Skip to content

Instantly share code, notes, and snippets.

@vladiibine

vladiibine/sysdig-commands.md

Last active April 6, 2016 14:48
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save vladiibine/246dd65a2a5fc76ad30deb80724ec0ba to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save vladiibine/246dd65a2a5fc76ad30deb80724ec0ba to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. vladiibine revised this gist Apr 6, 2016. 1 changed file with 10 additions and 1 deletion.
    11 changes: 10 additions & 1 deletion sysdig-commands.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,3 +1,12 @@
    #Get help here
    http://www.sysdig.org/wiki/sysdig-user-guide/

    ## Show every time a file is opened under /etc.

    sudo sysdig evt.type=open and fd.name contains /etc
    sudo sysdig evt.type=open and fd.name contains /etc

    ## Sysdig output format
    *%evt.num %evt.time %evt.cpu %proc.name (%thread.tid) %evt.dir %evt.type %evt.args

    ## Filter by process name
    sysdig proc.name=asdfg and proc.name!=petre
  2. vladiibine created this gist Apr 6, 2016.
    3 changes: 3 additions & 0 deletions sysdig-commands.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,3 @@
    ## Show every time a file is opened under /etc.

    sudo sysdig evt.type=open and fd.name contains /etc