Lines Matching full:execsnoop

1 // Based on execsnoop(8) from BCC by Brendan Gregg and others.
14 #include "execsnoop.h"
15 #include "execsnoop.skel.h"
45 const char *argp_program_version = "execsnoop 0.1";
51 "USAGE: execsnoop [-h] [-T] [-t] [-x] [-u UID] [-q] [-n NAME] [-l LINE] [-U] [-c CG]\n"
55 "   ./execsnoop           # trace all exec() syscalls\n"
56 "   ./execsnoop -x        # include failed exec()s\n"
57 "   ./execsnoop -T        # include time (HH:MM:SS)\n"
58 "   ./execsnoop -U        # include UID\n"
59 "   ./execsnoop -u 1000   # only trace UID 1000\n"
60 "   ./execsnoop -t        # include timestamps\n"
61 "   ./execsnoop -q        # add \"quotemarks\" around arguments\n"
62 "   ./execsnoop -n main   # only print command lines containing \"main\"\n"
63 "   ./execsnoop -l tpkg   # only print command where arguments contains \"tpkg\""
64 "   ./execsnoop -c CG     # Trace process under cgroupsPath CG\n";