FM / lwtools

/usr/share/systemtap/examples/lwtools

Name	Size	Mode	Actions
accept2close-nd.8	1424	0644	edit dl rm
accept2close-nd.meta	597	0644	edit dl rm
accept2close-nd.stp	1798	0755	edit dl rm
accept2close-nd.txt	3385	0644	edit dl rm
biolatency-nd.8	1671	0644	edit dl rm
biolatency-nd.meta	622	0644	edit dl rm
biolatency-nd.stp	2071	0755	edit dl rm
biolatency-nd_example.txt	7362	0644	edit dl rm
bitesize-nd.8	1157	0644	edit dl rm
bitesize-nd.meta	491	0644	edit dl rm
bitesize-nd.stp	1543	0755	edit dl rm
bitesize-nd_example.txt	3426	0644	edit dl rm
execsnoop-nd.8	1235	0644	edit dl rm
execsnoop-nd.meta	570	0644	edit dl rm
execsnoop-nd.stp	1283	0755	edit dl rm
execsnoop-nd_example.txt	2585	0644	edit dl rm
fslatency-nd.8	1930	0644	edit dl rm
fslatency-nd.meta	660	0644	edit dl rm
fslatency-nd.stp	3982	0755	edit dl rm
fslatency-nd_example.txt	13384	0644	edit dl rm
fsslower-nd.8	1753	0644	edit dl rm
fsslower-nd.meta	623	0644	edit dl rm
fsslower-nd.stp	3715	0755	edit dl rm
fsslower-nd_example.txt	1938	0644	edit dl rm
killsnoop-nd.8	1131	0644	edit dl rm
killsnoop-nd.meta	384	0644	edit dl rm
killsnoop-nd.stp	1281	0755	edit dl rm
killsnoop-nd_example.txt	1908	0644	edit dl rm
opensnoop-nd.8	1268	0644	edit dl rm
opensnoop-nd.meta	357	0644	edit dl rm
opensnoop-nd.stp	1026	0755	edit dl rm
opensnoop-nd_example.txt	1124	0644	edit dl rm
README	107	0644	edit dl rm
rwtime-nd.8	1146	0644	edit dl rm
rwtime-nd.meta	412	0644	edit dl rm
rwtime-nd.stp	1599	0755	edit dl rm
rwtime-nd_example.txt	4185	0644	edit dl rm
syscallbypid-nd.8	1089	0644	edit dl rm
syscallbypid-nd.meta	404	0644	edit dl rm
syscallbypid-nd.stp	1100	0755	edit dl rm
syscallbypid-nd_example.txt	9322	0644	edit dl rm

Edit: /usr/share/systemtap/examples/lwtools/opensnoop-nd.8 (1268B)

This is a basic version of opensnoop.
.SH REQUIREMENTS
SystemTap.
.SH EXAMPLES
.TP
Trace all open() syscalls, showing process and file details:
#
.B opensnoop-nd.stp
.SH FIELDS
.TP
UID
User ID.
.TP
PID
Process ID.
.TP
PPID
Parent process ID.
.TP
COMM
Process name.
.TP
FD
Return value of the open() syscall, which is either the resulting file descriptor
(positive) or error code (negative).
.TP
PATH
File pathname provided to the open() syscall.
.SH OVERHEAD
This reads and processes open() events and prints a line of output for each.
If your applications perform a high rate of open()s, the overhead of this
tool may become noticeable.
.SH SOURCE
This is from the SystemTap lwtools collection.
.IP
https://github.com/brendangregg/systemtap-lwtools
.PP
Also look under the examples directory for a text file containing example
usage, output, and commentary for this tool.
.SH OS
Linux
.SH STABILITY
Unstable - in development.
.SH AUTHOR
Brendan Gregg
.SH SEE ALSO
strace(1)

.TH opensnoop-nd 8 "2015-01-30" "USER COMMANDS" .SH NAME opensnoop-nd \- trace process open() with arguments. Uses Linux SystemTap (non-debuginfo). .SH SYNOPSIS .B opensnoop-nd.stp .SH DESCRIPTION This traces the open() syscall system-wide, to show which files are being opened, and by who. This is a basic version of opensnoop. .SH REQUIREMENTS SystemTap. .SH EXAMPLES .TP Trace all open() syscalls, showing process and file details: # .B opensnoop-nd.stp .SH FIELDS .TP UID User ID. .TP PID Process ID. .TP PPID Parent process ID. .TP COMM Process name. .TP FD Return value of the open() syscall, which is either the resulting file descriptor (positive) or error code (negative). .TP PATH File pathname provided to the open() syscall. .SH OVERHEAD This reads and processes open() events and prints a line of output for each. If your applications perform a high rate of open()s, the overhead of this tool may become noticeable. .SH SOURCE This is from the SystemTap lwtools collection. .IP https://github.com/brendangregg/systemtap-lwtools .PP Also look under the examples directory for a text file containing example usage, output, and commentary for this tool. .SH OS Linux .SH STABILITY Unstable - in development. .SH AUTHOR Brendan Gregg .SH SEE ALSO strace(1)