SOFDSNOOP(8)

πŸ“¦ version 0.36.1, in centos-stream 10, centos-stream 9, fedora 43, fedora 44

πŸŽ€ SOFDSNOOP(8) πŸŽ€

System Manager's Manual πŸ’…

✨ NAME ✨

okay so sofdsnoop is the tool that traces FDs passed by sockets πŸ¦‹ (FD = file descriptors, bestie, the little handles your process hands around 🧚)

πŸ’Œ SYNOPSIS πŸ’Œ

usage: sofdsnoop [-h] [-T] [-p PID] [-t TID] [-n NAME] [-d DURATION]

🌸 DESCRIPTION 🌸

Literally just traces file descriptors that get passed through a socket 😭 it's giving surveillance but make it systems programming 🫢

✨ optional arguments: ✨

  • -h, --help β€” shows the help message and then bounces πŸ‘‹
  • -T, --timestamp β€” slaps a timestamp onto every line of output ⏰
  • -p PID, --pid PID β€” only trace this PID, nobody else gets the spotlight πŸ”¦
  • -t TID, --tid TID β€” only trace this TID, one thread main character 🧡
  • -n NAME, --name NAME β€” only print process names that contain this name, so you can ignore the chaos πŸ’œ
  • -d DURATION, --duration DURATION β€” how long the trace runs in total, in seconds ⏳

πŸ’– EXAMPLES πŸ’–

Trace passed file descriptors πŸ“

# sofdsnoop

Include timestamps ⏰

# sofdsnoop -T

Only trace PID 181 🎯

# sofdsnoop -p 181

Only trace TID 123 🧡

# sofdsnoop -t 123

Trace for 10 seconds only ⏳

# sofdsnoop -d 10

Only print process names containing "main" πŸ‘‘

# sofdsnoop -n main

πŸ¦‹ SOURCE πŸ¦‹

This one comes from bcc, ngl the good stuff πŸ”₯

https://github.com/iovisor/bcc

Also go poke around the bcc distribution for a companion _examples.txt file with example usage, output, and commentary for this tool 🧚 it's lowkey the best part πŸ™ˆ

🌈 OS 🌈

Linux 🐧

πŸ’€ STABILITY πŸ’€

Unstable - in development. Bestie, this is still cooking, so don't be shocked if it changes on you πŸ™ˆ

Manual page from USER COMMANDS, dated 2019-07-29, rewritten with love just for you πŸ’œπŸ«Άβœ¨

πŸ“¦ where this page comes from