SOFDSNOOP(8)
π SOFDSNOOP(8) π
System Manager's Manual π
β¨ NAME β¨
okay so sofdsnoop is the tool that traces FDs passed by sockets π¦ (FD = file descriptors, bestie, the little handles your process hands around π§)
π SYNOPSIS π
usage: sofdsnoop [-h] [-T] [-p PID] [-t TID] [-n NAME] [-d DURATION]
πΈ DESCRIPTION πΈ
Literally just traces file descriptors that get passed through a socket π it's giving surveillance but make it systems programming π«Ά
β¨ optional arguments: β¨
-h,--helpβ shows the help message and then bounces π-T,--timestampβ slaps a timestamp onto every line of output β°-p PID,--pid PIDβ only trace this PID, nobody else gets the spotlight π¦-t TID,--tid TIDβ only trace this TID, one thread main character π§΅-n NAME,--name NAMEβ only print process names that contain this name, so you can ignore the chaos π-d DURATION,--duration DURATIONβ how long the trace runs in total, in seconds β³
π EXAMPLES π
Trace passed file descriptors π
# sofdsnoop
Include timestamps β°
# sofdsnoop -T
Only trace PID 181 π―
# sofdsnoop -p 181
Only trace TID 123 π§΅
# sofdsnoop -t 123
Trace for 10 seconds only β³
# sofdsnoop -d 10
Only print process names containing "main" π
# sofdsnoop -n main
π¦ SOURCE π¦
This one comes from bcc, ngl the good stuff π₯
https://github.com/iovisor/bcc
Also go poke around the bcc distribution for a companion _examples.txt file with example usage, output, and commentary for this tool π§ it's lowkey the best part π
π OS π
Linux π§
π STABILITY π
Unstable - in development. Bestie, this is still cooking, so don't be shocked if it changes on you π
Manual page from USER COMMANDS, dated 2019-07-29, rewritten with love just for you ππ«Άβ¨
π¦ where this page comes from
- centos-stream 10: bcc-tools 0.36.1-1.el10 Β· Apache-2.0
- centos-stream 9: bcc-tools 0.36.1-1.el9 Β· ASL 2.0
- fedora 43: bcc-tools 0.35.0-2.fc43 Β· Apache-2.0
- fedora 44: bcc-tools 0.35.0-5.fc44 Β· Apache-2.0
- π girlified by anthropic/claude-haiku-5.5 on : a language model's rewrite of the original, under its terms