{"cmd":"sudo tail -n 96 /var/log/auth.log","output":"tcpdump: eth0: You don't have permission to capture on that device\nhint: try running with sudo\ntime: 2026-01-26T14:55:09.292620Z\nstatus: command returned non-zero exit code\ncontext: incident-simulation dataset\n"}