I need to log the process start events with the command line arguments. There's ps au which prints the command line for the processes which are currently running. There's execsnoop which prints the log of process start events, but it prints only process names.

How can I have execsnoop log with the command line arguments in it?

p.s. there must be some way to do this through writing D script for dtrace, but I'm not skilled enough to do it :(

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.