bcc-sofdsnoop - Man Page

traces FDs passed by sockets

Synopsis

usage: sofdsnoop [-h] [-T] [-p PID] [-t TID] [-n NAME] [-d DURATION]

Description

Trace file descriptors passed via socket

optional arguments

-h,  --help

show this help message and exit

-T,  --timestamp

include timestamp on output

-p PID, --pid PID

trace this PID only

-t TID, --tid TID

trace this TID only

-n NAME, --name NAME

only print process names containing this name

-d DURATION, --duration DURATION

total duration of trace in seconds

Examples

Trace passed file descriptors

# sofdsnoop

Include timestamps

# sofdsnoop -T

Only trace PID 181

# sofdsnoop -p 181

Only trace TID 123

# sofdsnoop -t 123

Trace for 10 seconds only

# sofdsnoop -d 10

Only print process names containing "main"

# sofdsnoop -n main

Source

This is from bcc.

https://github.com/iovisor/bcc

Also look in the bcc distribution for a companion _examples.txt file containing example usage, output, and commentary for this tool.

OS

Linux

Stability

Unstable - in development.

Info

2019-07-29 USER COMMANDS