sofdsnoop-bpfcc8
Traces fds passed by sockets
Usage
usage: sofdsnoop
[-h]
[-T]
[-p
PID]
[-t
TID]
[-n
NAME]
[-d
DURATION]
Overview
Trace file descriptors passed via socket
optional arguments:
-
-h, --help -
show this help message and exit
-
-T, --timestamp -
include timestamp on output
-
-p PID, --pid PID -
trace this PID only
-
-t TID, --tid TID -
trace this TID only
-
-n NAME, --name NAME -
only print process names containing this name
-
-d DURATION, --duration DURATION -
total duration of trace in seconds
Examples
Trace passed file descriptors
|
# |
|---|---|
Include timestamps
|
# sofdsnoop -T |
Only trace PID 181
|
# sofdsnoop -p 181 |
Only trace TID 123
|
# sofdsnoop -t 123 |
Trace for 10 seconds only
|
# sofdsnoop -d 10 |
Only print process names containing "main"
|
# sofdsnoop -n main |
Source
This is from bcc.
-
https://github.com/iovisor/bcc
Also look in the bcc distribution for a companion _examples.txt file containing example usage, output, and commentary for this tool.
OS
Linux
Stability
Unstable - in development.
Releases
Unchanged in 3 releases since Debian 11 (Bullseye).