---
name: "sofdsnoop-bpfcc"
section: "8"
platform: "linux"
package: "bpfcc-tools"
version: "0.31.0+ds-7"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/sofdsnoop-bpfcc"
---

# sofdsnoop-bpfcc(8)

traces FDs passed by sockets

## NAME

sofdsnoop - traces FDs passed by sockets

## SYNOPSIS

usage: sofdsnoop \[-h\] \[-T\] \[-p PID\] \[-t TID\] \[-n NAME\] \[-d DURATION\]

## DESCRIPTION

Trace file descriptors passed via socket

### optional arguments:

- **-h**, **--help**

  show this help message and exit

- **-T**, **--timestamp**

  include timestamp on output

- **-p** PID, **--pid** PID

  trace this PID only

- **-t** TID, **--tid** TID

  trace this TID only

- **-n** NAME, **--name** NAME

  only print process names containing this name

- **-d** DURATION, **--duration** DURATION

  total duration of trace in seconds

## EXAMPLES

- Trace passed file descriptors

  \# **sofdsnoop**

- Include timestamps

  \# **sofdsnoop -T**

- Only trace PID 181

  \# **sofdsnoop -p 181**

- Only trace TID 123

  \# **sofdsnoop -t 123**

- Trace for 10 seconds only

  \# **sofdsnoop -d 10**

- Only print process names containing "main"

  \# **sofdsnoop -n main**

## SOURCE

This is from bcc.

-

  https://github.com/iovisor/bcc

Also look in the bcc distribution for a companion \_examples.txt file containing example usage, output, and commentary for this tool.

## OS

Linux

## STABILITY

Unstable - in development.