It appears that we are dropping syscall information?

[krisnova]

What would you like to be added:

A patch in the ring buffer so we are no longer dropping syscall information.

Why is this needed:

We shouldn't be missing any syscalls.

In the Falco logs (running in Kubernetes)

14:39:39.549362410: Critical Falco internal: syscall event drop. 1 system calls dropped in last second.(ebpf_enabled=1 n_drops=1 n_drops_buffer=0 n_drops_bug=0 n_drops_pf=1 n_evts=6567)

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.