mountsnoop-bpfcc(8) on Linux
The text e80dc45a4ea2, as Debian 10 (Buster) shipped it.
Trace mount() and umount() syscalls. Uses Linux eBPF/bcc.
The text e80dc45a4ea2, as Debian 10 (Buster) shipped it.
Trace mount() and umount() syscalls. Uses Linux eBPF/bcc.