Displaying 1 result from an estimated 1 matches for "lsfacc".
Did you mean:
listacc
2008 Apr 20
1
dtrace script to monitor file access
.../strstr(stringof(copyinstr(arg0)), $1) != NULL/
{
printf("%Y %5d %5d %5d %5d %-12s %-10s %25s %s\n",
walltimestamp, gid, uid, pid, ppid, execname, probefunc, cwd, stringof(copyinstr(arg0)));
}
The script is invoked with:
./lsfacc ''"userfile"''
Is this a good approach or is there a better one?
Occassionally the script produces errors that look like:
dtrace: error on enabled probe ID 2 (ID 2521: syscall::open:entry):
invalid address (0xff358000) in predicate at DIF offset 28
Is this due...