From owner-freebsd-dtrace@FreeBSD.ORG Wed Dec 11 00:26:56 2013 Return-Path: Delivered-To: freebsd-dtrace@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id F2E21F2D for ; Wed, 11 Dec 2013 00:26:56 +0000 (UTC) Received: from mail-ea0-x22a.google.com (mail-ea0-x22a.google.com [IPv6:2a00:1450:4013:c01::22a]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 8BE4C1F09 for ; Wed, 11 Dec 2013 00:26:56 +0000 (UTC) Received: by mail-ea0-f170.google.com with SMTP id k10so2555224eaj.15 for ; Tue, 10 Dec 2013 16:26:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=z7oZgQlRMIXdBUMCirf1hKcXOa8pGMn0hB+L0u78rX4=; b=0QwF0vgaudNPZ7CQ6iz5kRQHjaDzlsICHJlEcdt3/TYNKTYT7tjMKYbie6KMq19wMU nJwHHoplDr10jJyXkZpeaVv5klzNzxCE0tChJdN3S5/elGxIdr7GFPQG8zmaxMtamwiw +WhaXEyO/h6wsBzSpJXdmeojl85KTG9uR8scGJRmqB1/tnXMfZ19RqceZf0MZmuDZLUk Y04AEbwJyWT7COoSrp5rJR9W7T1KGkCefe1PM7I1C0XfLTegu2Fk73wCUJoR2/ARfjvx yL18w3vO1IKpxRJzZxf4z4HJ3Gy9WcLOuPYSgz0AxR9Mj7PA18pWu7HdVL5y0aNfFwFz eHZA== MIME-Version: 1.0 X-Received: by 10.14.6.5 with SMTP id 5mr20530144eem.51.1386721614362; Tue, 10 Dec 2013 16:26:54 -0800 (PST) Received: by 10.14.2.66 with HTTP; Tue, 10 Dec 2013 16:26:54 -0800 (PST) In-Reply-To: References: <20131210234714.GQ1681@albert.catwhisker.org> Date: Tue, 10 Dec 2013 16:26:54 -0800 Message-ID: Subject: Re: Examples from www.dtracebook.com From: hiren panchasara To: freebsd-dtrace@freebsd.org Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-dtrace@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "A discussion list for developers working on DTrace in FreeBSD." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Dec 2013 00:26:57 -0000 $ sudo dtrace -n 'proc:::exec-success { trace(curpsinfo->pr_psargs); }' dtrace: description 'proc:::exec-success ' matched 1 probe CPU ID FUNCTION:NAME 5 48876 :exec-success /bin/sh /usr/bin/man ls 2 48876 :exec-success /sbin/sysctl -n hw.machine_arch 6 48876 :exec-success /sbin/sysctl -n hw.machine 0 48876 :exec-success /usr/bin/locale 7 48876 :exec-success /usr/bin/zcat /usr/share/man/man1/ls.1.gz 2 48876 :exec-success head -1 1 48876 :exec-success tbl 6 48876 :exec-success groff -S -P-h -Wall -mtty-char -man -Tascii -P-c 7 48876 :exec-success /usr/bin/zcat /usr/share/man/man1/ls.1.gz 3 48876 :exec-success less 3 48876 :exec-success troff -Wall -mtty-char -man -Tascii 7 48876 :exec-success grotty -h -c 6 48876 :exec-success top 7 48876 :exec-success ps awwux 7 48876 :exec-success iostat 5 48876 :exec-success vmstat 1 4 48876 :exec-success bash 4 48876 :exec-success whois 5 48876 :exec-success whoami 4 48876 :exec-success devinfo 4 48876 :exec-success dmesg 6 48876 :exec-success pciconf -lv I am getting interesting info only when "man" is executed and not for any other command. What does that tell me? How is man special? Other programs must also be doing exec(2), no? Thanks, Hiren