opensnoop.bt(8) on Linux
The text 1ea30b95aa8d, as Arch Linux 2026-11-01 shipped it. The page shows this text now.
Trace open(),openat(),openat2() syscalls. Uses bpftrace/eBPF.
Flags it lists
-
--depth -
--errname