René Rebe

opensnoop didn’t really cut it, so here we go:

syscall::open*:entry
{
printf(”%s %s”, execname, copyinstr(arg0));
}
syscall::stat*:entry
{
printf(”%s %s”, execname, copyinstr(arg0));
}

This entry was posted on Tuesday, February 23rd, 2010 at 17:27 and is filed under Software, Life. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.