#!/usr/sbin/dtrace -Zs /* * sh_who.d - trace Bourne shell line execution by process using DTrace. * Written for the sh DTrace provider. * * $Id: sh_who.d,v 1.1.1.1 2015/09/30 22:01:07 christos Exp $ * * This traces shell activity from all Bourne shells on the system that are * running with sh provider support. * * USAGE: sh_who.d # hit Ctrl-C to end * * FIELDS: * PID Process ID of the shell * UID User ID of the owner * LINES Number of times a line was executed * FILE Pathname of the shell or shellscript * * Filenames are printed if available. * * COPYRIGHT: Copyright (c) 2007 Brendan Gregg. * * CDDL HEADER START * * The contents of this file are subject to the terms of the * Common Development and Distribution License, Version 1.0 only * (the "License"). You may not use this file except in compliance * with the License. * * You can obtain a copy of the license at Docs/cddl1.txt * or http://www.opensolaris.org/os/licensing. * See the License for the specific language governing permissions * and limitations under the License. * * CDDL HEADER END * * 09-Sep-2007 Brendan Gregg Created this. */ #pragma D option quiet dtrace:::BEGIN { printf("Tracing... Hit Ctrl-C to end.\n"); } sh*:::line { @lines[pid, uid, copyinstr(arg0)] = count(); } dtrace:::END { printf(" %6s %6s %6s %s\n", "PID", "UID", "LINES", "FILE"); printa(" %6d %6d %@6d %s\n", @lines); }