iovisor / iovisor/bcc

RFE: Display entire argument string in execsnoop output

Open
#740 5 comments 1 reaction 0 assignees View on GitHub
Dominant language
C
Stars
22.7k
Forks
4.1k
Avg merge
5d 13h
Merged PRs (30d)
3

Description

Execsnoop is by far one of the best utilities ever dreamed up. Any way to enhance the script to print the entire argument list passed to the program? This would have been super helpful while debugging [this](http://prefetch.net/blog/index.php/2016/10/07/ganglia-never-met-a-quote-it-didnt-like-wait-it-did/). I'm hoping to learn enough about bcc this weekend to write a DTraceToolkit rwsnoop replacement. That was another crazy useful utility for debugging problems.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start at the execsnoop entry point in bcc and inspect how its current argument output is assembled. Done means the output includes the entire argument list passed to each program, using the existing execsnoop behavior as the comparison.

Written by the indexing model from the issue text.

Assessment

Tech stack
linux
Domain
cli, observability-sre, operating-systems
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.