MacOSX使用opensnoop跟踪进程使用情况
MacOSX使用opensnoop跟踪进程使用情况
opensnoop参数如下：
$ opensnoop -hUSAGE: opensnoop [-a|-A|-ceghsvxZ] [-f pathname]
[-n name] [-p PID]
opensnoop # default output
-a # print most data
-A # dump all data, space delimited
-c # print cwd of process
-e # print errno value
-g # print command arguments
-s # print start time, us
-v # print start time, string
-x # only print failed opens
-Z # print zonename
-f pathname # pathname name to snoop
-n name # process name to snoop
-p PID # process ID to snoop
eg,
opensnoop -v # human readable timestamps
opensnoop -e # see error codes
opensnoop -f /etc/motd # snoop this file only