nft_register_rule pid=2093 subj=/usr/libexec/whonix-firewall/** comm="iptables"
type=SYSCALL msg=audit(1757793563.996:223): arch=c000003e syscall=46 success=yes exit=320 a0=3 a1=7ffc4be5dca0 a2=0 a3=7ffc4be5dc8c items=0 ppid=1973 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=/usr/libexec/whonix-firewall/** key=(null)