G''Day Folks,
I''ve rewritten execsnoop, opensnoop and shellsnoop so that they are
wrapped in the Bourne shell to provide command line options (they have
all lost their ".d" extensions, but the old versions are still
online).
They are rather more meaningful tools now.
(Eg, I can run shellsnoop with "-qp PID" with the PID of a shell, and
see
only the characters echo''d to their screen, in their original
formatting).
I common switch I''m adding is -v for time,
# ./execsnoop -v
STRTIME UID PID PPID ARGS
2005 Jan 22 00:07:22 0 23053 20933 date
2005 Jan 22 00:07:24 0 23054 20933 uname -a
2005 Jan 22 00:07:25 0 23055 20933 ls -latr
2005 Jan 22 00:07:27 0 23056 20933 df -k
2005 Jan 22 00:07:29 0 23057 20933 ps -ef
2005 Jan 22 00:07:34 0 23058 20933 uptime
Which has been quite helpful so far.
...
Tomorrow I''ll be heading overseas for 4 weeks, and I''m not
sure I''ll have
access to this email address or be able to update my website. So I''m
doing
what I can beforehand. During the next few weeks I''ll be easier to
catch
from bdgregg@yahoo.com.au, and I''ll be somewhere in California, I
think.
Oh, and it looks like I''ll miss all the fun,
http://www.opensource.org/licenses/cddl1.php
!!!
cheers,
Brendan Gregg
[Sydney, Australia]
_______________________________________________
DTrace mailing list
DTrace@opensolaris.org
https://www.opensolaris.org/mailman/listinfo/dtrace
