code: func (s *Server) networkStop(sb *sandbox.Sandbox) {
  	if sb.HostNetwork() {
  		return
  	}
  
  	if err := s.hostportManager.Remove(sb.ID(), &hostport.PodPortMapping{
  		Name:         sb.Name(),
  		PortMappings: sb.PortMappings(),
  		HostNetwork:  false,
  	}); err != nil {
  		logrus.Warnf("failed to remove hostport for pod sandbox %s(%s): %v",
  			sb.Name(), sb.ID(), err)
  	}
  
  	podNetwork := newPodNetwork(sb)
  	if err := s.netPlugin.TearDownPod(podNetwork); err != nil {
  		logrus.Warnf("failed to destroy network for pod sandbox %s(%s): %v",
  			sb.Name(), sb.ID(), err)
  	}
  }
docs: // networkStop cleans up and removes a pod's network.  It is best-effort and
  // must call the network plugin even if the network namespace is already gone