dtrace discuss - Jan 2007 - [DTrace] socketsnoop.d - TCP by PID

G''Day Folks,

Well, I had a weekend home in Sydney while inbetween flights and have
knocked out a few programs. (I''ve been programming for 23 hours
straight,
so if there is something really dumb in one my scripts then please excuse
me :)

   # socketsnoop.d
     UID   PID DIR  SIZE CMD
       0 19886   W    64 ssh mars
       0 19886   R    80 ssh mars
       0 19915   W     0 finger @mars
       0 19915   W     2 finger @mars
       0 19915   R   633 finger @mars
       0 19915   R     0 finger @mars
       0 19886   W    64 ssh mars
       0 19886   R    80 ssh mars
       0 19886   W    48 ssh mars
       0 19886   R    80 ssh mars
     100  4789   W     6 vncviewer mars:4
     100  4789   R   348 vncviewer mars:4
     100  4789   W    10 vncviewer mars:4

I set a goal of TCP, and now have socketsnoop.d working for any TCP
protocol I''ve thrown at it, including telnet. There is a variety of fbt
and mib probes to pick from, none of them are simply perfect, many
run asynchronously to the responsible process.

James Dickens has been helping out from an IRC forum - IRC seems like it
might be really useful for us to team up in. Well, it especially helps
me as I''m thousands of miles away! :)

socketsnoop.d is on my website at,

   http://www.brendangregg.com/DTrace/socketsnoop.d

cheers,

Brendan

_______________________________________________
DTrace mailing list
DTrace@opensolaris.org
https://www.opensolaris.org/mailman/listinfo/dtrace