carta

execsnoop.bt(8) on Linux

The text 8ad4a9f0b1f4, as Arch Linux 2026-11-01, Debian 13 (Trixie) shipped it. The page shows this text now.

Trace new processes via exec() syscalls. Uses bpftrace/eBPF.

execsnoop.bt(8) on Linux now