bcc-shmsnoop(8)

1shmsnoop(8)                 System Manager's Manual                shmsnoop(8)
2
3
4

NAME

6       shmsnoop - Trace System V shared memory syscalls. Uses Linux eBPF/bcc.
7

SYNOPSIS

9       shmsnoop [-h] [-T] [-p] [-t] [-d DURATION] [-n NAME]
10

DESCRIPTION

12       shmsnoop  traces System V shared memory syscalls: shmget, shmat, shmdt,
13       shmctl
14
15       Since this uses BPF, only the root user can use this tool.
16

REQUIREMENTS

18       CONFIG_BPF and bcc.
19

OPTIONS

21       -h     Print usage message.
22
23       -T     Include a timestamp column.
24
25       -p PID Trace this process ID only (filtered in-kernel).
26
27       -t TID Trace this thread ID only (filtered in-kernel).
28
29       -d DURATION
30              Total duration of trace in seconds.
31
32       -n NAME
33              Only print command lines matching this command name (regex)
34

EXAMPLES

36       Trace all shm* syscalls:
37              # shmsnoop
38
39       Trace all shm* syscalls, and include timestamps:
40              # shmsnoop -T
41
42       Only trace shm* syscalls where the process contains "server":
43              # shmsnoop -n server
44

FIELDS

46       TIME(s)
47              Time of shm syscall return, in seconds.
48
49       PID    Process ID
50
51       COMM   Parent process/command name.
52
53       RET    Return value of shm syscall.
54
55       ARGS   "arg: value" couples that represent given syscall  arguments  as
56              described in their manpage
57

SOURCE

59       This is from bcc.
60
61              https://github.com/iovisor/bcc
62
63       Also  look  in  the bcc distribution for a companion _examples.txt file
64       containing example usage, output, and commentary for this tool.
65

OS

67       Linux
68

STABILITY

70       Unstable - in development.
71

AUTHOR

73       Jiri Olsa
74