creatbyproc.d(1m) USER COMMANDS creatbyproc.d(1m)NAME
creatbyproc.d - snoop creat()s by process name. Uses DTrace.
SYNOPSIS
creatbyproc.d
DESCRIPTION
creatbyproc.d is a DTrace OneLiner to print file creations as it occurs, including the name of the process calling the open.
This matches file creates from the creat() system call; not all file creation occurs in this way, sometimes it is through open() with a
O_CREAT flag, this script will not monitor that activity.
Docs/oneliners.txt and Docs/Examples/oneliners_examples.txt in the DTraceToolkit contain this as a oneliner that can be cut-n-paste to run.
Since this uses DTrace, only users with root privileges can run this command.
EXAMPLES
This prints process names and new pathnames until Ctrl-C is hit.
# creatbyproc.d
FIELDS
CPU The CPU that recieved the event
ID A DTrace probe ID for the event
FUNCTION:NAME
The DTrace probe name for the event
remaining fields
The first is the name of the process, the second is the file pathname.
DOCUMENTATION
See the DTraceToolkit for further documentation under the Docs directory. The DTraceToolkit docs may include full worked examples with ver-
bose descriptions explaining the output.
EXIT
creatbyproc.d will run forever until Ctrl-C is hit.
AUTHOR
Brendan Gregg [Sydney, Australia]
SEE ALSO dtrace(1M)version 1.00 Jun 11, 2005 creatbyproc.d(1m)
Check Out this Related Man Page
filebyproc.d(1m) USER COMMANDS filebyproc.d(1m)NAME
filebyproc.d - snoop opens by process name. Uses DTrace.
SYNOPSIS
filebyproc.d
DESCRIPTION
filebyproc.d is a DTrace OneLiner to print file pathnames as they are opened, including the name of the process calling the open. A line
will be printed regardless of whether the open is actually successful or not.
This is useful to learn which files applications are attempting to open, such as config files, database files, log files, etc.
Docs/oneliners.txt and Docs/Examples/oneliners_examples.txt in the DTraceToolkit contain this as a oneliner that can be cut-n-paste to run.
Since this uses DTrace, only users with root privileges can run this command.
EXAMPLES
This prints new process name and pathnames until Ctrl-C is hit.
# filebyproc.d
FIELDS
CPU The CPU that recieved the event
ID A DTrace probe ID for the event
FUNCTION:NAME
The DTrace probe name for the event
remaining fields
The first is the name of the process, the second is the file pathname.
DOCUMENTATION
See the DTraceToolkit for further documentation under the Docs directory. The DTraceToolkit docs may include full worked examples with ver-
bose descriptions explaining the output.
EXIT
filebyproc.d will run forever until Ctrl-C is hit.
AUTHOR
Brendan Gregg [Sydney, Australia]
SEE ALSO opensnoop(1M), dtrace(1M), truss(1)version 1.00 May 15, 2005 filebyproc.d(1m)
Check this link. Its Sun Solaris Docs link that place all sorts of Materials in it. From Hands on Support materials Etc. Quite intresting.
Sun OS Hands on Docs.
:cool: (1 Reply)
i am unable to write to some .php files in the following directory:
drwxr-xr-x 3 headroom max 448 Jun 6 2004 Docs
i already tried this:
chmod +777 Docs
chmod: changing permissions of `Docs': Operation not permitted
thanks for your help! (2 Replies)
Hi
I need a small help
Cshell% more abc.txt
********
Cshell% cat abc.txt | cut -c1-3
***
Cshell%set test3=`cat abc.txt | cut -c1-3`
Cshell%echo $test3
a.txt b.txt.................
.....
It displays all the file in the current directory.
I want *** to be displayed.
Can any one of... (1 Reply)
Would I be able to get the report (text format) of an activity monitor view of a netbackup via command line? I am trying to make a script out of it that would be run daily an be saved in a txt document which would could be viewed for history purpose. I need minimal details only like policy name,... (0 Replies)
Hi Team,
I need help in using cut command ....
my file name is appended with .txt ....line India.txt or America.txt, and I need to remove .txt and keep remaining part of file name for further processing.... How we can do that using cut or sed command. (5 Replies)
Trying to match $1 in output.txt with $1 probe.txt, when a match is found in $6 of probe.txt the text in $5 of output is copied.
For example, the first record in output.txt is A_16_P32713632 and that matches row 19318 in probe.txt, so in the 6 field (after 0.940798) of row 19318 ACTA2 is... (4 Replies)