newproc.d(1) USER COMMANDS newproc.d(1)
NAME
newproc.d - snoop new processes. Uses DTrace.
SYNOPSIS
newproc.d
DESCRIPTION
newproc.d is a DTrace OneLiner to snoop new processes as they are run. The argument listing is printed. This is useful to identify short lived processes that are usually dif- ficult to spot using traditional tools. Docs/oneliners.txt and Docs/Examples/oneliners_examples.txt in the DTraceToolkit contain this as a oneliner that can be cut-n-paste to run. Since this uses DTrace, only users with root privileges can run this command.
EXAMPLES
This prints new processes until Ctrl-C is hit. # newproc.d
FIELDS
CPU The CPU that recieved the event ID A DTrace probe ID for the event FUNCTION:NAME The DTrace probe name for the event remaining fields These contains the argument listing for the new process
DOCUMENTATION
See the DTraceToolkit for further documentation under the Docs direc- tory. The DTraceToolkit docs may include full worked examples with ver- bose descriptions explaining the output.
EXIT
newproc.d will run forever until Ctrl-C is hit.
AUTHOR
Brendan Gregg [Sydney, Australia]
SEE ALSO
execsnoop(1M), dtrace(1M), truss(1) version 1.00 May 15, 2005 newproc.d(1)
Mac OS X 10.6 - Generated Thu Sep 17 20:08:11 CDT 2009