From owner-freebsd-stable@FreeBSD.ORG Thu Oct 27 15:00:33 2011 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 20DAE106564A for ; Thu, 27 Oct 2011 15:00:33 +0000 (UTC) (envelope-from lattera@gmail.com) Received: from mail-vx0-f182.google.com (mail-vx0-f182.google.com [209.85.220.182]) by mx1.freebsd.org (Postfix) with ESMTP id D3FE48FC17 for ; Thu, 27 Oct 2011 15:00:32 +0000 (UTC) Received: by vcbfo13 with SMTP id fo13so3896802vcb.13 for ; Thu, 27 Oct 2011 08:00:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; bh=jvdN/ZPAuSkev1dGxMjWMURHicpVRl85Fb3qbJqPgf8=; b=SVG2NLtazZqqg7UguzksNN2q12lmFYRXFxgDByu79kPYK3NxqWbt7GihXifsVCwR/z sLQPfHO7xCZ5gYGsaJvWubrpahGfCN9JWtYa7bhLHBIxIcpIzhHfvxTkJGpkqcY8indx DU4fItIMhT3Mek6UuO90Wf20TfcCUd5XWF9Lc= MIME-Version: 1.0 Received: by 10.182.227.7 with SMTP id rw7mr6435422obc.70.1319725939750; Thu, 27 Oct 2011 07:32:19 -0700 (PDT) Received: by 10.182.44.135 with HTTP; Thu, 27 Oct 2011 07:32:19 -0700 (PDT) Date: Thu, 27 Oct 2011 08:32:19 -0600 Message-ID: From: Shawn Webb To: freebsd-stable@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Subject: DTrace Issues X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Oct 2011 15:00:33 -0000 Hey FreeBSD Stable, I'm having issues printing out the curpsinfo->pr_psargs. Has anyone had any success printing out the arguments passed to a program? Below is the log of what happens when I run my script the source for my script. [root@fbsd-sec ~/dtrace/security]# ./log_exec.d 80 dtrace: buffer size lowered to 2m 1319724849:80:sh:sh 1319724849:80:ls:ls ^C [root@fbsd-sec ~/dtrace/security]# cat log_exec.d #!/usr/sbin/dtrace -s #pragma D option quiet proc:::exec-success /uid == $1/ { printf("%d:%d:%s:", walltimestamp, uid, execname); trace(curpsinfo->pr_psargs); printf("\n"); } Thanks, Shawn