is enforcement supported for containers running on host

[Prateeknandle]

I'm running a docker container and neither does it show any events (i'm using syslog server to fetch events) nor does I see enforcement (tried adding container's pid in process.id but didn't worked, does it even work this way?)

is there any way to enforce and monitor containers running on host? (assuming opensnitch is running on host and not in container)

[Prateeknandle]

nvm, https://github.com/evilsocket/opensnitch/wiki/System-rules-legacy#intercepting-connections-from-containers this clears the thing.