Advertisement
rfmonk

filemon.d

Apr 30th, 2014
240
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
D 0.22 KB | None | 0 0
  1. syscall::open:entry
  2. /pid == $1 /
  3. {
  4.     printf("%s(%s)", probefunc, copyinstr(arg0));
  5. }
  6. syscall::open:return
  7. /pid == $1 /
  8. {
  9.     printf("\t\t = %d\n", arg1);
  10. }
  11. syscall::close:entry
  12. /pid == $1 /
  13. {
  14.     printf("%s(%d)\n", probefunc, arg0);
  15. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement