Observing the session link for Pod access to the external network from the K8S-Node server, the source address translation and network interface information are missing.

[e1ast1cheart]

Describe the bug
Observing the HTTP traffic information of a Pod requesting an external IP on a K8S cluster Node server. It was found that kyanos only captured the information between the container process and the container network interface, and did not capture the NAT conversion and link information between the container network interface and the Node server network interface.

To Reproduce
Translation: Observe specific TCP traffic through './kyanos watch --remote-ips 10.72.22.47'. It was found that the link information between docker0 and eth0 is missing.

Translation: The source address translation for this network session can be corroborated by using 'conntrack -L | grep '10.72.22.47''.
tcp 6 86392 ESTABLISHED src=10.42.171.3 dst=10.72.22.47 sport=59706 dport=10660 src=10.72.22.47 dst=10.10.41.58 sport=10660 dport=38977 [ASSURED] mark=0 use=1

Server info:
K8S cni : canal
[root@yf-k8s-worker-41-58 ~]# cat /etc/centos-release
CentOS Linux release 7.6.1810 (Core)
[root@yf-k8s-worker-41-58 ~]# uname -a
Linux yf-k8s-worker-41-58 3.10.0-1160.31.1.el7.x86_64 #1 SMP Thu Jun 10 13:32:12 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
[root@yf-k8s-worker-41-58 ~]# hostnamectl
Static hostname: yf-k8s-worker-41-58
Icon name: computer-vm
Chassis: vm
Machine ID: 471567925e7e4f29a6412db0d23fea7d
Boot ID: 3556d68464104fc19d7480d053aeed8b
Virtualization: vmware
Operating System: CentOS Linux 7 (Core)
CPE OS Name: cpe:/o:centos:centos:7
Kernel: Linux 3.10.0-1160.31.1.el7.x86_64
Architecture: x86-64

K8S-Node服务器观测容器访问集群外部网络会话链路缺失地址转换与Node网卡信息.docx