sofdsnoop-bpfcc8
Traces fds passed by sockets
Usage
usage: sofdsnoop
[-h]
[-T]
[-p
PID]
[-t
TID]
[-n
NAME]
[-d
DURATION]
Overview
Trace file descriptors passed via socket
optional arguments:
-
-h, --help -
show this help message and exit
-
-T, --timestamp -
include timestamp on output
-
-p PID, --pid PID -
trace this PID only
-
-t TID, --tid TID -
trace this TID only
-
-n NAME, --name NAME -
only print process names containing this name
-
-d DURATION, --duration DURATION -
total duration of trace in seconds
Examples
- Trace passed file descriptors
-
#
sofdsnoop
- Include timestamps
-
# sofdsnoop -T
- Only trace PID 181
-
# sofdsnoop -p 181
- Only trace TID 123
-
# sofdsnoop -t 123
- Trace for 10 seconds only
-
# sofdsnoop -d 10
- Only print process names containing "main"
-
# sofdsnoop -n main
Source
This is from bcc.
-
https://github.com/iovisor/bcc
Also look in the bcc distribution for a companion _examples.txt file containing example usage, output, and commentary for this tool.
OS
Linux
Stability
Unstable - in development.