blob: 136b583b2aa811b20697684f52f6e0a9b9a77ce4 (
plain)
1
2
3
4
5
6
7
8
9
10
|
#!/usr/sbin/dtrace -s
/*
* filebyproc.d - snoop files opened by process name. DTrace OneLiner.
*
* This is a DTrace OneLiner from the DTraceToolkit.
*
* $Id: filebyproc.d,v 1.1.1.1 2015/09/30 22:01:07 christos Exp $
*/
syscall::open*:entry { printf("%s %s", execname, copyinstr(arg0)); }
|