1#@!#!123s

: / proc / 2 / root / proc / 3 / root / usr / share / systemtap / examples / process /

Filename : forktracker.stp

back

#!/usr/bin/stap
#
# This is a stap script to monitor process creations (fork(), exec()'s).
# Based on stap script found: http://picobot.org/wordpress/?p=27
# With some minor modifications (i.e. timestamping)
# 
# Usage: stap forktracker.stp
#
# Sample output:
#
# timestamp: process_name (pid) new_pid
#
# Version 0.1

probe kprocess.create {
  printf("%-25s: %s (%d:%d) created %d:%d\n",
         ctime(gettimeofday_s()), execname(), pid(), tid(), new_pid, new_tid)
}

probe kprocess.exec {
  printf("%-25s: %s (%d) is exec'ing %s\n",
         ctime(gettimeofday_s()), execname(), pid(), filename)
}