Parse snoop output Post: 302430075

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

parse through one text file and output many

Hi, everyone The input file pattern is like below: Begin Object1 txt1 end ; Begin Object2 txt2 end ; ...

2. Shell Programming and Scripting

Parse Logfile output variable

<SUMMARY filecount_excluded="0" dirbytes_sent="3367893" dirbytes_hashcache="13275664" ..and so on..> <session numthreads="1" type="avtarbackup" ndispatchers="1" ..and so on..><host numprocs="4" speed="900" osuser="root" name="ashsux01" memory="24545" /><build time="11:04:53" msgversion="13-10" ...

3. Shell Programming and Scripting

Script to capture snoop output

Hi Everyone :), Need your advice as I'm new to UNIX scripting.. I'm trying to write a script to capture snoop output for 5 minutes for every hour for 24 hours. To stop snoop, I need to press Control-C to break it. This is what I got so far, but now I'm stuck! :confused: The script: # cat...

4. Shell Programming and Scripting

Want to parse output for variables in Bash

Trying to finish up my script that automates some video encoding work. Situation: There is an MKV file to be transcoded. Problem: MKVINFO will give a bunch of output about an MKV file, included in that output are two lines I am interested in: | + Default duration: 41.708ms (23.976 fps...

5. UNIX for Dummies Questions & Answers

How to parse 2 particular lines from Command output

Hi All, I need help on the following req. I am getting output of a command as follows: 16377612 total memory 3802460 used memory 2827076 active memory 681948 inactive memory 12575152 free memory 477452 buffer memory I want to compute used...

6. Shell Programming and Scripting

parse output line using bash

hi, i have the followiing scenario where by i am parsing teh following output using cut -d like so #!/bin/bash output="ABCTable| ------------------| | ------------------| code | name | amount |" col1= $output | cut -d'|' -f5 col2= $output | cut -d'|'...

7. Solaris

How to read the output of snoop command?

Hi! I have run the following command: snoop -q -d e1000g0 -o /var/tmp/optima0.txt & them I am trying to read the output of it with snoop -i /var/tmp/optima0.txt, which is giving me this: # snoop -i /var/tmp/optima0.txt | more 1 0.00000 AIOPTSVR -> 10.100.4.72 TCP D=1393 S=22 Push...

8. Shell Programming and Scripting

awk to parse jil output

Hi , I have a jil file which i am trying to parse and print the job name and the condition corresponding to it. Below is the input file /* -------------------- testjob1 -------------------- */ insert_job: testjob1 job_type: c machine: unix owner: chidori condition: s(joba) and...

9. Shell Programming and Scripting

awk to parse df output

Output of the below code includes unmatched date.Please correct it df -k|awk '$4>50 {print $1, "\t"$4,"\t" $7}' It gives output less than 50% also.

10. Shell Programming and Scripting

Need help to parse iostat command output

Hi, I got the code below is one of the threads from this forum. lineCount=$(iostat | wc -l) numDevices=$(expr $lineCount - 7); iostat $interval -x -t | awk -v awkCpuFile=$cpuFile -v awkDeviceFile=$deviceFile -v awkNumDevices=$numDevices ' BEGIN { print...

LEARN ABOUT OSX

execsnoop

execsnoop(1m)							   USER COMMANDS						     execsnoop(1m)

NAME

       execsnoop - snoop new process execution. Uses DTrace.

SYNOPSIS

       execsnoop [-a|-A|-ejhsvZ] [-c command]

DESCRIPTION

       execsnoop prints details of new processes as they are executed.	Details such as UID, PID and argument listing are printed out.

       This  program  is  very	useful	to examine short lived processes that would not normally appear in a prstat or "ps -ef" listing. Sometimes
       applications will run hundreds of short lived processes in their normal startup cycle, a behaviour that is easily monitored with execsnoop.

       Since this uses DTrace, only users with root privileges can run this command.

OPTIONS

       -a     print all data

       -A     dump all data, space delimited

       -e     safe output, parseable. This prevents the ARGS field containing "
"s, to assist postprocessing.

       -j     print project ID

       -s     print start time, us

       -v     print start time, string

       -Z     print zonename

       -c command
	      command name to snoop

EXAMPLES

       Default output, print processes as they are executed,
	      # execsnoop

       Print human readable timestamps,
	      # execsnoop -v

       Print zonename,
	      # execsnoop -Z

       Snoop this command only,
	      # execsnoop -c ls

FIELDS

       UID    User ID

       PID    Process ID

       PPID   Parent Process ID

       COMM   command name for the process

       ARGS   argument listing for the process

       ZONE   zonename

       PROJ   project ID

       TIME   timestamp for the exec event, us

       STRTIME
	      timestamp for the exec event, string

DOCUMENTATION

       See the DTraceToolkit for further documentation under the Docs directory. The DTraceToolkit docs may include full worked examples with ver-
       bose descriptions explaining the output.

EXIT

       execsnoop will run forever until Ctrl-C is hit.

AUTHOR

       Brendan Gregg [Sydney, Australia]

SEE ALSO

       dtrace(1M), truss(1)

version 1.20							   Jul 02, 2005 						     execsnoop(1m)

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

parse through one text file and output many

Discussion started by: sophiadun

2. Shell Programming and Scripting

Parse Logfile output variable

Discussion started by: Ikon

3. Shell Programming and Scripting

Script to capture snoop output

Discussion started by: faraaris

4. Shell Programming and Scripting

Want to parse output for variables in Bash

Discussion started by: randyharris