carta

execsnoop-bpfcc(8) on Linux

The text de0ac66bc109, as Debian 10 (Buster) shipped it.

Trace new processes via exec() syscalls. Uses Linux eBPF/bcc.

Flags it lists

execsnoop-bpfcc(8) on Linux now