carta

execsnoop-bpfcc(8) on Linux

The text 285de02dba3e, as Debian 13 (Trixie), Debian 12 (Bookworm) shipped it. The page shows this text now.

Trace new processes via exec() syscalls. Uses Linux eBPF/bcc.

Flags it lists

execsnoop-bpfcc(8) on Linux now