get rid of dns, socket pair, pings arrive at outer veth device (tcpdump)