sysdig
System troubleshooting, analysis, and exploration. tldr-pages
On Linux
Linux
System troubleshooting, analysis, and exploration. Capture, filter, and store systemcalls.
Capture all the events from the live system and print them to screen
sysdigIdentifyCapture all the events from the live system and save them to disk
sysdig --write path/to/file.scapIdentifyRead events from a file and print them to screen
sysdig --read path/to/file.scapIdentifyFilter and Print all the open system calls invoked by cat
sysdig proc.name=cat and evt.type=openIdentifyRegister any found plugin and use dummy as input source passing to it open params
sysdig -I dummy:'parameter'IdentifyList the available chisels
sysdig --list-chiselsIdentifyUse the spy_ip chisel to look at the data exchanged with ip address
sysdig --chisel spy_ip ip_addressIdentify