* Use ansible to deploy privileged docker agents on each node * Agents can be based on https://github.com/nicolaka/netshoot * Agents only care about received packets per container * Agents send tcp traces to a centralized backend server via UDP * Backend cleans up data and updates its state in memory, then, sends current state to the frontend * Backend dynamically adds nodes as new ips show up * Periodically, IPs are mapped to container metadata every say 10s * Side-effect: Decouple project from sysdig