use native filtering to find running containers