'75F2A5A2-73BC-518D-BD5E-CBA14F4B76D4','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'75F2A5A2-73BC-518D-BD5E-CBA14F4B76D4','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3A18C482-46B7-55A4-AF3D-B35FD80F52D7', 'sequence': {'long': 2274}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3A18C482-46B7-55A4-AF3D-B35FD80F52D7','2274','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927023354916','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3A18C482-46B7-55A4-AF3D-B35FD80F52D7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3A18C482-46B7-55A4-AF3D-B35FD80F52D7','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3A18C482-46B7-55A4-AF3D-B35FD80F52D7','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A9033E07-5C42-58F0-9D5D-A37380A86D77', 'sequence': {'long': 2275}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56439888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A9033E07-5C42-58F0-9D5D-A37380A86D77','2275','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927023354916','aue_lseek','56439888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A9033E07-5C42-58F0-9D5D-A37380A86D77','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A9033E07-5C42-58F0-9D5D-A37380A86D77','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A9033E07-5C42-58F0-9D5D-A37380A86D77','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7DC2B607-1D52-5641-BC4E-565396954777', 'sequence': {'long': 2276}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7DC2B607-1D52-5641-BC4E-565396954777','2276','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927023354916','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7DC2B607-1D52-5641-BC4E-565396954777','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7DC2B607-1D52-5641-BC4E-565396954777','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7DC2B607-1D52-5641-BC4E-565396954777','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3DB6BB33-F9DB-52C9-B6BC-14289B26A1F5', 'sequence': {'long': 2277}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56440016}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3DB6BB33-F9DB-52C9-B6BC-14289B26A1F5','2277','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927023354916','aue_lseek','56440016','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3DB6BB33-F9DB-52C9-B6BC-14289B26A1F5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3DB6BB33-F9DB-52C9-B6BC-14289B26A1F5','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3DB6BB33-F9DB-52C9-B6BC-14289B26A1F5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8271155E-7237-5846-BB70-E8F9235BC5A5', 'sequence': {'long': 2278}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8271155E-7237-5846-BB70-E8F9235BC5A5','2278','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927023354916','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8271155E-7237-5846-BB70-E8F9235BC5A5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8271155E-7237-5846-BB70-E8F9235BC5A5','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8271155E-7237-5846-BB70-E8F9235BC5A5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3CF13978-F9FF-5EF4-B2B7-871BDC5AD22B', 'sequence': {'long': 2279}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56440992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3CF13978-F9FF-5EF4-B2B7-871BDC5AD22B','2279','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927023354916','aue_lseek','56440992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3CF13978-F9FF-5EF4-B2B7-871BDC5AD22B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3CF13978-F9FF-5EF4-B2B7-871BDC5AD22B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3CF13978-F9FF-5EF4-B2B7-871BDC5AD22B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A4A02DE2-B754-59E8-BC9B-1636E3BFE40B', 'sequence': {'long': 2280}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A4A02DE2-B754-59E8-BC9B-1636E3BFE40B','2280','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927023354916','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A4A02DE2-B754-59E8-BC9B-1636E3BFE40B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A4A02DE2-B754-59E8-BC9B-1636E3BFE40B','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A4A02DE2-B754-59E8-BC9B-1636E3BFE40B','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DB0C5384-37A1-5D40-994F-EC17129194FF', 'sequence': {'long': 2281}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 56441120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DB0C5384-37A1-5D40-994F-EC17129194FF','2281','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927023354916','aue_lseek','56441120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DB0C5384-37A1-5D40-994F-EC17129194FF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DB0C5384-37A1-5D40-994F-EC17129194FF','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DB0C5384-37A1-5D40-994F-EC17129194FF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '97D5988C-FA23-55D0-8596-65D6476745A0', 'sequence': {'long': 2282}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'97D5988C-FA23-55D0-8596-65D6476745A0','2282','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927023354916','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'97D5988C-FA23-55D0-8596-65D6476745A0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'97D5988C-FA23-55D0-8596-65D6476745A0','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'97D5988C-FA23-55D0-8596-65D6476745A0','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7C7B61C4-0A3C-5A14-821E-090415C7C5EF', 'sequence': {'long': 2283}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55747664}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7C7B61C4-0A3C-5A14-821E-090415C7C5EF','2283','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927023354916','aue_lseek','55747664','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7C7B61C4-0A3C-5A14-821E-090415C7C5EF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7C7B61C4-0A3C-5A14-821E-090415C7C5EF','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7C7B61C4-0A3C-5A14-821E-090415C7C5EF','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6C7C905C-97BC-5F6A-AEFE-1CB5E54C2068', 'sequence': {'long': 2284}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6C7C905C-97BC-5F6A-AEFE-1CB5E54C2068','2284','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927023354916','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6C7C905C-97BC-5F6A-AEFE-1CB5E54C2068','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6C7C905C-97BC-5F6A-AEFE-1CB5E54C2068','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6C7C905C-97BC-5F6A-AEFE-1CB5E54C2068','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BAB4FCBF-2073-5504-BC58-F4BF43073BB6', 'sequence': {'long': 2285}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55747792}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BAB4FCBF-2073-5504-BC58-F4BF43073BB6','2285','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927023354916','aue_lseek','55747792','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BAB4FCBF-2073-5504-BC58-F4BF43073BB6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BAB4FCBF-2073-5504-BC58-F4BF43073BB6','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BAB4FCBF-2073-5504-BC58-F4BF43073BB6','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3B2555BE-8D1A-54AD-BAF9-C664E5EE74BD', 'sequence': {'long': 2286}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3B2555BE-8D1A-54AD-BAF9-C664E5EE74BD','2286','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927023354916','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3B2555BE-8D1A-54AD-BAF9-C664E5EE74BD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3B2555BE-8D1A-54AD-BAF9-C664E5EE74BD','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'3B2555BE-8D1A-54AD-BAF9-C664E5EE74BD','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D7C19FE9-7965-5889-9B65-7748257C5658', 'sequence': {'long': 2287}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927023354916, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55748768}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D7C19FE9-7965-5889-9B65-7748257C5658','2287','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927023354916','aue_lseek','55748768','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D7C19FE9-7965-5889-9B65-7748257C5658','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D7C19FE9-7965-5889-9B65-7748257C5658','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D7C19FE9-7965-5889-9B65-7748257C5658','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BD094A94-AC2D-5BBA-9719-7C35ECCF45F0', 'sequence': {'long': 2288}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BD094A94-AC2D-5BBA-9719-7C35ECCF45F0','2288','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927033349416','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BD094A94-AC2D-5BBA-9719-7C35ECCF45F0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BD094A94-AC2D-5BBA-9719-7C35ECCF45F0','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BD094A94-AC2D-5BBA-9719-7C35ECCF45F0','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6C2BABE4-78C8-58B2-8A02-20A7733AE31D', 'sequence': {'long': 2289}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55748896}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6C2BABE4-78C8-58B2-8A02-20A7733AE31D','2289','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927033349416','aue_lseek','55748896','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6C2BABE4-78C8-58B2-8A02-20A7733AE31D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6C2BABE4-78C8-58B2-8A02-20A7733AE31D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6C2BABE4-78C8-58B2-8A02-20A7733AE31D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A305F472-E33D-52CB-A687-9026167B26FD', 'sequence': {'long': 2290}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A305F472-E33D-52CB-A687-9026167B26FD','2290','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927033349416','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A305F472-E33D-52CB-A687-9026167B26FD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A305F472-E33D-52CB-A687-9026167B26FD','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A305F472-E33D-52CB-A687-9026167B26FD','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0BC66C83-AAEE-51DD-964D-C29F8E77E1BD', 'sequence': {'long': 2291}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55750656}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0BC66C83-AAEE-51DD-964D-C29F8E77E1BD','2291','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927033349416','aue_lseek','55750656','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0BC66C83-AAEE-51DD-964D-C29F8E77E1BD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0BC66C83-AAEE-51DD-964D-C29F8E77E1BD','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0BC66C83-AAEE-51DD-964D-C29F8E77E1BD','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '22ABC379-3EC3-5418-94BB-857A39714C19', 'sequence': {'long': 2292}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'22ABC379-3EC3-5418-94BB-857A39714C19','2292','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927033349416','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'22ABC379-3EC3-5418-94BB-857A39714C19','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'22ABC379-3EC3-5418-94BB-857A39714C19','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'22ABC379-3EC3-5418-94BB-857A39714C19','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '476E5FE1-2EA5-5A92-A88D-15555BCDEDD5', 'sequence': {'long': 2293}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55750784}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'476E5FE1-2EA5-5A92-A88D-15555BCDEDD5','2293','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927033349416','aue_lseek','55750784','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'476E5FE1-2EA5-5A92-A88D-15555BCDEDD5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'476E5FE1-2EA5-5A92-A88D-15555BCDEDD5','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'476E5FE1-2EA5-5A92-A88D-15555BCDEDD5','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '34F28200-6A69-5BEC-9970-BB03A38FA939', 'sequence': {'long': 2294}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'34F28200-6A69-5BEC-9970-BB03A38FA939','2294','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927033349416','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'34F28200-6A69-5BEC-9970-BB03A38FA939','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'34F28200-6A69-5BEC-9970-BB03A38FA939','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'34F28200-6A69-5BEC-9970-BB03A38FA939','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AA5F4926-27CE-5788-8CF6-16F9067E5690', 'sequence': {'long': 2295}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55751760}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AA5F4926-27CE-5788-8CF6-16F9067E5690','2295','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927033349416','aue_lseek','55751760','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AA5F4926-27CE-5788-8CF6-16F9067E5690','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AA5F4926-27CE-5788-8CF6-16F9067E5690','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AA5F4926-27CE-5788-8CF6-16F9067E5690','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B14CECA5-774F-5760-91CB-40A4FDF74C7F', 'sequence': {'long': 2296}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B14CECA5-774F-5760-91CB-40A4FDF74C7F','2296','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927033349416','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B14CECA5-774F-5760-91CB-40A4FDF74C7F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B14CECA5-774F-5760-91CB-40A4FDF74C7F','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B14CECA5-774F-5760-91CB-40A4FDF74C7F','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2ABE1991-497A-58DA-9C3D-116D6D296B79', 'sequence': {'long': 2297}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55751888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2ABE1991-497A-58DA-9C3D-116D6D296B79','2297','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927033349416','aue_lseek','55751888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2ABE1991-497A-58DA-9C3D-116D6D296B79','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2ABE1991-497A-58DA-9C3D-116D6D296B79','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2ABE1991-497A-58DA-9C3D-116D6D296B79','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B4982AE4-8130-541A-BDF2-9A28FF5AD860', 'sequence': {'long': 2298}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B4982AE4-8130-541A-BDF2-9A28FF5AD860','2298','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927033349416','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B4982AE4-8130-541A-BDF2-9A28FF5AD860','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B4982AE4-8130-541A-BDF2-9A28FF5AD860','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B4982AE4-8130-541A-BDF2-9A28FF5AD860','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '23F409EF-6EEF-5165-B8BA-86BED3EDBC1D', 'sequence': {'long': 2299}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55752864}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'23F409EF-6EEF-5165-B8BA-86BED3EDBC1D','2299','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927033349416','aue_lseek','55752864','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'23F409EF-6EEF-5165-B8BA-86BED3EDBC1D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'23F409EF-6EEF-5165-B8BA-86BED3EDBC1D','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'23F409EF-6EEF-5165-B8BA-86BED3EDBC1D','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4C09D994-CAB0-5836-AFF9-4DC70145A262', 'sequence': {'long': 2300}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 120}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4C09D994-CAB0-5836-AFF9-4DC70145A262','2300','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927033349416','aue_read','120','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4C09D994-CAB0-5836-AFF9-4DC70145A262','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4C09D994-CAB0-5836-AFF9-4DC70145A262','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4C09D994-CAB0-5836-AFF9-4DC70145A262','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E6F880D6-08F0-5A74-9B20-BB8BFA1B64B9', 'sequence': {'long': 2301}, 'type': 'EVENT_LSEEK', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_lseek'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 55752992}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E6F880D6-08F0-5A74-9B20-BB8BFA1B64B9','2301','EVENT_LSEEK','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','1522706927033349416','aue_lseek','55752992','83c8ed1f-5045-dbcd-b39f-918f0df4f851','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E6F880D6-08F0-5A74-9B20-BB8BFA1B64B9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E6F880D6-08F0-5A74-9B20-BB8BFA1B64B9','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E6F880D6-08F0-5A74-9B20-BB8BFA1B64B9','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B6636FC1-DD59-5104-8580-46E9DF819D3E', 'sequence': {'long': 2302}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C51AAE3-0594-4A51-9405-4FC4214A0041'}, 'predicateObjectPath': {'string': '/dev/kmem'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/kmem', 'fd': '4', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B6636FC1-DD59-5104-8580-46E9DF819D3E','2302','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','0C51AAE3-0594-4A51-9405-4FC4214A0041','/dev/kmem','1522706927033349416','aue_read','8','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/kmem','4','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B6636FC1-DD59-5104-8580-46E9DF819D3E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B6636FC1-DD59-5104-8580-46E9DF819D3E','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B6636FC1-DD59-5104-8580-46E9DF819D3E','0C51AAE3-0594-4A51-9405-4FC4214A0041','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '500CEF45-EA34-5E92-996F-47EF61787F03', 'sequence': {'long': 2303}, 'type': 'EVENT_EXIT', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A42338C-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_exit'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'exec': 'lsof', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'500CEF45-EA34-5E92-996F-47EF61787F03','2303','EVENT_EXIT','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','1522706927033349416','aue_exit','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','lsof','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'500CEF45-EA34-5E92-996F-47EF61787F03','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'500CEF45-EA34-5E92-996F-47EF61787F03','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'500CEF45-EA34-5E92-996F-47EF61787F03','6A42338C-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 2822, 'parentSubject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '26B62C58-E245-578A-AE04-495EBA139703', 'startTimestampNanos': 1522706927033349416, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,parentSubject_UUID,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','2822','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','26B62C58-E245-578A-AE04-495EBA139703','1522706927033349416','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','hasParent'),(nextval('edge_number_seq'),'6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','26B62C58-E245-578A-AE04-495EBA139703','hasLocalPrincipal'),(nextval('edge_number_seq'),'6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5FF131CE-A945-5AD4-B47E-3821470AF38C', 'sequence': {'long': 2304}, 'type': 'EVENT_FORK', 'threadId': {'int': 100232}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '4B42F341-36C0-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_fork'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2822', 'exec': 'bash', 'arg_pid': '2822', 'ppid': '2337'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_exec,properties_map_arg_pid,properties_map_ppid) VALUES (nextval('line_number_seq'),'5FF131CE-A945-5AD4-B47E-3821470AF38C','2304','EVENT_FORK','100232','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','1522706927033349416','aue_fork','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2822','bash','2822','2337');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5FF131CE-A945-5AD4-B47E-3821470AF38C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5FF131CE-A945-5AD4-B47E-3821470AF38C','4B42F341-36C0-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5FF131CE-A945-5AD4-B47E-3821470AF38C','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ACF3E6C0-5E5D-5CD4-B194-95A3FDA63BE7', 'sequence': {'long': 2305}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'CC349957-3DA4-8E5E-A43D-C7740E8ECAA9'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '255', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ACF3E6C0-5E5D-5CD4-B194-95A3FDA63BE7','2305','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','1522706927033349416','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','255','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ACF3E6C0-5E5D-5CD4-B194-95A3FDA63BE7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ACF3E6C0-5E5D-5CD4-B194-95A3FDA63BE7','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ACF3E6C0-5E5D-5CD4-B194-95A3FDA63BE7','CC349957-3DA4-8E5E-A43D-C7740E8ECAA9','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '11AF1538-2DCA-53EB-A5A6-ADF8C3FA5B1F', 'sequence': {'long': 2306}, 'type': 'EVENT_EXECUTE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C836AA2-BB54-3A58-94BB-1E5D583A637E'}, 'predicateObjectPath': {'string': '/bin/sleep'}, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7A350F75-9945-425D-8599-15CEBD426F06'}, 'predicateObject2Path': {'string': '/libexec/ld-elf.so.1'}, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_execve'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'cmdLine': 'sleep 57', 'return_value': '-1', 'exec': 'bash', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,predicateObject2_UUID,predicateObject2Path_string,timestampNanos,name_string,properties_map_host,properties_map_cmdLine,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'11AF1538-2DCA-53EB-A5A6-ADF8C3FA5B1F','2306','EVENT_EXECUTE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','6C836AA2-BB54-3A58-94BB-1E5D583A637E','/bin/sleep','7A350F75-9945-425D-8599-15CEBD426F06','/libexec/ld-elf.so.1','1522706927033349416','aue_execve','83c8ed1f-5045-dbcd-b39f-918f0df4f851','sleep 57','-1','bash','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'11AF1538-2DCA-53EB-A5A6-ADF8C3FA5B1F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'11AF1538-2DCA-53EB-A5A6-ADF8C3FA5B1F','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'11AF1538-2DCA-53EB-A5A6-ADF8C3FA5B1F','6C836AA2-BB54-3A58-94BB-1E5D583A637E','affects'),(nextval('edge_number_seq'),'11AF1538-2DCA-53EB-A5A6-ADF8C3FA5B1F','7A350F75-9945-425D-8599-15CEBD426F06','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C8CE3752-5277-5FAB-9A53-ACE92663B9E2', 'sequence': {'long': 2307}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C8CE3752-5277-5FAB-9A53-ACE92663B9E2','2307','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706927033349416','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C8CE3752-5277-5FAB-9A53-ACE92663B9E2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C8CE3752-5277-5FAB-9A53-ACE92663B9E2','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C8CE3752-5277-5FAB-9A53-ACE92663B9E2','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '234E4EBA-B45B-5003-B0C6-72817A71452E', 'sequence': {'long': 2308}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': {'string': '/etc/libmap.conf'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 47}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/etc/libmap.conf', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'234E4EBA-B45B-5003-B0C6-72817A71452E','2308','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','/etc/libmap.conf','1522706927033349416','aue_read','47','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/etc/libmap.conf','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'234E4EBA-B45B-5003-B0C6-72817A71452E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'234E4EBA-B45B-5003-B0C6-72817A71452E','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'234E4EBA-B45B-5003-B0C6-72817A71452E','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A7A31558-BB1B-5DF9-B51D-7B15E6FE3182', 'sequence': {'long': 2309}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '51110606-D232-9652-B2D2-3A7242968F8A'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A7A31558-BB1B-5DF9-B51D-7B15E6FE3182','2309','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','51110606-D232-9652-B2D2-3A7242968F8A','1522706927033349416','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A7A31558-BB1B-5DF9-B51D-7B15E6FE3182','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A7A31558-BB1B-5DF9-B51D-7B15E6FE3182','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A7A31558-BB1B-5DF9-B51D-7B15E6FE3182','51110606-D232-9652-B2D2-3A7242968F8A','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DCBF1479-DFCF-54A5-B2E7-C00939267FB7', 'sequence': {'long': 2310}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '100000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DCBF1479-DFCF-54A5-B2E7-C00939267FB7','2310','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706927033349416','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','100000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DCBF1479-DFCF-54A5-B2E7-C00939267FB7','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DCBF1479-DFCF-54A5-B2E7-C00939267FB7','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DCBF1479-DFCF-54A5-B2E7-C00939267FB7','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9D74C0CE-27A4-5DA7-B6A9-563A28670667', 'sequence': {'long': 2311}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 128}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9D74C0CE-27A4-5DA7-B6A9-563A28670667','2311','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706927033349416','aue_read','128','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9D74C0CE-27A4-5DA7-B6A9-563A28670667','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9D74C0CE-27A4-5DA7-B6A9-563A28670667','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'9D74C0CE-27A4-5DA7-B6A9-563A28670667','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0CC416E1-0C68-5343-A922-ECBD74866409', 'sequence': {'long': 2312}, 'type': 'EVENT_READ', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': {'string': '/var/run/ld-elf.so.hints'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927033349416, 'name': {'string': 'aue_pread'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 101}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/var/run/ld-elf.so.hints', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0CC416E1-0C68-5343-A922-ECBD74866409','2312','EVENT_READ','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','/var/run/ld-elf.so.hints','1522706927033349416','aue_pread','101','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/var/run/ld-elf.so.hints','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0CC416E1-0C68-5343-A922-ECBD74866409','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0CC416E1-0C68-5343-A922-ECBD74866409','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'0CC416E1-0C68-5343-A922-ECBD74866409','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '97B70E2E-9925-570B-B53E-FF5FFD08ADDD', 'sequence': {'long': 2313}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '29D1C360-CCE6-165C-A6CC-FC6A6C167357'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'97B70E2E-9925-570B-B53E-FF5FFD08ADDD','2313','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','29D1C360-CCE6-165C-A6CC-FC6A6C167357','1522706927043350457','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'97B70E2E-9925-570B-B53E-FF5FFD08ADDD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'97B70E2E-9925-570B-B53E-FF5FFD08ADDD','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'97B70E2E-9925-570B-B53E-FF5FFD08ADDD','29D1C360-CCE6-165C-A6CC-FC6A6C167357','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6442C96F-7476-5A5D-8080-8C3E0E313179', 'sequence': {'long': 2314}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': {'string': '/lib/libc.so.7'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_openat_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '300000'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'fd': '-100', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6442C96F-7476-5A5D-8080-8C3E0E313179','2314','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','/lib/libc.so.7','1522706927043350457','aue_openat_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','300000','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','-100','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6442C96F-7476-5A5D-8080-8C3E0E313179','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6442C96F-7476-5A5D-8080-8C3E0E313179','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'6442C96F-7476-5A5D-8080-8C3E0E313179','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A959191D-0F29-52C4-AD13-BFA8C5F7BB1A', 'sequence': {'long': 2315}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A959191D-0F29-52C4-AD13-BFA8C5F7BB1A','2315','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706927043350457','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A959191D-0F29-52C4-AD13-BFA8C5F7BB1A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A959191D-0F29-52C4-AD13-BFA8C5F7BB1A','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A959191D-0F29-52C4-AD13-BFA8C5F7BB1A','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7AA15977-9578-5CE3-8496-C05AC36AED3C', 'sequence': {'long': 2316}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'7AA15977-9578-5CE3-8496-C05AC36AED3C','2316','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706927043350457','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7AA15977-9578-5CE3-8496-C05AC36AED3C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7AA15977-9578-5CE3-8496-C05AC36AED3C','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'7AA15977-9578-5CE3-8496-C05AC36AED3C','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DC894712-B798-54E8-88EC-568D0B678845', 'sequence': {'long': 2317}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'DC894712-B798-54E8-88EC-568D0B678845','2317','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706927043350457','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DC894712-B798-54E8-88EC-568D0B678845','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DC894712-B798-54E8-88EC-568D0B678845','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DC894712-B798-54E8-88EC-568D0B678845','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '608AACD2-A629-51C7-8BD8-61A8AB61AAA0', 'sequence': {'long': 2318}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 8540160}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_EXEC']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'608AACD2-A629-51C7-8BD8-61A8AB61AAA0','2318','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706927043350457','aue_mmap','8540160','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_EXEC'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'608AACD2-A629-51C7-8BD8-61A8AB61AAA0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'608AACD2-A629-51C7-8BD8-61A8AB61AAA0','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'608AACD2-A629-51C7-8BD8-61A8AB61AAA0','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EBA57AF8-C1F5-5589-AC17-165F1679340B', 'sequence': {'long': 2319}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EBA57AF8-C1F5-5589-AC17-165F1679340B','2319','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706927043350457','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EBA57AF8-C1F5-5589-AC17-165F1679340B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EBA57AF8-C1F5-5589-AC17-165F1679340B','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EBA57AF8-C1F5-5589-AC17-165F1679340B','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A4BD5D97-4CB6-5D71-99E1-BA96E621236F', 'sequence': {'long': 2320}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12427264}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/lib/libc.so.7', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ', 'PROT_WRITE']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'A4BD5D97-4CB6-5D71-99E1-BA96E621236F','2320','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706927043350457','aue_mmap','12427264','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/lib/libc.so.7','3','sleep','[''PROT_READ'', ''PROT_WRITE'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A4BD5D97-4CB6-5D71-99E1-BA96E621236F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A4BD5D97-4CB6-5D71-99E1-BA96E621236F','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A4BD5D97-4CB6-5D71-99E1-BA96E621236F','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C0EEEF43-A3CF-5715-9E98-4672C6F36C31', 'sequence': {'long': 2321}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '76A739B1-A13E-FD50-BEA1-B218A0FD0400'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C0EEEF43-A3CF-5715-9E98-4672C6F36C31','2321','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','76A739B1-A13E-FD50-BEA1-B218A0FD0400','1522706927043350457','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C0EEEF43-A3CF-5715-9E98-4672C6F36C31','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C0EEEF43-A3CF-5715-9E98-4672C6F36C31','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C0EEEF43-A3CF-5715-9E98-4672C6F36C31','76A739B1-A13E-FD50-BEA1-B218A0FD0400','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '4782ACDC-229A-5582-A439-AF46610EE425', 'sequence': {'long': 2322}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': {'string': '/dev/hpet0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '3', 'return_value': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'4782ACDC-229A-5582-A439-AF46610EE425','2322','EVENT_OPEN','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','/dev/hpet0','1522706927043350457','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','00','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','3','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'4782ACDC-229A-5582-A439-AF46610EE425','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'4782ACDC-229A-5582-A439-AF46610EE425','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'4782ACDC-229A-5582-A439-AF46610EE425','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EB5A9F61-F3B5-555C-BBB2-7284B89692DC', 'sequence': {'long': 2323}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'EB5A9F61-F3B5-555C-BBB2-7284B89692DC','2323','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706927043350457','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EB5A9F61-F3B5-555C-BBB2-7284B89692DC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EB5A9F61-F3B5-555C-BBB2-7284B89692DC','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'EB5A9F61-F3B5-555C-BBB2-7284B89692DC','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B7EA79AA-6E64-5544-8CCB-731B26BF530D', 'sequence': {'long': 2324}, 'type': 'EVENT_MMAP', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_mmap'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 6565888}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '/dev/hpet0', 'fd': '3', 'exec': 'sleep', 'arg_mem_flags': \"['PROT_READ']\", 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_arg_mem_flags,properties_map_ppid) VALUES (nextval('line_number_seq'),'B7EA79AA-6E64-5544-8CCB-731B26BF530D','2324','EVENT_MMAP','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706927043350457','aue_mmap','6565888','83c8ed1f-5045-dbcd-b39f-918f0df4f851','/dev/hpet0','3','sleep','[''PROT_READ'']','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B7EA79AA-6E64-5544-8CCB-731B26BF530D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B7EA79AA-6E64-5544-8CCB-731B26BF530D','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B7EA79AA-6E64-5544-8CCB-731B26BF530D','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2BC5529F-F044-53EB-B69D-E7BB1B2F539F', 'sequence': {'long': 2325}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100103}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': 'F410BE96-4C0C-765E-8C4C-6F0E2E760020'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927043350457, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '3', 'exec': 'sleep', 'ppid': '2549'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2BC5529F-F044-53EB-B69D-E7BB1B2F539F','2325','EVENT_CLOSE','100103','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','F410BE96-4C0C-765E-8C4C-6F0E2E760020','1522706927043350457','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','3','sleep','2549');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2BC5529F-F044-53EB-B69D-E7BB1B2F539F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2BC5529F-F044-53EB-B69D-E7BB1B2F539F','6A5652C9-36C2-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2BC5529F-F044-53EB-B69D-E7BB1B2F539F','F410BE96-4C0C-765E-8C4C-6F0E2E760020','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ABF977E9-F0A0-5174-8B8B-6A8F859DFACF', 'sequence': {'long': 2326}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A35C99A-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927833351335, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ABF977E9-F0A0-5174-8B8B-6A8F859DFACF','2326','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6A35C99A-36C2-11E8-BF66-D9AA8AFF4A69','1522706927833351335','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ABF977E9-F0A0-5174-8B8B-6A8F859DFACF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ABF977E9-F0A0-5174-8B8B-6A8F859DFACF','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ABF977E9-F0A0-5174-8B8B-6A8F859DFACF','6A35C99A-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '92AF6782-8B6B-5FD0-AAC3-570529CCFD81', 'sequence': {'long': 2327}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6A35CA58-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927833351335, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'92AF6782-8B6B-5FD0-AAC3-570529CCFD81','2327','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6A35CA58-36C2-11E8-BF66-D9AA8AFF4A69','1522706927833351335','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'92AF6782-8B6B-5FD0-AAC3-570529CCFD81','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'92AF6782-8B6B-5FD0-AAC3-570529CCFD81','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'92AF6782-8B6B-5FD0-AAC3-570529CCFD81','6A35CA58-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6AD0A91F-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6AD0A91F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6AD0A91F-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6AD0A91F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6AD0A80F-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6AD0A80F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6AD0A80F-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6AD0A80F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B0347733-7E4C-52A6-BBA4-243D50467E35', 'sequence': {'long': 2328}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6AD0A80F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6AD0A91F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706927833351335, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B0347733-7E4C-52A6-BBA4-243D50467E35','2328','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6AD0A80F-36C2-11E8-BF66-D9AA8AFF4A69','6AD0A91F-36C2-11E8-BF66-D9AA8AFF4A69','1522706927833351335','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B0347733-7E4C-52A6-BBA4-243D50467E35','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B0347733-7E4C-52A6-BBA4-243D50467E35','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B0347733-7E4C-52A6-BBA4-243D50467E35','6AD0A80F-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'B0347733-7E4C-52A6-BBA4-243D50467E35','6AD0A91F-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '54D34ABB-F799-53E7-9461-F07F5DECFF97', 'sequence': {'long': 2329}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927833351335, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'54D34ABB-F799-53E7-9461-F07F5DECFF97','2329','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706927833351335','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'54D34ABB-F799-53E7-9461-F07F5DECFF97','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'54D34ABB-F799-53E7-9461-F07F5DECFF97','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '62DB8D3D-A1AA-521A-AAB3-5EA6640CDA37', 'sequence': {'long': 2330}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927833351335, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'62DB8D3D-A1AA-521A-AAB3-5EA6640CDA37','2330','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706927833351335','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'62DB8D3D-A1AA-521A-AAB3-5EA6640CDA37','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'62DB8D3D-A1AA-521A-AAB3-5EA6640CDA37','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D43C64AF-6D63-5313-B097-324D781577EC', 'sequence': {'long': 2331}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927833351335, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D43C64AF-6D63-5313-B097-324D781577EC','2331','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706927833351335','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D43C64AF-6D63-5313-B097-324D781577EC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D43C64AF-6D63-5313-B097-324D781577EC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '33E628EC-71AA-5E09-8882-620097C1398C', 'sequence': {'long': 2332}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706927853350046, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'33E628EC-71AA-5E09-8882-620097C1398C','2332','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706927853350046','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'33E628EC-71AA-5E09-8882-620097C1398C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'33E628EC-71AA-5E09-8882-620097C1398C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BB8D95E9-F855-543C-A13A-BC3BBE21773F', 'sequence': {'long': 2333}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6AD0A80F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706928823349501, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BB8D95E9-F855-543C-A13A-BC3BBE21773F','2333','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6AD0A80F-36C2-11E8-BF66-D9AA8AFF4A69','1522706928823349501','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BB8D95E9-F855-543C-A13A-BC3BBE21773F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BB8D95E9-F855-543C-A13A-BC3BBE21773F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'BB8D95E9-F855-543C-A13A-BC3BBE21773F','6AD0A80F-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '1CAE9209-B712-502B-A53F-26EAFEEB95A0', 'sequence': {'long': 2334}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6AD0A91F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706928823349501, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'1CAE9209-B712-502B-A53F-26EAFEEB95A0','2334','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6AD0A91F-36C2-11E8-BF66-D9AA8AFF4A69','1522706928823349501','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1CAE9209-B712-502B-A53F-26EAFEEB95A0','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1CAE9209-B712-502B-A53F-26EAFEEB95A0','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'1CAE9209-B712-502B-A53F-26EAFEEB95A0','6AD0A91F-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6B66DF43-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6B66DF43-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6B66DF43-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6B66DF43-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6B66DE3B-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6B66DE3B-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6B66DE3B-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6B66DE3B-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8310CD98-1FBF-5F79-AA76-25B6042C7F93', 'sequence': {'long': 2335}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6B66DE3B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6B66DF43-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706928823349501, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8310CD98-1FBF-5F79-AA76-25B6042C7F93','2335','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6B66DE3B-36C2-11E8-BF66-D9AA8AFF4A69','6B66DF43-36C2-11E8-BF66-D9AA8AFF4A69','1522706928823349501','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8310CD98-1FBF-5F79-AA76-25B6042C7F93','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8310CD98-1FBF-5F79-AA76-25B6042C7F93','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8310CD98-1FBF-5F79-AA76-25B6042C7F93','6B66DE3B-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'8310CD98-1FBF-5F79-AA76-25B6042C7F93','6B66DF43-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '40CC3138-43E1-5AD6-AAE8-12687F8B234E', 'sequence': {'long': 2336}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706928823349501, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'40CC3138-43E1-5AD6-AAE8-12687F8B234E','2336','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706928823349501','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'40CC3138-43E1-5AD6-AAE8-12687F8B234E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'40CC3138-43E1-5AD6-AAE8-12687F8B234E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6282FF05-2E05-5B92-B795-7BE7496C2BB8', 'sequence': {'long': 2337}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706928823349501, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6282FF05-2E05-5B92-B795-7BE7496C2BB8','2337','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706928823349501','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6282FF05-2E05-5B92-B795-7BE7496C2BB8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6282FF05-2E05-5B92-B795-7BE7496C2BB8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FF26292C-28B0-55B1-814E-CD03B154185F', 'sequence': {'long': 2338}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706928823349501, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FF26292C-28B0-55B1-814E-CD03B154185F','2338','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706928823349501','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FF26292C-28B0-55B1-814E-CD03B154185F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FF26292C-28B0-55B1-814E-CD03B154185F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CB1CAEE2-A8F6-5FBC-8A8C-4ECFDCC29207', 'sequence': {'long': 2339}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706928823349501, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CB1CAEE2-A8F6-5FBC-8A8C-4ECFDCC29207','2339','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706928823349501','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CB1CAEE2-A8F6-5FBC-8A8C-4ECFDCC29207','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CB1CAEE2-A8F6-5FBC-8A8C-4ECFDCC29207','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B4AE6A36-697E-5F20-88BE-CC472371C147', 'sequence': {'long': 2340}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6B66DE3B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706929813351937, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B4AE6A36-697E-5F20-88BE-CC472371C147','2340','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6B66DE3B-36C2-11E8-BF66-D9AA8AFF4A69','1522706929813351937','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B4AE6A36-697E-5F20-88BE-CC472371C147','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B4AE6A36-697E-5F20-88BE-CC472371C147','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B4AE6A36-697E-5F20-88BE-CC472371C147','6B66DE3B-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '15E350A8-13E2-5B3D-8C44-A1822906515A', 'sequence': {'long': 2341}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6B66DF43-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706929813351937, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'15E350A8-13E2-5B3D-8C44-A1822906515A','2341','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6B66DF43-36C2-11E8-BF66-D9AA8AFF4A69','1522706929813351937','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'15E350A8-13E2-5B3D-8C44-A1822906515A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'15E350A8-13E2-5B3D-8C44-A1822906515A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'15E350A8-13E2-5B3D-8C44-A1822906515A','6B66DF43-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6BFDEC53-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6BFDEC53-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6BFDEC53-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6BFDEC53-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6BFDEB48-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6BFDEB48-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6BFDEB48-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6BFDEB48-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '751BC14E-CBAF-58ED-960D-228D59A75EDD', 'sequence': {'long': 2342}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6BFDEB48-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6BFDEC53-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706929813351937, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'751BC14E-CBAF-58ED-960D-228D59A75EDD','2342','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6BFDEB48-36C2-11E8-BF66-D9AA8AFF4A69','6BFDEC53-36C2-11E8-BF66-D9AA8AFF4A69','1522706929813351937','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'751BC14E-CBAF-58ED-960D-228D59A75EDD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'751BC14E-CBAF-58ED-960D-228D59A75EDD','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'751BC14E-CBAF-58ED-960D-228D59A75EDD','6BFDEB48-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'751BC14E-CBAF-58ED-960D-228D59A75EDD','6BFDEC53-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AEB3947D-569F-5160-8BA3-6063558855EC', 'sequence': {'long': 2343}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706929813351937, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AEB3947D-569F-5160-8BA3-6063558855EC','2343','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706929813351937','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AEB3947D-569F-5160-8BA3-6063558855EC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AEB3947D-569F-5160-8BA3-6063558855EC','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '841E821E-4B40-5180-8F38-51AC17A1E2FE', 'sequence': {'long': 2344}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706929813351937, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'841E821E-4B40-5180-8F38-51AC17A1E2FE','2344','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706929813351937','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'841E821E-4B40-5180-8F38-51AC17A1E2FE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'841E821E-4B40-5180-8F38-51AC17A1E2FE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6E8F2F25-8700-58F6-9F50-1B2D02DCF718', 'sequence': {'long': 2345}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706929813351937, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6E8F2F25-8700-58F6-9F50-1B2D02DCF718','2345','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706929813351937','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6E8F2F25-8700-58F6-9F50-1B2D02DCF718','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6E8F2F25-8700-58F6-9F50-1B2D02DCF718','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0BDD7553-67A1-58C9-8B26-6BB045D60D95', 'sequence': {'long': 2346}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706929813351937, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0BDD7553-67A1-58C9-8B26-6BB045D60D95','2346','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706929813351937','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0BDD7553-67A1-58C9-8B26-6BB045D60D95','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0BDD7553-67A1-58C9-8B26-6BB045D60D95','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'E56D10B8-EF5E-58B8-83D2-EE41DC775605', 'sequence': {'long': 2347}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6BFDEB48-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706930813349123, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'E56D10B8-EF5E-58B8-83D2-EE41DC775605','2347','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6BFDEB48-36C2-11E8-BF66-D9AA8AFF4A69','1522706930813349123','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'E56D10B8-EF5E-58B8-83D2-EE41DC775605','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'E56D10B8-EF5E-58B8-83D2-EE41DC775605','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'E56D10B8-EF5E-58B8-83D2-EE41DC775605','6BFDEB48-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '8126333C-52CD-538A-A059-0B2447DC966B', 'sequence': {'long': 2348}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6BFDEC53-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706930813349123, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'8126333C-52CD-538A-A059-0B2447DC966B','2348','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6BFDEC53-36C2-11E8-BF66-D9AA8AFF4A69','1522706930813349123','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'8126333C-52CD-538A-A059-0B2447DC966B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'8126333C-52CD-538A-A059-0B2447DC966B','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'8126333C-52CD-538A-A059-0B2447DC966B','6BFDEC53-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6C9759BD-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6C9759BD-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6C9759BD-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6C9759BD-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6C9758E0-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6C9758E0-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6C9758E0-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6C9758E0-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2DC72798-4955-58AC-A567-5FA1837F2050', 'sequence': {'long': 2349}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C9758E0-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C9759BD-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706930813349123, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2DC72798-4955-58AC-A567-5FA1837F2050','2349','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6C9758E0-36C2-11E8-BF66-D9AA8AFF4A69','6C9759BD-36C2-11E8-BF66-D9AA8AFF4A69','1522706930813349123','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2DC72798-4955-58AC-A567-5FA1837F2050','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2DC72798-4955-58AC-A567-5FA1837F2050','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2DC72798-4955-58AC-A567-5FA1837F2050','6C9758E0-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'2DC72798-4955-58AC-A567-5FA1837F2050','6C9759BD-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EA09E302-2D9B-5CF2-85F2-0C4622299640', 'sequence': {'long': 2350}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706930813349123, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EA09E302-2D9B-5CF2-85F2-0C4622299640','2350','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706930813349123','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EA09E302-2D9B-5CF2-85F2-0C4622299640','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EA09E302-2D9B-5CF2-85F2-0C4622299640','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '3C9FBA26-C3EC-5B87-8315-A6C008B9F176', 'sequence': {'long': 2351}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706930813349123, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'3C9FBA26-C3EC-5B87-8315-A6C008B9F176','2351','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706930813349123','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'3C9FBA26-C3EC-5B87-8315-A6C008B9F176','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'3C9FBA26-C3EC-5B87-8315-A6C008B9F176','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A804961A-DC99-521C-B51F-2A98DC07088A', 'sequence': {'long': 2352}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706930813349123, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A804961A-DC99-521C-B51F-2A98DC07088A','2352','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706930813349123','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A804961A-DC99-521C-B51F-2A98DC07088A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A804961A-DC99-521C-B51F-2A98DC07088A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CCB99F99-3554-5C7A-8A78-90FE3DA7F444', 'sequence': {'long': 2353}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706930813349123, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CCB99F99-3554-5C7A-8A78-90FE3DA7F444','2353','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706930813349123','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CCB99F99-3554-5C7A-8A78-90FE3DA7F444','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CCB99F99-3554-5C7A-8A78-90FE3DA7F444','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6D2D80E5-7587-53C6-82E9-FB40BA8DE265', 'sequence': {'long': 2354}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931033349691, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6D2D80E5-7587-53C6-82E9-FB40BA8DE265','2354','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706931033349691','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6D2D80E5-7587-53C6-82E9-FB40BA8DE265','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6D2D80E5-7587-53C6-82E9-FB40BA8DE265','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '99162450-ED5A-5B0B-85B2-A9E08167A0ED', 'sequence': {'long': 2355}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931033349691, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'99162450-ED5A-5B0B-85B2-A9E08167A0ED','2355','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706931033349691','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'99162450-ED5A-5B0B-85B2-A9E08167A0ED','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'99162450-ED5A-5B0B-85B2-A9E08167A0ED','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6CB89929-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6CB89929-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6CB89929-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6CB89929-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '335D4872-7E0E-5520-AF37-075B422B1624', 'sequence': {'long': 2356}, 'type': 'EVENT_CONNECT', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6CB89929-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931033349691, 'name': {'string': 'aue_connect'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'address': 'public/qmgr', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_address,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'335D4872-7E0E-5520-AF37-075B422B1624','2356','EVENT_CONNECT','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','6CB89929-36C2-11E8-BF66-D9AA8AFF4A69','1522706931033349691','aue_connect','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','public/qmgr','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'335D4872-7E0E-5520-AF37-075B422B1624','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'335D4872-7E0E-5520-AF37-075B422B1624','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'335D4872-7E0E-5520-AF37-075B422B1624','6CB89929-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '46B643EB-27AA-4C5E-AA27-F55CCE4C898E', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'46B643EB-27AA-4C5E-AA27-F55CCE4C898E','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'46B643EB-27AA-4C5E-AA27-F55CCE4C898E','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'46B643EB-27AA-4C5E-AA27-F55CCE4C898E','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Subject': {'uuid': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69', 'type': 'SUBJECT_PROCESS', 'cid': 1283, 'parentSubject': None, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'localPrincipal': '5B2929DF-D2D0-5AFD-B05D-EC65679EC9D7', 'startTimestampNanos': 0, 'unitId': None, 'iteration': None, 'count': None, 'cmdLine': None, 'privilegeLevel': None, 'importedLibraries': None, 'exportedLibraries': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO subject (line, uuid,type,cid,hostId,localPrincipal,startTimestampNanos,properties_map_host) VALUES (nextval('line_number_seq'),'0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','SUBJECT_PROCESS','1283','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','5B2929DF-D2D0-5AFD-B05D-EC65679EC9D7','0','83c8ed1f-5045-dbcd-b39f-918f0df4f851');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','Subject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','5B2929DF-D2D0-5AFD-B05D-EC65679EC9D7','hasLocalPrincipal'),(nextval('edge_number_seq'),'0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','runsOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '27CC4FD5-8D8C-56C4-817A-68F7B2B1834B', 'sequence': {'long': 2357}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46B643EB-27AA-4C5E-AA27-F55CCE4C898E'}, 'predicateObjectPath': {'string': '/var/spool/postfix/deferred'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931033349691, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '9', 'return_value': '9', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'27CC4FD5-8D8C-56C4-817A-68F7B2B1834B','2357','EVENT_OPEN','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','46B643EB-27AA-4C5E-AA27-F55CCE4C898E','/var/spool/postfix/deferred','1522706931033349691','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','9','9','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'27CC4FD5-8D8C-56C4-817A-68F7B2B1834B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'27CC4FD5-8D8C-56C4-817A-68F7B2B1834B','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'27CC4FD5-8D8C-56C4-817A-68F7B2B1834B','46B643EB-27AA-4C5E-AA27-F55CCE4C898E','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A192FADD-C14B-5B44-AB08-1B1388562727', 'sequence': {'long': 2358}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931033349691, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '6', 'fd': '3', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A192FADD-C14B-5B44-AB08-1B1388562727','2358','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706931033349691','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','6','3','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A192FADD-C14B-5B44-AB08-1B1388562727','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A192FADD-C14B-5B44-AB08-1B1388562727','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '0C0E00A6-3680-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'0C0E00A6-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C0E00A6-3680-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C0E00A6-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B0650DA3-D1BF-553A-89B5-D02B05F252BE', 'sequence': {'long': 2359}, 'type': 'EVENT_ACCEPT', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0E00A6-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706931033349691, 'name': {'string': 'aue_accept'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'return_value': '10', 'address': '', 'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '10', 'fd': '6', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_return_value,properties_map_address,properties_map_host,properties_map_ret_fd1,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B0650DA3-D1BF-553A-89B5-D02B05F252BE','2359','EVENT_ACCEPT','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','0C0E00A6-3680-11E8-BF66-D9AA8AFF4A69','6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69','1522706931033349691','aue_accept','10','','83c8ed1f-5045-dbcd-b39f-918f0df4f851','10','6','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B0650DA3-D1BF-553A-89B5-D02B05F252BE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B0650DA3-D1BF-553A-89B5-D02B05F252BE','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B0650DA3-D1BF-553A-89B5-D02B05F252BE','0C0E00A6-3680-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'B0650DA3-D1BF-553A-89B5-D02B05F252BE','6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '48344B10-5DFB-5E78-9E19-569558902682', 'sequence': {'long': 2360}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931033349691, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '1', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'48344B10-5DFB-5E78-9E19-569558902682','2360','EVENT_FCNTL','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','1522706931033349691','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','01','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','1','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'48344B10-5DFB-5E78-9E19-569558902682','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'48344B10-5DFB-5E78-9E19-569558902682','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'CC8D7690-6B9A-5087-9C39-9F9F15D91BD9', 'sequence': {'long': 2361}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931033349691, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'CC8D7690-6B9A-5087-9C39-9F9F15D91BD9','2361','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706931033349691','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'CC8D7690-6B9A-5087-9C39-9F9F15D91BD9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'CC8D7690-6B9A-5087-9C39-9F9F15D91BD9','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '469BF1E0-4B36-55E9-96E1-D2423677CC83', 'sequence': {'long': 2362}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931033349691, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '02'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '2', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'469BF1E0-4B36-55E9-96E1-D2423677CC83','2362','EVENT_FCNTL','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','1522706931033349691','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','02','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','2','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'469BF1E0-4B36-55E9-96E1-D2423677CC83','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'469BF1E0-4B36-55E9-96E1-D2423677CC83','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DDE38E38-35CB-52D4-A178-AF9028110028', 'sequence': {'long': 2363}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931033349691, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '01'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '1', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DDE38E38-35CB-52D4-A178-AF9028110028','2363','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706931033349691','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','01','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','1','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DDE38E38-35CB-52D4-A178-AF9028110028','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DDE38E38-35CB-52D4-A178-AF9028110028','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AEE4ECB2-C4F6-5A6E-A522-E346A4338C28', 'sequence': {'long': 2364}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931033349691, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '02'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '2', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AEE4ECB2-C4F6-5A6E-A522-E346A4338C28','2364','EVENT_FCNTL','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','1522706931033349691','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','02','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','2','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AEE4ECB2-C4F6-5A6E-A522-E346A4338C28','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AEE4ECB2-C4F6-5A6E-A522-E346A4338C28','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '166F617E-1E81-5981-B31A-F7BB5F2AE139', 'sequence': {'long': 2365}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6CB89929-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'166F617E-1E81-5981-B31A-F7BB5F2AE139','2365','EVENT_WRITE','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','6CB89929-36C2-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706931043350221','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'166F617E-1E81-5981-B31A-F7BB5F2AE139','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'166F617E-1E81-5981-B31A-F7BB5F2AE139','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'166F617E-1E81-5981-B31A-F7BB5F2AE139','6CB89929-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '0C0E2FB4-3680-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'0C0E2FB4-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C0E2FB4-3680-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C0E2FB4-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '26D85E2F-0F05-517E-848D-09B496590CB9', 'sequence': {'long': 2366}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0E2FB4-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '5', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'26D85E2F-0F05-517E-848D-09B496590CB9','2366','EVENT_WRITE','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','0C0E2FB4-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706931043350221','aue_write','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','5','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'26D85E2F-0F05-517E-848D-09B496590CB9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'26D85E2F-0F05-517E-848D-09B496590CB9','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'26D85E2F-0F05-517E-848D-09B496590CB9','0C0E2FB4-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A52EB144-FDB1-5BC7-9CF5-EF127765D599', 'sequence': {'long': 2367}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6CB89929-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 1}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A52EB144-FDB1-5BC7-9CF5-EF127765D599','2367','EVENT_WRITE','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','6CB89929-36C2-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706931043350221','aue_write','1','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A52EB144-FDB1-5BC7-9CF5-EF127765D599','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A52EB144-FDB1-5BC7-9CF5-EF127765D599','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A52EB144-FDB1-5BC7-9CF5-EF127765D599','6CB89929-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '74C69FF1-CD31-53F3-931D-F6C5B4795040', 'sequence': {'long': 2368}, 'type': 'EVENT_READ', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 2}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '10', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'74C69FF1-CD31-53F3-931D-F6C5B4795040','2368','EVENT_READ','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706931043350221','aue_read','2','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','10','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'74C69FF1-CD31-53F3-931D-F6C5B4795040','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'74C69FF1-CD31-53F3-931D-F6C5B4795040','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'74C69FF1-CD31-53F3-931D-F6C5B4795040','6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '0C0E2F6B-3680-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'0C0E2F6B-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0C0E2F6B-3680-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0C0E2F6B-3680-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5E21FEAB-5A4A-5AE5-BEC7-51F007592282', 'sequence': {'long': 2369}, 'type': 'EVENT_READ', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0E2F6B-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '25', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5E21FEAB-5A4A-5AE5-BEC7-51F007592282','2369','EVENT_READ','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','0C0E2F6B-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706931043350221','aue_read','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','25','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5E21FEAB-5A4A-5AE5-BEC7-51F007592282','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5E21FEAB-5A4A-5AE5-BEC7-51F007592282','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5E21FEAB-5A4A-5AE5-BEC7-51F007592282','0C0E2F6B-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '758698C3-14D5-875E-9514-42B6BE87BFCF', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'758698C3-14D5-875E-9514-42B6BE87BFCF','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'758698C3-14D5-875E-9514-42B6BE87BFCF','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'758698C3-14D5-875E-9514-42B6BE87BFCF','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '65E32B44-DCB1-5B4F-A675-3E18D73CA4AC', 'sequence': {'long': 2370}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '758698C3-14D5-875E-9514-42B6BE87BFCF'}, 'predicateObjectPath': {'string': '/var/spool/postfix/incoming'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '13', 'return_value': '13', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'65E32B44-DCB1-5B4F-A675-3E18D73CA4AC','2370','EVENT_OPEN','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','758698C3-14D5-875E-9514-42B6BE87BFCF','/var/spool/postfix/incoming','1522706931043350221','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','13','13','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'65E32B44-DCB1-5B4F-A675-3E18D73CA4AC','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'65E32B44-DCB1-5B4F-A675-3E18D73CA4AC','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'65E32B44-DCB1-5B4F-A675-3E18D73CA4AC','758698C3-14D5-875E-9514-42B6BE87BFCF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '07A1D203-5D16-5C6D-89B2-0A066F7AD7D4', 'sequence': {'long': 2371}, 'type': 'EVENT_WRITE', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0E2FB4-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_write'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '5', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'07A1D203-5D16-5C6D-89B2-0A066F7AD7D4','2371','EVENT_WRITE','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','0C0E2FB4-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706931043350221','aue_write','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','5','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'07A1D203-5D16-5C6D-89B2-0A066F7AD7D4','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'07A1D203-5D16-5C6D-89B2-0A066F7AD7D4','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'07A1D203-5D16-5C6D-89B2-0A066F7AD7D4','0C0E2FB4-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F935627B-0059-59F1-99B4-A3C2EAE1BA5D', 'sequence': {'long': 2372}, 'type': 'EVENT_READ', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0E2F6B-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': {'string': '<unknown>'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_read'}, 'parameters': {'array': []}, 'location': None, 'size': {'long': 12}, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'partial_path': '<unknown>', 'fd': '25', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,size_long,properties_map_host,properties_map_partial_path,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F935627B-0059-59F1-99B4-A3C2EAE1BA5D','2372','EVENT_READ','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','0C0E2F6B-3680-11E8-BF66-D9AA8AFF4A69','<unknown>','1522706931043350221','aue_read','12','83c8ed1f-5045-dbcd-b39f-918f0df4f851','<unknown>','25','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F935627B-0059-59F1-99B4-A3C2EAE1BA5D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F935627B-0059-59F1-99B4-A3C2EAE1BA5D','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F935627B-0059-59F1-99B4-A3C2EAE1BA5D','0C0E2F6B-3680-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A2FA2F9D-C00B-55F0-AD1E-8E4771AD4B46', 'sequence': {'long': 2373}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '10', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A2FA2F9D-C00B-55F0-AD1E-8E4771AD4B46','2373','EVENT_CLOSE','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69','1522706931043350221','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','10','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A2FA2F9D-C00B-55F0-AD1E-8E4771AD4B46','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A2FA2F9D-C00B-55F0-AD1E-8E4771AD4B46','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A2FA2F9D-C00B-55F0-AD1E-8E4771AD4B46','6CB8DD92-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '69CE4544-30BB-59B3-BAA2-F83054D86C0F', 'sequence': {'long': 2374}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100221}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6CB89929-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '20', 'exec': 'master', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'69CE4544-30BB-59B3-BAA2-F83054D86C0F','2374','EVENT_CLOSE','100221','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','6CB89929-36C2-11E8-BF66-D9AA8AFF4A69','1522706931043350221','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','20','master','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'69CE4544-30BB-59B3-BAA2-F83054D86C0F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'69CE4544-30BB-59B3-BAA2-F83054D86C0F','0C0CC0C3-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'69CE4544-30BB-59B3-BAA2-F83054D86C0F','6CB89929-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '01E45E62-2A04-375F-842A-18619F37D37C', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'01E45E62-2A04-375F-842A-18619F37D37C','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'01E45E62-2A04-375F-842A-18619F37D37C','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'01E45E62-2A04-375F-842A-18619F37D37C','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2D04A012-2CE9-54C1-8ADD-7D8AB3A53F95', 'sequence': {'long': 2375}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '01E45E62-2A04-375F-842A-18619F37D37C'}, 'predicateObjectPath': {'string': '/var/spool/postfix/deferred/A'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '10', 'return_value': '10', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2D04A012-2CE9-54C1-8ADD-7D8AB3A53F95','2375','EVENT_OPEN','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','01E45E62-2A04-375F-842A-18619F37D37C','/var/spool/postfix/deferred/A','1522706931043350221','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','10','10','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2D04A012-2CE9-54C1-8ADD-7D8AB3A53F95','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2D04A012-2CE9-54C1-8ADD-7D8AB3A53F95','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2D04A012-2CE9-54C1-8ADD-7D8AB3A53F95','01E45E62-2A04-375F-842A-18619F37D37C','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '2EC30435-2A6D-5BE4-AD35-F1E2F78F33BA', 'sequence': {'long': 2376}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '01E45E62-2A04-375F-842A-18619F37D37C'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '10', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'2EC30435-2A6D-5BE4-AD35-F1E2F78F33BA','2376','EVENT_CLOSE','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','01E45E62-2A04-375F-842A-18619F37D37C','1522706931043350221','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','10','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'2EC30435-2A6D-5BE4-AD35-F1E2F78F33BA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'2EC30435-2A6D-5BE4-AD35-F1E2F78F33BA','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'2EC30435-2A6D-5BE4-AD35-F1E2F78F33BA','01E45E62-2A04-375F-842A-18619F37D37C','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '1355E1C5-18A4-9C59-A418-A384299CEB8D', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'1355E1C5-18A4-9C59-A418-A384299CEB8D','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'1355E1C5-18A4-9C59-A418-A384299CEB8D','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'1355E1C5-18A4-9C59-A418-A384299CEB8D','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D8CF545F-8587-51F4-BA4E-379F68ED09FA', 'sequence': {'long': 2377}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '1355E1C5-18A4-9C59-A418-A384299CEB8D'}, 'predicateObjectPath': {'string': '/var/spool/postfix/deferred/B'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '10', 'return_value': '10', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D8CF545F-8587-51F4-BA4E-379F68ED09FA','2377','EVENT_OPEN','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','1355E1C5-18A4-9C59-A418-A384299CEB8D','/var/spool/postfix/deferred/B','1522706931043350221','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','10','10','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D8CF545F-8587-51F4-BA4E-379F68ED09FA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D8CF545F-8587-51F4-BA4E-379F68ED09FA','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D8CF545F-8587-51F4-BA4E-379F68ED09FA','1355E1C5-18A4-9C59-A418-A384299CEB8D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D245F9F6-08EC-5FD6-86B9-EAE7071B61CF', 'sequence': {'long': 2378}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '1355E1C5-18A4-9C59-A418-A384299CEB8D'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '10', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D245F9F6-08EC-5FD6-86B9-EAE7071B61CF','2378','EVENT_CLOSE','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','1355E1C5-18A4-9C59-A418-A384299CEB8D','1522706931043350221','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','10','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D245F9F6-08EC-5FD6-86B9-EAE7071B61CF','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D245F9F6-08EC-5FD6-86B9-EAE7071B61CF','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D245F9F6-08EC-5FD6-86B9-EAE7071B61CF','1355E1C5-18A4-9C59-A418-A384299CEB8D','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6FE3903C-A612-1C55-92A6-BB47351C923C', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_FILE', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6FE3903C-A612-1C55-92A6-BB47351C923C','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_FILE');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6FE3903C-A612-1C55-92A6-BB47351C923C','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6FE3903C-A612-1C55-92A6-BB47351C923C','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '05B200A6-0574-5CC0-88F4-51C62C0BB5DD', 'sequence': {'long': 2379}, 'type': 'EVENT_OPEN', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6FE3903C-A612-1C55-92A6-BB47351C923C'}, 'predicateObjectPath': {'string': '/var/spool/postfix/deferred/0'}, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_open_rwtc'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'flags'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '120004'}, 'provenance': None, 'tag': None, 'components': None}, {'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'mode'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '00'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd1': '10', 'return_value': '10', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObjectPath_string,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,parameters_array_1_size,parameters_array_1_type,parameters_array_1_valueDataType,parameters_array_1_isNull,parameters_array_1_name_string,parameters_array_1_valueBytes_bytes,properties_map_host,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'05B200A6-0574-5CC0-88F4-51C62C0BB5DD','2379','EVENT_OPEN','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','6FE3903C-A612-1C55-92A6-BB47351C923C','/var/spool/postfix/deferred/0','1522706931043350221','aue_open_rwtc','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','flags','120004','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','mode','00','83c8ed1f-5045-dbcd-b39f-918f0df4f851','10','10','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'05B200A6-0574-5CC0-88F4-51C62C0BB5DD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'05B200A6-0574-5CC0-88F4-51C62C0BB5DD','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'05B200A6-0574-5CC0-88F4-51C62C0BB5DD','6FE3903C-A612-1C55-92A6-BB47351C923C','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AD354DE7-BB18-58D9-A72C-7863F4AAD969', 'sequence': {'long': 2380}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6FE3903C-A612-1C55-92A6-BB47351C923C'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '10', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AD354DE7-BB18-58D9-A72C-7863F4AAD969','2380','EVENT_CLOSE','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','6FE3903C-A612-1C55-92A6-BB47351C923C','1522706931043350221','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','10','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AD354DE7-BB18-58D9-A72C-7863F4AAD969','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AD354DE7-BB18-58D9-A72C-7863F4AAD969','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AD354DE7-BB18-58D9-A72C-7863F4AAD969','6FE3903C-A612-1C55-92A6-BB47351C923C','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DE4B8BCF-ED3C-5380-952C-73E7C0C3B78C', 'sequence': {'long': 2381}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '46B643EB-27AA-4C5E-AA27-F55CCE4C898E'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '9', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DE4B8BCF-ED3C-5380-952C-73E7C0C3B78C','2381','EVENT_CLOSE','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','46B643EB-27AA-4C5E-AA27-F55CCE4C898E','1522706931043350221','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','9','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DE4B8BCF-ED3C-5380-952C-73E7C0C3B78C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DE4B8BCF-ED3C-5380-952C-73E7C0C3B78C','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'DE4B8BCF-ED3C-5380-952C-73E7C0C3B78C','46B643EB-27AA-4C5E-AA27-F55CCE4C898E','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AB8BFB3A-DE75-5A31-9D7F-5B166990AA6B', 'sequence': {'long': 2382}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100217}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '0C1063C8-3680-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '758698C3-14D5-875E-9514-42B6BE87BFCF'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931043350221, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '13', 'exec': 'qmgr', 'ppid': '1281'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AB8BFB3A-DE75-5A31-9D7F-5B166990AA6B','2382','EVENT_CLOSE','100217','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','758698C3-14D5-875E-9514-42B6BE87BFCF','1522706931043350221','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','13','qmgr','1281');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AB8BFB3A-DE75-5A31-9D7F-5B166990AA6B','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AB8BFB3A-DE75-5A31-9D7F-5B166990AA6B','0C1063C8-3680-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AB8BFB3A-DE75-5A31-9D7F-5B166990AA6B','758698C3-14D5-875E-9514-42B6BE87BFCF','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '36FA5364-A69E-56C8-9E0C-9DB9D207B895', 'sequence': {'long': 2383}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C9758E0-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931823349469, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'36FA5364-A69E-56C8-9E0C-9DB9D207B895','2383','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6C9758E0-36C2-11E8-BF66-D9AA8AFF4A69','1522706931823349469','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'36FA5364-A69E-56C8-9E0C-9DB9D207B895','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'36FA5364-A69E-56C8-9E0C-9DB9D207B895','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'36FA5364-A69E-56C8-9E0C-9DB9D207B895','6C9758E0-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B261A56E-C5A1-584C-8C9A-415132C580A2', 'sequence': {'long': 2384}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6C9759BD-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931823349469, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B261A56E-C5A1-584C-8C9A-415132C580A2','2384','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6C9759BD-36C2-11E8-BF66-D9AA8AFF4A69','1522706931823349469','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B261A56E-C5A1-584C-8C9A-415132C580A2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B261A56E-C5A1-584C-8C9A-415132C580A2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B261A56E-C5A1-584C-8C9A-415132C580A2','6C9759BD-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6D308EC4-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6D308EC4-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6D308EC4-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6D308EC4-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6D308E16-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6D308E16-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6D308E16-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6D308E16-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A37DEF3B-50DB-568B-9CCC-9F8BF8FF5B72', 'sequence': {'long': 2385}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6D308E16-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6D308EC4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706931823349469, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A37DEF3B-50DB-568B-9CCC-9F8BF8FF5B72','2385','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6D308E16-36C2-11E8-BF66-D9AA8AFF4A69','6D308EC4-36C2-11E8-BF66-D9AA8AFF4A69','1522706931823349469','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A37DEF3B-50DB-568B-9CCC-9F8BF8FF5B72','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A37DEF3B-50DB-568B-9CCC-9F8BF8FF5B72','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'A37DEF3B-50DB-568B-9CCC-9F8BF8FF5B72','6D308E16-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'A37DEF3B-50DB-568B-9CCC-9F8BF8FF5B72','6D308EC4-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B824C4D3-F66B-536D-8AA5-C8DAA2481327', 'sequence': {'long': 2386}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931823349469, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B824C4D3-F66B-536D-8AA5-C8DAA2481327','2386','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706931823349469','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B824C4D3-F66B-536D-8AA5-C8DAA2481327','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B824C4D3-F66B-536D-8AA5-C8DAA2481327','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7F995D2D-B563-54D4-8A0F-2CDC275BE987', 'sequence': {'long': 2387}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931823349469, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7F995D2D-B563-54D4-8A0F-2CDC275BE987','2387','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706931823349469','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7F995D2D-B563-54D4-8A0F-2CDC275BE987','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7F995D2D-B563-54D4-8A0F-2CDC275BE987','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A3664C32-A93F-5F77-AD5A-06D31A2B19FD', 'sequence': {'long': 2388}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931823349469, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A3664C32-A93F-5F77-AD5A-06D31A2B19FD','2388','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706931823349469','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A3664C32-A93F-5F77-AD5A-06D31A2B19FD','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A3664C32-A93F-5F77-AD5A-06D31A2B19FD','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '880372A4-61B1-5533-A3B4-37A5D76A4E19', 'sequence': {'long': 2389}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706931823349469, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'880372A4-61B1-5533-A3B4-37A5D76A4E19','2389','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706931823349469','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'880372A4-61B1-5533-A3B4-37A5D76A4E19','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'880372A4-61B1-5533-A3B4-37A5D76A4E19','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F82818A3-42BC-58CA-827A-6A771631682A', 'sequence': {'long': 2390}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6D308E16-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706932813349955, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F82818A3-42BC-58CA-827A-6A771631682A','2390','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6D308E16-36C2-11E8-BF66-D9AA8AFF4A69','1522706932813349955','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F82818A3-42BC-58CA-827A-6A771631682A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F82818A3-42BC-58CA-827A-6A771631682A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'F82818A3-42BC-58CA-827A-6A771631682A','6D308E16-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '28C756D8-963A-5A21-9CD0-83CA7BC7068C', 'sequence': {'long': 2391}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6D308EC4-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706932813349955, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'28C756D8-963A-5A21-9CD0-83CA7BC7068C','2391','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6D308EC4-36C2-11E8-BF66-D9AA8AFF4A69','1522706932813349955','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'28C756D8-963A-5A21-9CD0-83CA7BC7068C','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'28C756D8-963A-5A21-9CD0-83CA7BC7068C','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'28C756D8-963A-5A21-9CD0-83CA7BC7068C','6D308EC4-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6DC7A74F-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6DC7A74F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6DC7A74F-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6DC7A74F-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6DC7A673-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6DC7A673-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6DC7A673-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6DC7A673-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '55FA6844-090B-5407-B5FD-89F15A3D4C2A', 'sequence': {'long': 2392}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6DC7A673-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6DC7A74F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706932813349955, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'55FA6844-090B-5407-B5FD-89F15A3D4C2A','2392','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6DC7A673-36C2-11E8-BF66-D9AA8AFF4A69','6DC7A74F-36C2-11E8-BF66-D9AA8AFF4A69','1522706932813349955','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'55FA6844-090B-5407-B5FD-89F15A3D4C2A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'55FA6844-090B-5407-B5FD-89F15A3D4C2A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'55FA6844-090B-5407-B5FD-89F15A3D4C2A','6DC7A673-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'55FA6844-090B-5407-B5FD-89F15A3D4C2A','6DC7A74F-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F93CDE80-393B-5317-B962-48666116A854', 'sequence': {'long': 2393}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706932813349955, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F93CDE80-393B-5317-B962-48666116A854','2393','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706932813349955','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F93CDE80-393B-5317-B962-48666116A854','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F93CDE80-393B-5317-B962-48666116A854','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '0FB84C1B-BC23-5009-8428-BD0FA428B907', 'sequence': {'long': 2394}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706932813349955, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'0FB84C1B-BC23-5009-8428-BD0FA428B907','2394','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706932813349955','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'0FB84C1B-BC23-5009-8428-BD0FA428B907','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'0FB84C1B-BC23-5009-8428-BD0FA428B907','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C7FAE3F6-F844-53E7-B651-EF29F789AF44', 'sequence': {'long': 2395}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706932813349955, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C7FAE3F6-F844-53E7-B651-EF29F789AF44','2395','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706932813349955','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C7FAE3F6-F844-53E7-B651-EF29F789AF44','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C7FAE3F6-F844-53E7-B651-EF29F789AF44','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AD2A074F-4166-5E95-AED7-EE9848DA6A11', 'sequence': {'long': 2396}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706932813349955, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AD2A074F-4166-5E95-AED7-EE9848DA6A11','2396','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706932813349955','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AD2A074F-4166-5E95-AED7-EE9848DA6A11','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AD2A074F-4166-5E95-AED7-EE9848DA6A11','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B2DF7C7D-35BD-501A-89C9-F30F22FC904A', 'sequence': {'long': 2397}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6DC7A673-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706933813351281, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B2DF7C7D-35BD-501A-89C9-F30F22FC904A','2397','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6DC7A673-36C2-11E8-BF66-D9AA8AFF4A69','1522706933813351281','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B2DF7C7D-35BD-501A-89C9-F30F22FC904A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B2DF7C7D-35BD-501A-89C9-F30F22FC904A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B2DF7C7D-35BD-501A-89C9-F30F22FC904A','6DC7A673-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '603794AD-0275-5954-BB02-C9B0B89F0FB2', 'sequence': {'long': 2398}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6DC7A74F-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706933813351281, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'603794AD-0275-5954-BB02-C9B0B89F0FB2','2398','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6DC7A74F-36C2-11E8-BF66-D9AA8AFF4A69','1522706933813351281','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'603794AD-0275-5954-BB02-C9B0B89F0FB2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'603794AD-0275-5954-BB02-C9B0B89F0FB2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'603794AD-0275-5954-BB02-C9B0B89F0FB2','6DC7A74F-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6E603DAE-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6E603DAE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6E603DAE-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6E603DAE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6E603CD0-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6E603CD0-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6E603CD0-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6E603CD0-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FA32816A-F4E2-5FFC-9902-4248F456736E', 'sequence': {'long': 2399}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6E603CD0-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6E603DAE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706933813351281, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FA32816A-F4E2-5FFC-9902-4248F456736E','2399','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6E603CD0-36C2-11E8-BF66-D9AA8AFF4A69','6E603DAE-36C2-11E8-BF66-D9AA8AFF4A69','1522706933813351281','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FA32816A-F4E2-5FFC-9902-4248F456736E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FA32816A-F4E2-5FFC-9902-4248F456736E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FA32816A-F4E2-5FFC-9902-4248F456736E','6E603CD0-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'FA32816A-F4E2-5FFC-9902-4248F456736E','6E603DAE-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '615015ED-9169-5188-AE9E-30B91B7C86C8', 'sequence': {'long': 2400}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706933813351281, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'615015ED-9169-5188-AE9E-30B91B7C86C8','2400','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706933813351281','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'615015ED-9169-5188-AE9E-30B91B7C86C8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'615015ED-9169-5188-AE9E-30B91B7C86C8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7FD1EDDB-B268-5E7D-8C35-41B0F20693E6', 'sequence': {'long': 2401}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706933813351281, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7FD1EDDB-B268-5E7D-8C35-41B0F20693E6','2401','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706933813351281','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7FD1EDDB-B268-5E7D-8C35-41B0F20693E6','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7FD1EDDB-B268-5E7D-8C35-41B0F20693E6','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9F3F3FA9-E228-559B-9600-1F252A8E222A', 'sequence': {'long': 2402}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706933813351281, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9F3F3FA9-E228-559B-9600-1F252A8E222A','2402','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706933813351281','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9F3F3FA9-E228-559B-9600-1F252A8E222A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9F3F3FA9-E228-559B-9600-1F252A8E222A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C852AB4A-D361-58D6-A490-DDF376423408', 'sequence': {'long': 2403}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706933813351281, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C852AB4A-D361-58D6-A490-DDF376423408','2403','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706933813351281','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C852AB4A-D361-58D6-A490-DDF376423408','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C852AB4A-D361-58D6-A490-DDF376423408','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'ED45E18A-73F3-55C4-83C6-674D3072A873', 'sequence': {'long': 2404}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6E603CD0-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706934813349677, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'ED45E18A-73F3-55C4-83C6-674D3072A873','2404','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6E603CD0-36C2-11E8-BF66-D9AA8AFF4A69','1522706934813349677','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'ED45E18A-73F3-55C4-83C6-674D3072A873','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'ED45E18A-73F3-55C4-83C6-674D3072A873','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'ED45E18A-73F3-55C4-83C6-674D3072A873','6E603CD0-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D24998EA-DEB1-5D4F-96D1-FD28BDBFD46A', 'sequence': {'long': 2405}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6E603DAE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706934813349677, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D24998EA-DEB1-5D4F-96D1-FD28BDBFD46A','2405','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6E603DAE-36C2-11E8-BF66-D9AA8AFF4A69','1522706934813349677','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D24998EA-DEB1-5D4F-96D1-FD28BDBFD46A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D24998EA-DEB1-5D4F-96D1-FD28BDBFD46A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D24998EA-DEB1-5D4F-96D1-FD28BDBFD46A','6E603DAE-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6EF8C694-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6EF8C694-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6EF8C694-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6EF8C694-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6EF8C5E2-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6EF8C5E2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6EF8C5E2-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6EF8C5E2-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3E3C0DC-8092-5289-9DB3-F1433667CD69', 'sequence': {'long': 2406}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6EF8C5E2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6EF8C694-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706934813349677, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3E3C0DC-8092-5289-9DB3-F1433667CD69','2406','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6EF8C5E2-36C2-11E8-BF66-D9AA8AFF4A69','6EF8C694-36C2-11E8-BF66-D9AA8AFF4A69','1522706934813349677','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3E3C0DC-8092-5289-9DB3-F1433667CD69','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3E3C0DC-8092-5289-9DB3-F1433667CD69','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'B3E3C0DC-8092-5289-9DB3-F1433667CD69','6EF8C5E2-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'B3E3C0DC-8092-5289-9DB3-F1433667CD69','6EF8C694-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '7D7732E0-DB95-5AAD-BA75-0339B7FE74F3', 'sequence': {'long': 2407}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706934813349677, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'7D7732E0-DB95-5AAD-BA75-0339B7FE74F3','2407','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706934813349677','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7D7732E0-DB95-5AAD-BA75-0339B7FE74F3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7D7732E0-DB95-5AAD-BA75-0339B7FE74F3','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F490C908-2AEA-5DC8-A699-2CAF0213D66A', 'sequence': {'long': 2408}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706934813349677, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F490C908-2AEA-5DC8-A699-2CAF0213D66A','2408','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706934813349677','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F490C908-2AEA-5DC8-A699-2CAF0213D66A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F490C908-2AEA-5DC8-A699-2CAF0213D66A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B9174B18-AF78-583B-A911-D9828491BEF2', 'sequence': {'long': 2409}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706934813349677, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B9174B18-AF78-583B-A911-D9828491BEF2','2409','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706934813349677','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B9174B18-AF78-583B-A911-D9828491BEF2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B9174B18-AF78-583B-A911-D9828491BEF2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B295FE0A-79BE-55D0-85C6-8CDEA86AF40D', 'sequence': {'long': 2410}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706934813349677, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B295FE0A-79BE-55D0-85C6-8CDEA86AF40D','2410','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706934813349677','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B295FE0A-79BE-55D0-85C6-8CDEA86AF40D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B295FE0A-79BE-55D0-85C6-8CDEA86AF40D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '297FDB85-0EAA-5CB7-AB5A-A6FB7AD199DA', 'sequence': {'long': 2411}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6EF8C5E2-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706935813350973, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'297FDB85-0EAA-5CB7-AB5A-A6FB7AD199DA','2411','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6EF8C5E2-36C2-11E8-BF66-D9AA8AFF4A69','1522706935813350973','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'297FDB85-0EAA-5CB7-AB5A-A6FB7AD199DA','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'297FDB85-0EAA-5CB7-AB5A-A6FB7AD199DA','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'297FDB85-0EAA-5CB7-AB5A-A6FB7AD199DA','6EF8C5E2-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '14D41289-673D-54C1-ABA5-42F99FB2B91A', 'sequence': {'long': 2412}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6EF8C694-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706935813350973, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'14D41289-673D-54C1-ABA5-42F99FB2B91A','2412','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6EF8C694-36C2-11E8-BF66-D9AA8AFF4A69','1522706935813350973','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'14D41289-673D-54C1-ABA5-42F99FB2B91A','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'14D41289-673D-54C1-ABA5-42F99FB2B91A','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'14D41289-673D-54C1-ABA5-42F99FB2B91A','6EF8C694-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6F91734B-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6F91734B-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6F91734B-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6F91734B-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '6F91722E-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'6F91722E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6F91722E-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6F91722E-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D2DA79B4-A543-5072-8EA9-5DC7AF500AFB', 'sequence': {'long': 2413}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6F91722E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '6F91734B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706935813350973, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D2DA79B4-A543-5072-8EA9-5DC7AF500AFB','2413','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6F91722E-36C2-11E8-BF66-D9AA8AFF4A69','6F91734B-36C2-11E8-BF66-D9AA8AFF4A69','1522706935813350973','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D2DA79B4-A543-5072-8EA9-5DC7AF500AFB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D2DA79B4-A543-5072-8EA9-5DC7AF500AFB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'D2DA79B4-A543-5072-8EA9-5DC7AF500AFB','6F91722E-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'D2DA79B4-A543-5072-8EA9-5DC7AF500AFB','6F91734B-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '9894586A-4891-5522-9E9F-2423014E372D', 'sequence': {'long': 2414}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706935813350973, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'9894586A-4891-5522-9E9F-2423014E372D','2414','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706935813350973','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'9894586A-4891-5522-9E9F-2423014E372D','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'9894586A-4891-5522-9E9F-2423014E372D','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'D887A47E-E677-5E6A-988E-6E262B6E02D3', 'sequence': {'long': 2415}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706935813350973, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'D887A47E-E677-5E6A-988E-6E262B6E02D3','2415','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706935813350973','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'D887A47E-E677-5E6A-988E-6E262B6E02D3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'D887A47E-E677-5E6A-988E-6E262B6E02D3','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B4D1C27A-F5C6-5021-8E85-9878AC1AFEA1', 'sequence': {'long': 2416}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706935813350973, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B4D1C27A-F5C6-5021-8E85-9878AC1AFEA1','2416','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706935813350973','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B4D1C27A-F5C6-5021-8E85-9878AC1AFEA1','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B4D1C27A-F5C6-5021-8E85-9878AC1AFEA1','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '156691BF-17BB-5F52-AE40-23353DB40DFE', 'sequence': {'long': 2417}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706935813350973, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'156691BF-17BB-5F52-AE40-23353DB40DFE','2417','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706935813350973','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'156691BF-17BB-5F52-AE40-23353DB40DFE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'156691BF-17BB-5F52-AE40-23353DB40DFE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FB701EF1-2EEB-538F-A4CE-1178CCB366EE', 'sequence': {'long': 2418}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6F91722E-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706936813350260, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FB701EF1-2EEB-538F-A4CE-1178CCB366EE','2418','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6F91722E-36C2-11E8-BF66-D9AA8AFF4A69','1522706936813350260','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FB701EF1-2EEB-538F-A4CE-1178CCB366EE','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FB701EF1-2EEB-538F-A4CE-1178CCB366EE','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FB701EF1-2EEB-538F-A4CE-1178CCB366EE','6F91722E-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '79322580-24B3-5915-A048-D4516BDD2BA5', 'sequence': {'long': 2419}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '6F91734B-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706936813350260, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'79322580-24B3-5915-A048-D4516BDD2BA5','2419','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','6F91734B-36C2-11E8-BF66-D9AA8AFF4A69','1522706936813350260','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'79322580-24B3-5915-A048-D4516BDD2BA5','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'79322580-24B3-5915-A048-D4516BDD2BA5','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'79322580-24B3-5915-A048-D4516BDD2BA5','6F91734B-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '7029F07D-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'7029F07D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7029F07D-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7029F07D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '7029EFCE-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'7029EFCE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'7029EFCE-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'7029EFCE-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '670AFAA3-20F5-5923-98EA-60836751B250', 'sequence': {'long': 2420}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7029EFCE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '7029F07D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706936813350260, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'670AFAA3-20F5-5923-98EA-60836751B250','2420','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','7029EFCE-36C2-11E8-BF66-D9AA8AFF4A69','7029F07D-36C2-11E8-BF66-D9AA8AFF4A69','1522706936813350260','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'670AFAA3-20F5-5923-98EA-60836751B250','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'670AFAA3-20F5-5923-98EA-60836751B250','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'670AFAA3-20F5-5923-98EA-60836751B250','7029EFCE-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'670AFAA3-20F5-5923-98EA-60836751B250','7029F07D-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DCD5BA2B-DEE8-5522-A692-73C15A914C80', 'sequence': {'long': 2421}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706936813350260, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DCD5BA2B-DEE8-5522-A692-73C15A914C80','2421','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706936813350260','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DCD5BA2B-DEE8-5522-A692-73C15A914C80','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DCD5BA2B-DEE8-5522-A692-73C15A914C80','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '07C644EB-0C59-5731-803C-D6C5602C6850', 'sequence': {'long': 2422}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706936813350260, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'07C644EB-0C59-5731-803C-D6C5602C6850','2422','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706936813350260','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'07C644EB-0C59-5731-803C-D6C5602C6850','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'07C644EB-0C59-5731-803C-D6C5602C6850','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '742779CE-8376-5D5E-AD3D-401A2F312094', 'sequence': {'long': 2423}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706936813350260, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'742779CE-8376-5D5E-AD3D-401A2F312094','2423','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706936813350260','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'742779CE-8376-5D5E-AD3D-401A2F312094','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'742779CE-8376-5D5E-AD3D-401A2F312094','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'EAC7EE7A-A42A-5911-A977-8E3C158A4679', 'sequence': {'long': 2424}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706936813350260, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'EAC7EE7A-A42A-5911-A977-8E3C158A4679','2424','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706936813350260','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'EAC7EE7A-A42A-5911-A977-8E3C158A4679','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'EAC7EE7A-A42A-5911-A977-8E3C158A4679','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'AEA73AA1-9A91-5C68-9DF8-C80EA7C8F7F8', 'sequence': {'long': 2425}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7029EFCE-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706937813349765, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'AEA73AA1-9A91-5C68-9DF8-C80EA7C8F7F8','2425','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','7029EFCE-36C2-11E8-BF66-D9AA8AFF4A69','1522706937813349765','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'AEA73AA1-9A91-5C68-9DF8-C80EA7C8F7F8','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'AEA73AA1-9A91-5C68-9DF8-C80EA7C8F7F8','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'AEA73AA1-9A91-5C68-9DF8-C80EA7C8F7F8','7029EFCE-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '34C3BB71-4DE3-5103-B9E4-BC99A2A480A3', 'sequence': {'long': 2426}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '7029F07D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706937813349765, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'34C3BB71-4DE3-5103-B9E4-BC99A2A480A3','2426','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','7029F07D-36C2-11E8-BF66-D9AA8AFF4A69','1522706937813349765','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'34C3BB71-4DE3-5103-B9E4-BC99A2A480A3','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'34C3BB71-4DE3-5103-B9E4-BC99A2A480A3','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'34C3BB71-4DE3-5103-B9E4-BC99A2A480A3','7029F07D-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '70C2A242-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'70C2A242-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'70C2A242-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'70C2A242-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '70C2A12D-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'70C2A12D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'70C2A12D-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'70C2A12D-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '548E4E61-046C-5DF6-B8E3-635F19FE8CBB', 'sequence': {'long': 2427}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '70C2A12D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '70C2A242-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706937813349765, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'548E4E61-046C-5DF6-B8E3-635F19FE8CBB','2427','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','70C2A12D-36C2-11E8-BF66-D9AA8AFF4A69','70C2A242-36C2-11E8-BF66-D9AA8AFF4A69','1522706937813349765','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'548E4E61-046C-5DF6-B8E3-635F19FE8CBB','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'548E4E61-046C-5DF6-B8E3-635F19FE8CBB','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'548E4E61-046C-5DF6-B8E3-635F19FE8CBB','70C2A12D-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'548E4E61-046C-5DF6-B8E3-635F19FE8CBB','70C2A242-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'B3D1F5C8-B6C9-5920-8F67-7C54DE36C475', 'sequence': {'long': 2428}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706937813349765, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'B3D1F5C8-B6C9-5920-8F67-7C54DE36C475','2428','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706937813349765','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'B3D1F5C8-B6C9-5920-8F67-7C54DE36C475','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'B3D1F5C8-B6C9-5920-8F67-7C54DE36C475','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '88E19431-AE57-5DB2-8B5F-DC603A24EA8F', 'sequence': {'long': 2429}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706937813349765, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'88E19431-AE57-5DB2-8B5F-DC603A24EA8F','2429','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706937813349765','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'88E19431-AE57-5DB2-8B5F-DC603A24EA8F','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'88E19431-AE57-5DB2-8B5F-DC603A24EA8F','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A674A28B-AF23-57D7-9B57-A6854F198A98', 'sequence': {'long': 2430}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706937813349765, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A674A28B-AF23-57D7-9B57-A6854F198A98','2430','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706937813349765','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A674A28B-AF23-57D7-9B57-A6854F198A98','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A674A28B-AF23-57D7-9B57-A6854F198A98','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'DE1F55FF-95DE-5953-BCBD-29452861D4C2', 'sequence': {'long': 2431}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706937813349765, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'DE1F55FF-95DE-5953-BCBD-29452861D4C2','2431','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706937813349765','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'DE1F55FF-95DE-5953-BCBD-29452861D4C2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'DE1F55FF-95DE-5953-BCBD-29452861D4C2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C55BA01F-DF64-5F4D-8A92-B626A8BE0CF2', 'sequence': {'long': 2432}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '70C2A12D-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706938813349992, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C55BA01F-DF64-5F4D-8A92-B626A8BE0CF2','2432','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','70C2A12D-36C2-11E8-BF66-D9AA8AFF4A69','1522706938813349992','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C55BA01F-DF64-5F4D-8A92-B626A8BE0CF2','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C55BA01F-DF64-5F4D-8A92-B626A8BE0CF2','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C55BA01F-DF64-5F4D-8A92-B626A8BE0CF2','70C2A12D-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '5D3C48F3-FA7C-5354-BEEF-FE5F090C8219', 'sequence': {'long': 2433}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '70C2A242-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706938813349992, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '28', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'5D3C48F3-FA7C-5354-BEEF-FE5F090C8219','2433','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','70C2A242-36C2-11E8-BF66-D9AA8AFF4A69','1522706938813349992','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','28','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'5D3C48F3-FA7C-5354-BEEF-FE5F090C8219','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'5D3C48F3-FA7C-5354-BEEF-FE5F090C8219','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'5D3C48F3-FA7C-5354-BEEF-FE5F090C8219','70C2A242-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '715B3416-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'715B3416-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'715B3416-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'715B3416-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.FileObject': {'uuid': '715B3364-36C2-11E8-BF66-D9AA8AFF4A69', 'baseObject': {'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'permission': None, 'epoch': None, 'properties': {'map': {}}}, 'type': 'FILE_OBJECT_UNIX_SOCKET', 'fileDescriptor': None, 'localPrincipal': None, 'size': None, 'peInfo': None, 'hashes': None}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO fileobject (line, uuid,baseObject_hostId,type) VALUES (nextval('line_number_seq'),'715B3364-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','FILE_OBJECT_UNIX_SOCKET');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'715B3364-36C2-11E8-BF66-D9AA8AFF4A69','FileObject');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'715B3364-36C2-11E8-BF66-D9AA8AFF4A69','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','residesOn') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'C3332D8F-404D-57B9-B2C8-BFC518532174', 'sequence': {'long': 2434}, 'type': 'EVENT_CREATE_OBJECT', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '715B3364-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': {'com.bbn.tc.schema.avro.cdm18.UUID': '715B3416-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject2Path': None, 'timestampNanos': 1522706938813349992, 'name': {'string': 'aue_socketpair'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'ret_fd2': '28', 'ret_fd1': '17', 'return_value': '0', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,predicateObject2_UUID,timestampNanos,name_string,properties_map_host,properties_map_ret_fd2,properties_map_ret_fd1,properties_map_return_value,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'C3332D8F-404D-57B9-B2C8-BFC518532174','2434','EVENT_CREATE_OBJECT','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','715B3364-36C2-11E8-BF66-D9AA8AFF4A69','715B3416-36C2-11E8-BF66-D9AA8AFF4A69','1522706938813349992','aue_socketpair','83c8ed1f-5045-dbcd-b39f-918f0df4f851','28','17','0','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'C3332D8F-404D-57B9-B2C8-BFC518532174','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'C3332D8F-404D-57B9-B2C8-BFC518532174','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'C3332D8F-404D-57B9-B2C8-BFC518532174','715B3364-36C2-11E8-BF66-D9AA8AFF4A69','affects'),(nextval('edge_number_seq'),'C3332D8F-404D-57B9-B2C8-BFC518532174','715B3416-36C2-11E8-BF66-D9AA8AFF4A69','affects2') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': '6551AA1F-137F-5613-8B00-7799599B3768', 'sequence': {'long': 2435}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706938813349992, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'6551AA1F-137F-5613-8B00-7799599B3768','2435','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706938813349992','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'6551AA1F-137F-5613-8B00-7799599B3768','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'6551AA1F-137F-5613-8B00-7799599B3768','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'BCFDD60C-57A1-5610-99D5-F9958582A327', 'sequence': {'long': 2436}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706938813349992, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'BCFDD60C-57A1-5610-99D5-F9958582A327','2436','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706938813349992','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'BCFDD60C-57A1-5610-99D5-F9958582A327','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'BCFDD60C-57A1-5610-99D5-F9958582A327','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'A258ADFE-1B38-539F-A9DD-504FF96561E9', 'sequence': {'long': 2437}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706938813349992, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '03'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '2', 'fd': '3', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'A258ADFE-1B38-539F-A9DD-504FF96561E9','2437','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706938813349992','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','03','83c8ed1f-5045-dbcd-b39f-918f0df4f851','2','3','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'A258ADFE-1B38-539F-A9DD-504FF96561E9','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'A258ADFE-1B38-539F-A9DD-504FF96561E9','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'F1660A68-21B8-5862-85FB-81F391D6BB9E', 'sequence': {'long': 2438}, 'type': 'EVENT_FCNTL', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': None, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706938813349992, 'name': {'string': 'aue_fcntl'}, 'parameters': {'array': [{'size': -1, 'type': 'VALUE_TYPE_CONTROL', 'valueDataType': 'VALUE_DATA_TYPE_INT', 'isNull': False, 'name': {'string': 'cmd'}, 'runtimeDataType': None, 'valueBytes': {'bytes': '04'}, 'provenance': None, 'tag': None, 'components': None}]}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '4', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,timestampNanos,name_string,parameters_array_0_size,parameters_array_0_type,parameters_array_0_valueDataType,parameters_array_0_isNull,parameters_array_0_name_string,parameters_array_0_valueBytes_bytes,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'F1660A68-21B8-5862-85FB-81F391D6BB9E','2438','EVENT_FCNTL','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','1522706938813349992','aue_fcntl','-1','VALUE_TYPE_CONTROL','VALUE_DATA_TYPE_INT','False','cmd','04','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','4','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'F1660A68-21B8-5862-85FB-81F391D6BB9E','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'F1660A68-21B8-5862-85FB-81F391D6BB9E','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy') ;\n", + "\n", + "new message: {'datum': {'com.bbn.tc.schema.avro.cdm18.Event': {'uuid': 'FB1FC7CD-23A6-5647-8B95-9E7DAA653D16', 'sequence': {'long': 2439}, 'type': 'EVENT_CLOSE', 'threadId': {'int': 100117}, 'hostId': '83C8ED1F-5045-DBCD-B39F-918F0DF4F851', 'subject': {'com.bbn.tc.schema.avro.cdm18.UUID': '72FB0406-3678-11E8-BF66-D9AA8AFF4A69'}, 'predicateObject': {'com.bbn.tc.schema.avro.cdm18.UUID': '715B3364-36C2-11E8-BF66-D9AA8AFF4A69'}, 'predicateObjectPath': None, 'predicateObject2': None, 'predicateObject2Path': None, 'timestampNanos': 1522706939813348908, 'name': {'string': 'aue_close'}, 'parameters': {'array': []}, 'location': None, 'size': None, 'programPoint': None, 'properties': {'map': {'host': '83c8ed1f-5045-dbcd-b39f-918f0df4f851', 'return_value': '0', 'fd': '17', 'exec': 'python2.7', 'ppid': '1'}}}}, 'CDMVersion': '18', 'source': 'SOURCE_FREEBSD_DTRACE_CADETS'}\n", + "\n", + "parsing message: \n", + "Insert Query 1: INSERT INTO event (line, uuid,sequence_long,type,threadId_int,hostId,subject_UUID,predicateObject_UUID,timestampNanos,name_string,properties_map_host,properties_map_return_value,properties_map_fd,properties_map_exec,properties_map_ppid) VALUES (nextval('line_number_seq'),'FB1FC7CD-23A6-5647-8B95-9E7DAA653D16','2439','EVENT_CLOSE','100117','83C8ED1F-5045-DBCD-B39F-918F0DF4F851','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','715B3364-36C2-11E8-BF66-D9AA8AFF4A69','1522706939813348908','aue_close','83c8ed1f-5045-dbcd-b39f-918f0df4f851','0','17','python2.7','1');\n", + "Insert Query 2: INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),'FB1FC7CD-23A6-5647-8B95-9E7DAA653D16','Event');\n", + "Insert Query 3: INSERT INTO edge_list (edge_no, source, dest, edge_type ) VALUES (nextval('edge_number_seq'),'FB1FC7CD-23A6-5647-8B95-9E7DAA653D16','72FB0406-3678-11E8-BF66-D9AA8AFF4A69','isGeneratedBy'),(nextval('edge_number_seq'),'FB1FC7CD-23A6-5647-8B95-9E7DAA653D16','715B3364-36C2-11E8-BF66-D9AA8AFF4A69','affects') ;\n" + ] + }, + { + "ename": "KeyboardInterrupt", + "evalue": "", + "output_type": "error", + "traceback": [ + "\u001b[1;31m---------------------------------------------------------------------------\u001b[0m", + "\u001b[1;31mKeyboardInterrupt\u001b[0m Traceback (most recent call last)", + "\u001b[1;32mC:\\Users\\SVEN-O~1\\AppData\\Local\\Temp/ipykernel_9780/4244516374.py\u001b[0m in \u001b[0;36m<module>\u001b[1;34m\u001b[0m\n\u001b[0;32m 270\u001b[0m \u001b[0mi\u001b[0m \u001b[1;33m=\u001b[0m \u001b[1;36m0\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 271\u001b[0m \u001b[1;32mwhile\u001b[0m \u001b[0mi\u001b[0m \u001b[1;33m<\u001b[0m \u001b[0mabort_time_limit\u001b[0m\u001b[1;33m:\u001b[0m \u001b[1;31m#and client.failed_connect == False:\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[1;32m--> 272\u001b[1;33m \u001b[0mtime\u001b[0m\u001b[1;33m.\u001b[0m\u001b[0msleep\u001b[0m\u001b[1;33m(\u001b[0m\u001b[1;36m1\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0m\u001b[0;32m 273\u001b[0m \u001b[0mi\u001b[0m \u001b[1;33m+=\u001b[0m \u001b[1;36m1\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 274\u001b[0m \u001b[1;32mif\u001b[0m \u001b[0mclient\u001b[0m\u001b[1;33m.\u001b[0m\u001b[0mfailed_connect\u001b[0m \u001b[1;33m==\u001b[0m \u001b[1;32mTrue\u001b[0m\u001b[1;33m:\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n", + "\u001b[1;31mKeyboardInterrupt\u001b[0m: " + ] + } + ], "source": [ "import paho.mqtt.client as mqtt \n", "import time \n", @@ -134,8 +18948,10 @@ "pg_db = str(os.getenv('postgres',default='postgres'))\n", "broker_hostname=str(os.getenv('mos_host',default=\"localhost\"))\n", "broker_port = int(os.getenv('mos_port',default=1883)) \n", + "file_path = str(os.getenv('path_sql_script',default='C:\\\\Studium_MIN\\\\05_Masterarbeit\\\\thesis\\\\ma_code\\\\code\\\\infrastructure\\\\streaming\\\\clients\\\\sub\\\\postgres\\\\'))\n", + "schema_script_file = str(os.getenv('schema_script',default='import_node_edge.txt'))\n", "\n", - "client = mqtt.Client(\"Client3\")\n", + "client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,\"postgres\",clean_session=False)\n", "abort_time_limit = int(os.getenv('abort_time_limit', default=99999))\n", "\n", "def flatten_obj(key, val, target):\n", @@ -224,24 +19040,24 @@ " keys = json.keys()\n", "\n", " if node_type == 'Event':\n", - " rel = 'runsOn'\n", - " key = f\"{key_header}_hostId\"\n", - " add_edge(key, keys, rel, dest, edge_type,json) \n", + " # rel = 'runsOn'\n", + " # key = f\"{key_header}_hostId\"\n", + " # add_edge(key, keys, rel, dest, edge_type,json) \n", "\n", " rel = 'isGeneratedBy'\n", " key = f\"{key_header}_subject{key_postfix}\"\n", " add_edge(key, keys, rel, dest, edge_type,json) \n", "\n", - " rel = 'predicateObject'\n", + " rel = 'affects'\n", " key = f\"{key_header}_predicateObject{key_postfix}\"\n", " add_edge(key, keys, rel, dest, edge_type,json) \n", "\n", - " rel = 'predicateObject2'\n", + " rel = 'affects2'\n", " key = f\"{key_header}_predicateObject2{key_postfix}\"\n", " add_edge(key, keys, rel, dest, edge_type,json) \n", "\n", " if node_type =='Subject':\n", - " rel = 'parentSubject'\n", + " rel = 'hasParent'\n", " key = f\"{key_header}_parentSubject{key_postfix}\"\n", " add_edge(key, keys, rel, dest, edge_type,json)\n", "\n", @@ -276,37 +19092,43 @@ " add_edge(key, keys, rel, dest, edge_type,json) \n", "\n", " if node_type =='UnnamedPipeObject':\n", - " rel = 'resides_on'\n", + " \n", + " rel = 'residesOn'\n", " key = f\"{key_header}_baseObject_hostId\"\n", " add_edge(key, keys, rel, dest, edge_type,json) \n", "\n", - " rel = 'affects1'\n", - " key = f\"{key_header}_sourceUUID\"\n", + " rel = 'affects'\n", + " key = f\"{key_header}_sourceUUID{key_postfix}\"\n", " add_edge(key, keys, rel, dest, edge_type,json) \n", "\n", " rel = 'affects2'\n", - " key = f\"{key_header}_sinkUUID\"\n", + " key = f\"{key_header}_sinkUUID{key_postfix}\"\n", " add_edge(key, keys, rel, dest, edge_type,json) \n", "\n", " edge_values = [source,dest,edge_type]\n", " \n", " queries = []\n", " # node into each table\n", - " q1 = f\"INSERT INTO {table_name} (line, {','.join(columns)}) VALUES (nextval('line_number_seq'),{','.join(values)})\"\n", + " q1 = f\"INSERT INTO {table_name} (line, {','.join(columns)}) VALUES (nextval('line_number_seq'),{','.join(values)});\"\n", " queries.append(q1)\n", " # node into node list\n", - " q2 = f\"INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),{','.join(node_values)})\"\n", + " q2 = f\"INSERT INTO node_list (node_no, uuid, type) VALUES ( nextval('node_number_seq'),{','.join(node_values)});\"\n", " queries.append(q2)\n", "\n", " # edge into edge list\n", - " print(\"edge_values: \",edge_values)\n", " if len(edge_values[1]) != 0:\n", " q3 = create_edge_insert_query(edge_values)\n", " queries.append(q3)\n", " else:\n", " print(\"no edges\")\n", "\n", - " return queries\n", + " # print queries for debugging\n", + " j = 0\n", + " for q in queries:\n", + " j+=1\n", + " print(f\"Insert Query {j}:\", q)\n", + "\n", + " return \"\"#queries\n", "\n", "def handle_message(m):\n", " print('\\nnew message: ',m)\n", @@ -317,10 +19139,8 @@ " flat_json = {} \n", " flatten_obj(\"\",m,flat_json)\n", " queries = parse_json_to_sql_query(flat_json,node_type)\n", - " for q in queries:\n", - " execute_db_query(q)\n", - "\n", - "\n", + " #for q in queries:\n", + " # execute_db_query(q)\n", "\n", "def on_message(client, userdata, message):\n", " '''\n", @@ -328,10 +19148,10 @@ " '''\n", " data = json.loads(message.payload.decode(\"utf-8\"))\n", " # print(f\"Received message\")# {data} from: \",message.topic)\n", - " # try:\n", - " handle_message(data)\n", - " # except Exception as e:\n", - " # print(e)\n", + " try:\n", + " handle_message(data)\n", + " except Exception as e:\n", + " print(e)\n", "\n", "\n", "def on_connect(client, userdata, flags, return_code):\n", @@ -340,7 +19160,7 @@ " '''\n", " if return_code == 0:\n", " print(\"connected\")\n", - " client.subscribe(\"neo4j\")\n", + " client.subscribe(\"neo4j\",qos=1)\n", " else:\n", " print(\"could not connect, return code:\", return_code)\n", " client.failed_connect = True \n", @@ -356,13 +19176,16 @@ "\n", "def create_pg_schema():\n", " print('Create PG CDM Schema: ')\n", - " file_path = 'C:\\\\Studium_MIN\\\\05_Masterarbeit\\\\thesis\\\\ma_code\\\\code\\\\infrastructure\\\\streaming\\\\clients\\\\sub\\\\postgres\\\\import_node_edge.txt'\n", + " # file_path = 'C:\\\\Studium_MIN\\\\05_Masterarbeit\\\\thesis\\\\ma_code\\\\code\\\\infrastructure\\\\streaming\\\\clients\\\\sub\\\\postgres\\\\import_node_edge.txt'\n", + " \n", + " # TODO: Add env variable for choosing import script with indices\n", + " path = file_path+schema_script_file\n", " try:\n", - " with open(file_path, 'r') as file:\n", + " with open(path, 'r') as file:\n", " long_string = file.read()\n", " # print(long_string)\n", " except FileNotFoundError:\n", - " print(f\"The file {file_path} was not found.\")\n", + " print(f\"The file {path} was not found.\")\n", " except Exception as e:\n", " print(f\"An error occurred: {str(e)}\")\n", " q = long_string\n", @@ -376,24 +19199,422 @@ "client.on_message = on_message\n", "client.failed_connect = False\n", "\n", - "client.connect(broker_hostname,broker_port)\n", + "client.connect(broker_hostname,broker_port,keepalive=3600*4)\n", "client.loop_start()\n", "\n", "# this try-finally block ensures that whenever we terminate the program earlier by hitting ctrl+c, it still gracefully exits \n", "try:\n", " i = 0\n", - " while i < abort_time_limit and client.failed_connect == False:\n", + " while i < abort_time_limit: #and client.failed_connect == False:\n", " time.sleep(1)\n", " i += 1\n", " if client.failed_connect == True:\n", " print('Connection failed, exiting...')\n", - "\n", + "except Exception as e:\n", + " print(e)\n", "finally:\n", " client.disconnect()\n", " client.loop_stop() \n", " connection.close()\n" ] }, + { + "cell_type": "code", + "execution_count": 4, + "metadata": {}, + "outputs": [ + { + "name": "stderr", + "output_type": "stream", + "text": [ + "C:\\Users\\SVEN-O~1\\AppData\\Local\\Temp/ipykernel_15972/4285548747.py:26: DeprecationWarning: Callback API version 1 is deprecated, update to latest version\n", + " client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,\"Client1\")\n" + ] + }, + { + "name": "stdout", + "output_type": "stream", + "text": [ + "Reading file: ta1-cadets-e3-official_0.json\n", + "Max number of batches: 100.0\n", + "index: 0\n", + "i: 0\n", + "connected\n", + "Processing batch 1:\n", + "index: 1000\n", + "i: 1\n", + "Processing batch 2:\n", + "index: 2000\n", + "i: 2\n", + "Processing batch 3:\n", + "index: 3000\n", + "i: 3\n", + "Processing batch 4:\n", + "index: 4000\n", + "i: 4\n", + "Processing batch 5:\n", + "index: 5000\n", + "i: 5\n", + "Processing batch 6:\n", + "index: 6000\n", + "i: 6\n", + "Processing batch 7:\n", + "disconnected\n" + ] + }, + { + "ename": "KeyboardInterrupt", + "evalue": "", + "output_type": "error", + "traceback": [ + "\u001b[1;31m---------------------------------------------------------------------------\u001b[0m", + "\u001b[1;31mKeyboardInterrupt\u001b[0m Traceback (most recent call last)", + "\u001b[1;32mC:\\Users\\SVEN-O~1\\AppData\\Local\\Temp/ipykernel_15972/4285548747.py\u001b[0m in \u001b[0;36m<module>\u001b[1;34m\u001b[0m\n\u001b[0;32m 99\u001b[0m \u001b[0mprint\u001b[0m\u001b[1;33m(\u001b[0m\u001b[1;34m\"Reading file: \"\u001b[0m\u001b[1;33m,\u001b[0m \u001b[0mfile\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 100\u001b[0m \u001b[0mprint\u001b[0m\u001b[1;33m(\u001b[0m\u001b[1;34m\"Max number of batches: \"\u001b[0m\u001b[1;33m,\u001b[0m\u001b[0mline_count\u001b[0m\u001b[1;33m[\u001b[0m\u001b[0mi\u001b[0m\u001b[1;33m]\u001b[0m\u001b[1;33m/\u001b[0m\u001b[0mlines_per_window\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[1;32m--> 101\u001b[1;33m \u001b[0mread_moving_window_and_send_data\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mfile_path\u001b[0m\u001b[1;33m,\u001b[0m \u001b[0mlines_per_window\u001b[0m\u001b[1;33m,\u001b[0m\u001b[0mstop_index\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0m\u001b[0;32m 102\u001b[0m \u001b[0mi\u001b[0m \u001b[1;33m+=\u001b[0m \u001b[1;36m1\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 103\u001b[0m \u001b[1;32mfinally\u001b[0m\u001b[1;33m:\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n", + "\u001b[1;32mC:\\Users\\SVEN-O~1\\AppData\\Local\\Temp/ipykernel_15972/4285548747.py\u001b[0m in \u001b[0;36mread_moving_window_and_send_data\u001b[1;34m(file_path, lines_per_window, line_count)\u001b[0m\n\u001b[0;32m 49\u001b[0m \u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 50\u001b[0m \u001b[1;31m# Process the current window_data and send a message\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[1;32m---> 51\u001b[1;33m \u001b[0mprocess_window_lines\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mwindow_data\u001b[0m\u001b[1;33m,\u001b[0m\u001b[0mi\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0m\u001b[0;32m 52\u001b[0m \u001b[1;32mexcept\u001b[0m \u001b[0mStopIteration\u001b[0m\u001b[1;33m:\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 53\u001b[0m \u001b[1;32mbreak\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n", + "\u001b[1;32mC:\\Users\\SVEN-O~1\\AppData\\Local\\Temp/ipykernel_15972/4285548747.py\u001b[0m in \u001b[0;36mprocess_window_lines\u001b[1;34m(window_data, window_nr)\u001b[0m\n\u001b[0;32m 61\u001b[0m \u001b[0mjson_string\u001b[0m \u001b[1;33m=\u001b[0m \u001b[0mjson\u001b[0m\u001b[1;33m.\u001b[0m\u001b[0mdumps\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mjson_obj\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 62\u001b[0m \u001b[0mvalues\u001b[0m\u001b[1;33m.\u001b[0m\u001b[0mappend\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mjson_string\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[1;32m---> 63\u001b[1;33m \u001b[0msend_message\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mvalues\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0m\u001b[0;32m 64\u001b[0m \u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 65\u001b[0m \u001b[1;33m\u001b[0m\u001b[0m\n", + "\u001b[1;32mC:\\Users\\SVEN-O~1\\AppData\\Local\\Temp/ipykernel_15972/4285548747.py\u001b[0m in \u001b[0;36msend_message\u001b[1;34m(messages)\u001b[0m\n\u001b[0;32m 66\u001b[0m \u001b[1;32mdef\u001b[0m \u001b[0msend_message\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mmessages\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m:\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 67\u001b[0m \u001b[0mmsg_count\u001b[0m \u001b[1;33m=\u001b[0m \u001b[1;36m1\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[1;32m---> 68\u001b[1;33m \u001b[0mtime\u001b[0m\u001b[1;33m.\u001b[0m\u001b[0msleep\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0msleep_time\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0m\u001b[0;32m 69\u001b[0m \u001b[1;32mfor\u001b[0m \u001b[0mm\u001b[0m \u001b[1;32min\u001b[0m \u001b[0mmessages\u001b[0m\u001b[1;33m:\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 70\u001b[0m \u001b[1;31m#print(m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n", + "\u001b[1;31mKeyboardInterrupt\u001b[0m: " + ] + } + ], + "source": [ + "import paho.mqtt.client as mqtt \n", + "import time \n", + "import json\n", + "import random\n", + "import os\n", + "\n", + "broker_hostname = str(os.getenv('mos_host',default=\"localhost\"))\n", + "port = int(os.getenv('mos_port',default=\"1883\")) \n", + "lines_per_window = int(os.getenv('lines_per_window',default=1000)) \n", + "path = str(os.getenv('path_data',default='C:\\\\Studium_MIN\\\\05_Masterarbeit\\\\thesis\\\\ma_code\\\\code\\\\infrastructure\\\\streaming\\\\clients\\\\pub\\\\data\\\\'))\n", + "sleep_time = int(os.getenv('sleeptime',default=1))\n", + "\n", + "files = [\n", + " 'ta1-cadets-e3-official_0.json',\n", + " # 'ta1-cadets-e3-official_1.json', \n", + " # 'ta1-cadets-e3-official_2.json',\n", + " # 'ta1-cadets-e3-official-1_0.json',\n", + " # 'ta1-cadets-e3-official-1_1.json', \n", + " # 'ta1-cadets-e3-official-1_2.json', \n", + " # 'ta1-cadets-e3-official-1_3.json',\n", + " # 'ta1-cadets-e3-official-1_4.json', \n", + " # 'ta1-cadets-e3-official-2_0.json', \n", + " # 'ta1-cadets-e3-official-2_1.json'\n", + " ]\n", + "line_count = [100000]#[4999999,4999999,3911712,4999999,4999999,4999999,4999999,4999999,2059063,4999999,3433561] # line_count corresponding to each file\n", + "client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,\"Client1\")\n", + "topic = \"neo4j\"\n", + "\n", + "def read_moving_window_and_send_data(file_path, lines_per_window, line_count):\n", + " with open(file_path, 'r') as file:\n", + " i = 0\n", + " index = 0\n", + " while True:\n", + " print(\"index: \",index)\n", + " print(\"i: \",i)\n", + " if index> stop_index:\n", + " break\n", + " try: \n", + " i += 1\n", + " index += (lines_per_window)\n", + " if i>=line_count:\n", + " break\n", + " # Read the next lines_per_window lines\n", + " window_data = [next(file) for _ in range(lines_per_window)]\n", + "\n", + " # If no more data is left, break the loop\n", + " if not window_data[0]:\n", + " break\n", + "\n", + " # Process the current window_data and send a message\n", + " process_window_lines(window_data,i)\n", + " except StopIteration:\n", + " break\n", + "\n", + "# Process a window and send a message\n", + "def process_window_lines(window_data, window_nr):\n", + " print(f\"Processing batch {window_nr}:\")\n", + " values =[]\n", + " for line in window_data:\n", + " json_obj = json.loads(line.strip())\n", + " json_string = json.dumps(json_obj)\n", + " values.append(json_string)\n", + " send_message(values)\n", + " \n", + "\n", + "def send_message(messages):\n", + " msg_count = 1\n", + " time.sleep(sleep_time)\n", + " for m in messages:\n", + " #print(m)\n", + " result = client.publish(topic,m)\n", + " status = result[0]\n", + " # if status == 0:\n", + " # #print(f'Message {str(msg_count)} from {lines_per_window} lines published')\n", + " # else:\n", + " # print(\"Failed to send message to topic \" + topic)\n", + " # if not client.is_connected():\n", + " # print(\"Client not connected, exiting...\") \n", + " msg_count +=1 \n", + "\n", + "def on_connect(client, userdata, flags, return_code):\n", + " if return_code == 0:\n", + " print(\"connected\")\n", + " else:\n", + " print(\"could not connect, return code:\", return_code)\n", + "# return values\n", + "\n", + "# client.username_pw_set(username=\"user_name\", password=\"password\") # uncomment if you use password auth\n", + "client.on_connect = on_connect\n", + "client.connect(broker_hostname, port)\n", + "client.loop_start()\n", + "index_pick_json = 0\n", + "\n", + "try:\n", + " i = 0\n", + " for file in files:\n", + " stop_index = line_count[i]\n", + " file_path = path+file\n", + " print(\"Reading file: \", file)\n", + " print(\"Max number of batches: \",line_count[i]/lines_per_window)\n", + " read_moving_window_and_send_data(file_path, lines_per_window,stop_index)\n", + " i += 1\n", + "finally:\n", + " print('disconnected')\n", + " client.disconnect()\n", + " client.loop_stop()\n" + ] + }, + { + "cell_type": "markdown", + "metadata": {}, + "source": [ + "# Mögliche Optimierung der Neo4j Subscriber..." + ] + }, + { + "cell_type": "code", + "execution_count": null, + "metadata": {}, + "outputs": [], + "source": [ + "import paho.mqtt.client as mqtt\n", + "import time\n", + "import json\n", + "from neo4j import GraphDatabase\n", + "import os\n", + "from threading import Thread\n", + "from queue import Queue\n", + "\n", + "# Existing setup for MQTT and Neo4j connection\n", + "broker_hostname = str(os.getenv('mos_host', default=\"localhost\"))\n", + "broker_port = int(os.getenv('mos_port', default=1883))\n", + "client = mqtt.Client(\"Client4\")\n", + "db_uri = str(os.getenv('mem_host', default=\"bolt://localhost:7687\"))\n", + "neo4j_auth = (\"\", \"\")\n", + "abort_time_limit = int(os.getenv('abort_time_limit', default=99999))\n", + "\n", + "# Initialize a Queue for incoming MQTT messages\n", + "message_queue = Queue()\n", + "\n", + "def flatten_obj(key, val, target):\n", + " # Your existing flatten_obj function\n", + " pass\n", + "\n", + "def parse_json_to_cypher(input):\n", + " # Your existing parse_json_to_cypher function\n", + " pass\n", + "\n", + "def create_cypher_query_from_cdm(json):\n", + " # Your existing create_cypher_query_from_cdm function\n", + " pass\n", + "\n", + "def on_message(client, userdata, message):\n", + " data = json.loads(message.payload.decode(\"utf-8\"))\n", + " # Instead of processing immediately, put the message into the queue\n", + " message_queue.put(data)\n", + "\n", + "def on_connect(client, userdata, flags, return_code):\n", + " # Your existing on_connect function\n", + " pass\n", + "\n", + "def connect_to_db(uri, auth):\n", + " # Establish db connection to neo4j\n", + " driver = GraphDatabase.driver(uri, auth=auth)\n", + " # Consider moving session cleanup and connection verification outside of this function\n", + " return driver\n", + "\n", + "def execute_batch_queries(batch):\n", + " # New function to handle batch processing of messages\n", + " with driver.session() as session:\n", + " for data in batch:\n", + " q, attr = create_cypher_query_from_cdm(data)\n", + " session.run(q, attributes=attr)\n", + "\n", + "def process_message_batch():\n", + " while True:\n", + " batch = []\n", + " while not message_queue.empty():\n", + " batch.append(message_queue.get())\n", + "\n", + " if batch:\n", + " execute_batch_queries(batch)\n", + "\n", + " for _ in batch:\n", + " message_queue.task_done()\n", + "\n", + "# Start processing thread for handling MQTT messages in batches\n", + "processing_thread = Thread(target=process_message_batch, daemon=True)\n", + "processing_thread.start()\n", + "\n", + "driver = connect_to_db(db_uri, neo4j_auth)\n", + "\n", + "client.on_connect = on_connect\n", + "client.on_message = on_message\n", + "client.connect(broker_hostname, broker_port)\n", + "client.loop_start()\n", + "\n", + "# Your MQTT client loop and cleanup logic with try-finally\n", + "try:\n", + " i = 0\n", + " while i < abort_time_limit and not client.failed_connect:\n", + " time.sleep(1)\n", + " i += 1\n", + "finally:\n", + " client.disconnect()\n", + " client.loop_stop()\n", + " driver.close()\n" + ] + }, + { + "cell_type": "markdown", + "metadata": {}, + "source": [ + "CDM Data" + ] + }, + { + "cell_type": "code", + "execution_count": null, + "metadata": {}, + "outputs": [], + "source": [] + }, + { + "cell_type": "code", + "execution_count": null, + "metadata": {}, + "outputs": [], + "source": [ + "import paho.mqtt.client as mqtt \n", + "import time \n", + "import json\n", + "import random\n", + "import os\n", + "\n", + "broker_hostname = str(os.getenv('mos_host',default=\"localhost\"))\n", + "port = int(os.getenv('mos_port',default=\"1883\")) \n", + "lines_per_window = int(os.getenv('lines_per_window',default=1000)) \n", + "path = str(os.getenv('path_data',default='C:\\\\Studium_MIN\\\\05_Masterarbeit\\\\thesis\\\\ma_code\\\\code\\\\infrastructure\\\\streaming\\\\clients\\\\pub\\\\data\\\\'))\n", + "sleep_time = int(os.getenv('sleeptime',default=1))\n", + "\n", + "files = [\n", + " 'ta1-cadets-e3-official_0.json',\n", + " # 'ta1-cadets-e3-official_1.json', \n", + " # 'ta1-cadets-e3-official_2.json',\n", + " # 'ta1-cadets-e3-official-1_0.json',\n", + " # 'ta1-cadets-e3-official-1_1.json', \n", + " # 'ta1-cadets-e3-official-1_2.json', \n", + " # 'ta1-cadets-e3-official-1_3.json',\n", + " # 'ta1-cadets-e3-official-1_4.json', \n", + " # 'ta1-cadets-e3-official-2_0.json', \n", + " # 'ta1-cadets-e3-official-2_1.json'\n", + " ]\n", + "line_count = [100000]#[4999999,4999999,3911712,4999999,4999999,4999999,4999999,4999999,2059063,4999999,3433561] # line_count corresponding to each file\n", + "client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,\"Client1\")\n", + "topic = \"neo4j\"\n", + "\n", + "def read_moving_window_and_send_data(file_path, lines_per_window, line_count):\n", + " with open(file_path, 'r') as file:\n", + " i = 0\n", + " index = 0\n", + " while True:\n", + " print(\"index: \",index)\n", + " print(\"i: \",i)\n", + " if index> stop_index:\n", + " break\n", + " try: \n", + " i += 1\n", + " index += (lines_per_window)\n", + " if i>=line_count:\n", + " break\n", + " # Read the next lines_per_window lines\n", + " window_data = [next(file) for _ in range(lines_per_window)]\n", + "\n", + " # If no more data is left, break the loop\n", + " if not window_data[0]:\n", + " break\n", + "\n", + " # Process the current window_data and send a message\n", + " process_window_lines(window_data,i)\n", + " except StopIteration:\n", + " break\n", + "\n", + "# Process a window and send a message\n", + "def process_window_lines(window_data, window_nr):\n", + " print(f\"Processing batch {window_nr}:\")\n", + " values =[]\n", + " for line in window_data:\n", + " json_obj = json.loads(line.strip())\n", + " json_string = json.dumps(json_obj)\n", + " values.append(json_string)\n", + " send_message(values)\n", + " \n", + "\n", + "def send_message(messages):\n", + " msg_count = 1\n", + " time.sleep(sleep_time)\n", + " for m in messages:\n", + " #print(m)\n", + " result = client.publish(topic,m)\n", + " status = result[0]\n", + " # if status == 0:\n", + " # #print(f'Message {str(msg_count)} from {lines_per_window} lines published')\n", + " # else:\n", + " # print(\"Failed to send message to topic \" + topic)\n", + " # if not client.is_connected():\n", + " # print(\"Client not connected, exiting...\") \n", + " msg_count +=1 \n", + "\n", + "def on_connect(client, userdata, flags, return_code):\n", + " if return_code == 0:\n", + " print(\"connected\")\n", + " else:\n", + " print(\"could not connect, return code:\", return_code)\n", + "# return values\n", + "\n", + "# client.username_pw_set(username=\"user_name\", password=\"password\") # uncomment if you use password auth\n", + "client.on_connect = on_connect\n", + "client.connect(broker_hostname, port)\n", + "client.loop_start()\n", + "index_pick_json = 0\n", + "\n", + "try:\n", + " i = 0\n", + " for file in files:\n", + " stop_index = line_count[i]\n", + " file_path = path+file\n", + " print(\"Reading file: \", file)\n", + " print(\"Max number of batches: \",line_count[i]/lines_per_window)\n", + " read_moving_window_and_send_data(file_path, lines_per_window,stop_index)\n", + " i += 1\n", + "finally:\n", + " print('disconnected')\n", + " client.disconnect()\n", + " client.loop_stop()\n" + ] + }, { "cell_type": "markdown", "metadata": {}, @@ -536,9 +19757,161 @@ }, { "cell_type": "code", - "execution_count": null, + "execution_count": 3, "metadata": {}, - "outputs": [], + "outputs": [ + { + "name": "stdout", + "output_type": "stream", + "text": [ + "Reading file: ta1-cadets-e3-official_1.json\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n", + "Processing window:\n" + ] + }, + { + "ename": "KeyboardInterrupt", + "evalue": "", + "output_type": "error", + "traceback": [ + "\u001b[1;31m---------------------------------------------------------------------------\u001b[0m", + "\u001b[1;31mKeyboardInterrupt\u001b[0m Traceback (most recent call last)", + "\u001b[1;32mC:\\Users\\SVEN-O~1\\AppData\\Local\\Temp/ipykernel_15972/1105806950.py\u001b[0m in \u001b[0;36m<module>\u001b[1;34m\u001b[0m\n\u001b[0;32m 50\u001b[0m \u001b[0mfile_path\u001b[0m \u001b[1;33m=\u001b[0m \u001b[0mpath\u001b[0m\u001b[1;33m+\u001b[0m\u001b[0mfile\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 51\u001b[0m \u001b[0mprint\u001b[0m\u001b[1;33m(\u001b[0m\u001b[1;34m\"Reading file: \"\u001b[0m\u001b[1;33m,\u001b[0m \u001b[0mfile\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[1;32m---> 52\u001b[1;33m \u001b[0mread_moving_window_lines\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mfile_path\u001b[0m\u001b[1;33m,\u001b[0m \u001b[0mlines_per_window\u001b[0m\u001b[1;33m,\u001b[0m\u001b[0mstop_index\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0m\u001b[0;32m 53\u001b[0m \u001b[0mi\u001b[0m \u001b[1;33m+=\u001b[0m \u001b[1;36m1\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n", + "\u001b[1;32mC:\\Users\\SVEN-O~1\\AppData\\Local\\Temp/ipykernel_15972/1105806950.py\u001b[0m in \u001b[0;36mread_moving_window_lines\u001b[1;34m(file_path, lines_per_window, line_count)\u001b[0m\n\u001b[0;32m 14\u001b[0m \u001b[1;31m# Read the next lines_per_window lines\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 15\u001b[0m \u001b[1;33m\u001b[0m\u001b[0m\n\u001b[1;32m---> 16\u001b[1;33m \u001b[0mwindow_data\u001b[0m \u001b[1;33m=\u001b[0m \u001b[1;33m[\u001b[0m\u001b[0mnext\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mfile\u001b[0m\u001b[1;33m)\u001b[0m \u001b[1;32mfor\u001b[0m \u001b[0m_\u001b[0m \u001b[1;32min\u001b[0m \u001b[0mrange\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mlines_per_window\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m]\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0m\u001b[0;32m 17\u001b[0m \u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 18\u001b[0m \u001b[1;33m\u001b[0m\u001b[0m\n", + "\u001b[1;32mC:\\Users\\SVEN-O~1\\AppData\\Local\\Temp/ipykernel_15972/1105806950.py\u001b[0m in \u001b[0;36m<listcomp>\u001b[1;34m(.0)\u001b[0m\n\u001b[0;32m 14\u001b[0m \u001b[1;31m# Read the next lines_per_window lines\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 15\u001b[0m \u001b[1;33m\u001b[0m\u001b[0m\n\u001b[1;32m---> 16\u001b[1;33m \u001b[0mwindow_data\u001b[0m \u001b[1;33m=\u001b[0m \u001b[1;33m[\u001b[0m\u001b[0mnext\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mfile\u001b[0m\u001b[1;33m)\u001b[0m \u001b[1;32mfor\u001b[0m \u001b[0m_\u001b[0m \u001b[1;32min\u001b[0m \u001b[0mrange\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mlines_per_window\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m]\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0m\u001b[0;32m 17\u001b[0m \u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 18\u001b[0m \u001b[1;33m\u001b[0m\u001b[0m\n", + "\u001b[1;32mc:\\Python38\\lib\\encodings\\cp1252.py\u001b[0m in \u001b[0;36mdecode\u001b[1;34m(self, input, final)\u001b[0m\n\u001b[0;32m 20\u001b[0m \u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 21\u001b[0m \u001b[1;32mclass\u001b[0m \u001b[0mIncrementalDecoder\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mcodecs\u001b[0m\u001b[1;33m.\u001b[0m\u001b[0mIncrementalDecoder\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m:\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[1;32m---> 22\u001b[1;33m \u001b[1;32mdef\u001b[0m \u001b[0mdecode\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0mself\u001b[0m\u001b[1;33m,\u001b[0m \u001b[0minput\u001b[0m\u001b[1;33m,\u001b[0m \u001b[0mfinal\u001b[0m\u001b[1;33m=\u001b[0m\u001b[1;32mFalse\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m:\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0m\u001b[0;32m 23\u001b[0m \u001b[1;32mreturn\u001b[0m \u001b[0mcodecs\u001b[0m\u001b[1;33m.\u001b[0m\u001b[0mcharmap_decode\u001b[0m\u001b[1;33m(\u001b[0m\u001b[0minput\u001b[0m\u001b[1;33m,\u001b[0m\u001b[0mself\u001b[0m\u001b[1;33m.\u001b[0m\u001b[0merrors\u001b[0m\u001b[1;33m,\u001b[0m\u001b[0mdecoding_table\u001b[0m\u001b[1;33m)\u001b[0m\u001b[1;33m[\u001b[0m\u001b[1;36m0\u001b[0m\u001b[1;33m]\u001b[0m\u001b[1;33m\u001b[0m\u001b[1;33m\u001b[0m\u001b[0m\n\u001b[0;32m 24\u001b[0m \u001b[1;33m\u001b[0m\u001b[0m\n", + "\u001b[1;31mKeyboardInterrupt\u001b[0m: " + ] + } + ], "source": [ "### Eine einzelne Datei in 1000er Schritten zu lesen dauert Minuten\n", "\n", diff --git a/code/infrastructure/streaming/clients/sub/memgraph/sub_mem.py b/code/infrastructure/streaming/clients/sub/memgraph/sub_mem.py index cfb56d1091cfa58a20a9b42b306df666eca89b59..592eae6e980188610c4625111eca0cfdff452053 100644 --- a/code/infrastructure/streaming/clients/sub/memgraph/sub_mem.py +++ b/code/infrastructure/streaming/clients/sub/memgraph/sub_mem.py @@ -6,7 +6,7 @@ import os broker_hostname=str(os.getenv('mos_host',default="localhost")) broker_port = int(os.getenv('mos_port',default=1883)) -client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,"Client4") +client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,"memgraph") db_uri =str(os.getenv('mem_host',default="bolt://localhost:7687")) neo4j_auth=("","") abort_time_limit = int(os.getenv('abort_time_limit', default=99999)) @@ -73,8 +73,8 @@ def parse_json_to_cypher(input) : # create relationships for host id # mapping of cdm fields to relationships of nodes if nodeType == 'Event': - if value['hostId'] != None: - relations.update({'runsOn':value['hostId']}) + # if value['hostId'] != None: + # relations.update({'runsOn':value['hostId']}) if value['subject'] != None: relations.update({'isGeneratedBy':value['subject']['com.bbn.tc.schema.avro.cdm18.UUID']}) if value['predicateObject'] != None: @@ -153,8 +153,27 @@ def parse_json_to_cypher(input) : insert_strings.append(s) # ... other relations for Object not in data if rel =="hasParent": - q_rel = f''' + s = f''' + WITH new + MATCH (existing) where existing._uuid = "{val}" + CREATE (new) -[:{rel}]-> (existing) + ''' + insert_strings.append(s) + if rel =='hasAccountOn': + s = f''' + WITH new + MATCH (existing) where existing._uuid = "{val}" + CREATE (new) -[:{rel}]-> (existing) + ''' + insert_strings.append(s) + + if rel == 'hasLocalPrincipal': + s = f''' + WITH new + MATCH (existing) where existing._uuid = "{val}" + CREATE (new) -[:{rel}]-> (existing) ''' + insert_strings.append(s) q_rel = "".join(insert_strings) value_flat = {} flatten_obj("",value,value_flat) @@ -193,7 +212,7 @@ def on_connect(client, userdata, flags, return_code): ''' if return_code == 0: print("connected") - client.subscribe("neo4j") + client.subscribe("neo4j",qos=1) else: print("could not connect, return code:", return_code) client.failed_connect = True @@ -242,7 +261,7 @@ client.on_connect = on_connect client.on_message = on_message client.failed_connect = False -client.connect(broker_hostname, broker_port) +client.connect(broker_hostname, broker_port,keepalive=3600*4) client.loop_start() # this try-finally block ensures that whenever we terminate the program earlier by hitting ctrl+c, it still gracefully exits diff --git a/code/infrastructure/streaming/clients/sub/neo4j/sub_neo4j_cdm.py b/code/infrastructure/streaming/clients/sub/neo4j/sub_neo4j_cdm.py index 741e1c29e6f4425a96fd55bb4c4d555a4516fcd4..224d8e9542d95f8f6e5cec020eb43d43f2e9900d 100755 --- a/code/infrastructure/streaming/clients/sub/neo4j/sub_neo4j_cdm.py +++ b/code/infrastructure/streaming/clients/sub/neo4j/sub_neo4j_cdm.py @@ -6,7 +6,7 @@ import os broker_hostname=str(os.getenv('mos_host',default="localhost")) port = int(os.getenv('mos_port',default=1883)) -client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,"Client2") +client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,"neo4j") neo4j_uri =str(os.getenv('neo4j_host',default="bolt://localhost:7687")) neo4j_auth=None abort_time_limit = int(os.getenv('abort_time_limit', default=99999)) @@ -73,8 +73,9 @@ def parse_json_to_cypher(input) : # create relationships for host id # mapping of cdm fields to relationships of nodes if nodeType == 'Event': - if value['hostId'] != None: - relations.update({'runsOn':value['hostId']}) + # event has no resides on + # if value['hostId'] != None: + # relations.update({'runsOn':value['hostId']}) if value['subject'] != None: relations.update({'isGeneratedBy':value['subject']['com.bbn.tc.schema.avro.cdm18.UUID']}) if value['predicateObject'] != None: @@ -145,16 +146,36 @@ def parse_json_to_cypher(input) : ''' insert_strings.append(s) if rel == 'affects2': - s = f''' - WITH new - MATCH (existing) where existing._uuid = "{val}" - CREATE (new) -[:{rel}]-> (existing) - ''' - insert_strings.append(s) + s = f''' + WITH new + MATCH (existing) where existing._uuid = "{val}" + CREATE (new) -[:{rel}]-> (existing) + ''' + insert_strings.append(s) # ... other relations for Object not in data if rel =="hasParent": - q_rel = f''' + s = f''' + WITH new + MATCH (existing) where existing._uuid = "{val}" + CREATE (new) -[:{rel}]-> (existing) ''' + insert_strings.append(s) + if rel =='hasAccountOn': + s = f''' + WITH new + MATCH (existing) where existing._uuid = "{val}" + CREATE (new) -[:{rel}]-> (existing) + ''' + insert_strings.append(s) + + if rel == 'hasLocalPrincipal': + s = f''' + WITH new + MATCH (existing) where existing._uuid = "{val}" + CREATE (new) -[:{rel}]-> (existing) + ''' + insert_strings.append(s) + q_rel = "".join(insert_strings) value_flat = {} flatten_obj("",value,value_flat) @@ -193,7 +214,7 @@ def on_connect(client, userdata, flags, return_code): ''' if return_code == 0: print("connected") - client.subscribe("neo4j") + client.subscribe("neo4j",qos=1) else: print("could not connect, return code:", return_code) client.failed_connect = True @@ -242,13 +263,13 @@ client.on_connect = on_connect client.on_message = on_message client.failed_connect = False -client.connect(broker_hostname, port) +client.connect(broker_hostname, port,keepalive=3600*4) client.loop_start() # this try-finally block ensures that whenever we terminate the program earlier by hitting ctrl+c, it still gracefully exits try: i = 0 - while i < abort_time_limit and client.failed_connect == False: + while i < abort_time_limit: # and client.failed_connect == False: time.sleep(1) i += 1 if client.failed_connect == True: diff --git a/code/infrastructure/streaming/clients/sub/ongdb/sub_ongdb.py b/code/infrastructure/streaming/clients/sub/ongdb/sub_ongdb.py index fea652c04bb019468ac769bd0e0f9ce2a006ab3c..5e1175871674fe2aec2c3530713864822dfd2f3a 100644 --- a/code/infrastructure/streaming/clients/sub/ongdb/sub_ongdb.py +++ b/code/infrastructure/streaming/clients/sub/ongdb/sub_ongdb.py @@ -6,7 +6,7 @@ import os broker_hostname=str(os.getenv('mos_host',default="localhost")) broker_port = int(os.getenv('mos_port',default=1883)) -client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,"Client5") +client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,"ongdb") db_uri =str(os.getenv('db_host',default="bolt://localhost:7687")) neo4j_auth=("","") abort_time_limit = int(os.getenv('abort_time_limit', default=99999)) @@ -73,8 +73,8 @@ def parse_json_to_cypher(input) : # create relationships for host id # mapping of cdm fields to relationships of nodes if nodeType == 'Event': - if value['hostId'] != None: - relations.update({'runsOn':value['hostId']}) + # if value['hostId'] != None: + # relations.update({'runsOn':value['hostId']}) if value['subject'] != None: relations.update({'isGeneratedBy':value['subject']['com.bbn.tc.schema.avro.cdm18.UUID']}) if value['predicateObject'] != None: @@ -153,8 +153,27 @@ def parse_json_to_cypher(input) : insert_strings.append(s) # ... other relations for Object not in data if rel =="hasParent": - q_rel = f''' + s = f''' + WITH new + MATCH (existing) where existing._uuid = "{val}" + CREATE (new) -[:{rel}]-> (existing) + ''' + insert_strings.append(s) + if rel =='hasAccountOn': + s = f''' + WITH new + MATCH (existing) where existing._uuid = "{val}" + CREATE (new) -[:{rel}]-> (existing) + ''' + insert_strings.append(s) + + if rel == 'hasLocalPrincipal': + s = f''' + WITH new + MATCH (existing) where existing._uuid = "{val}" + CREATE (new) -[:{rel}]-> (existing) ''' + insert_strings.append(s) q_rel = "".join(insert_strings) value_flat = {} flatten_obj("",value,value_flat) @@ -193,7 +212,7 @@ def on_connect(client, userdata, flags, return_code): ''' if return_code == 0: print("connected") - client.subscribe("neo4j") + client.subscribe("neo4j",qos=1) else: print("could not connect, return code:", return_code) client.failed_connect = True @@ -242,13 +261,13 @@ client.on_connect = on_connect client.on_message = on_message client.failed_connect = False -client.connect(broker_hostname, broker_port) +client.connect(broker_hostname, broker_port,keepalive=3600*4) client.loop_start() # this try-finally block ensures that whenever we terminate the program earlier by hitting ctrl+c, it still gracefully exits try: i = 0 - while i < abort_time_limit and client.failed_connect == False: + while i < abort_time_limit: #and client.failed_connect == False: time.sleep(1) i += 1 if client.failed_connect == True: diff --git a/code/infrastructure/streaming/clients/sub/postgres/sub_pg_cdm.py b/code/infrastructure/streaming/clients/sub/postgres/sub_pg_cdm.py index a7ffb5bf10a81405c6ac5f3ce546ee72a79326de..a7b6615fa2315c31cd3235bd9f413545508859b6 100755 --- a/code/infrastructure/streaming/clients/sub/postgres/sub_pg_cdm.py +++ b/code/infrastructure/streaming/clients/sub/postgres/sub_pg_cdm.py @@ -14,7 +14,7 @@ broker_port = int(os.getenv('mos_port',default=1883)) file_path = str(os.getenv('path_sql_script',default='C:\\Studium_MIN\\05_Masterarbeit\\thesis\\ma_code\\code\\infrastructure\\streaming\\clients\\sub\\postgres\\import_node_edge.txt')) schema_script_file = str(os.getenv('schema_script',default='import_node_edge.txt')) -client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,"Client3") +client = mqtt.Client(mqtt.CallbackAPIVersion.VERSION1,"postgres",clean_session=False) abort_time_limit = int(os.getenv('abort_time_limit', default=99999)) def flatten_obj(key, val, target): @@ -103,24 +103,24 @@ def parse_json_to_sql_query(json,node_type): keys = json.keys() if node_type == 'Event': - rel = 'runsOn' - key = f"{key_header}_hostId" - add_edge(key, keys, rel, dest, edge_type,json) + # rel = 'runsOn' + # key = f"{key_header}_hostId" + # add_edge(key, keys, rel, dest, edge_type,json) rel = 'isGeneratedBy' key = f"{key_header}_subject{key_postfix}" add_edge(key, keys, rel, dest, edge_type,json) - rel = 'predicateObject' + rel = 'affects' key = f"{key_header}_predicateObject{key_postfix}" add_edge(key, keys, rel, dest, edge_type,json) - rel = 'predicateObject2' + rel = 'affects2' key = f"{key_header}_predicateObject2{key_postfix}" add_edge(key, keys, rel, dest, edge_type,json) if node_type =='Subject': - rel = 'parentSubject' + rel = 'hasParent' key = f"{key_header}_parentSubject{key_postfix}" add_edge(key, keys, rel, dest, edge_type,json) @@ -155,16 +155,16 @@ def parse_json_to_sql_query(json,node_type): add_edge(key, keys, rel, dest, edge_type,json) if node_type =='UnnamedPipeObject': - rel = 'resides_on' + rel = 'residesOn' key = f"{key_header}_baseObject_hostId" add_edge(key, keys, rel, dest, edge_type,json) - rel = 'affects1' - key = f"{key_header}_sourceUUID" + rel = 'affects' + key = f"{key_header}_sourceUUID{key_postfix}" add_edge(key, keys, rel, dest, edge_type,json) rel = 'affects2' - key = f"{key_header}_sinkUUID" + key = f"{key_header}_sinkUUID{key_postfix}" add_edge(key, keys, rel, dest, edge_type,json) edge_values = [source,dest,edge_type] @@ -222,7 +222,7 @@ def on_connect(client, userdata, flags, return_code): ''' if return_code == 0: print("connected") - client.subscribe("neo4j") + client.subscribe("neo4j",qos=1) else: print("could not connect, return code:", return_code) client.failed_connect = True @@ -261,18 +261,19 @@ client.on_connect = on_connect client.on_message = on_message client.failed_connect = False -client.connect(broker_hostname,broker_port) +client.connect(broker_hostname,broker_port,keepalive=3600*4) client.loop_start() # this try-finally block ensures that whenever we terminate the program earlier by hitting ctrl+c, it still gracefully exits try: i = 0 - while i < abort_time_limit and client.failed_connect == False: + while i < abort_time_limit: #and client.failed_connect == False: time.sleep(1) i += 1 if client.failed_connect == True: print('Connection failed, exiting...') - +except Exception as e: + print(e) finally: client.disconnect() client.loop_stop()