Embodiments of the present invention include systems and methods for providing data flow information of a communication end node. The communication end node includes: at least one container including one or more applications; an operating-system-container engine for hosting the container; a host operating system (OS) for hosting the operating-system-container engine; and a socket query engine that is hosted by the operating-system-container engine. The socket query engine causes steps to be performed comprising: monitoring one or more open sockets that allow the one or more applications to communicate data through a network; compiling a list of the one or more open sockets; generating information of data flow that passes through the one or more open sockets using a set of socket parameters of the one or more open sockets; and sending the information of data flow to a controller through the network.
