1#!/usr/sbin/dtrace -s
2/*
3 * filebyproc.d - snoop files opened by process name. DTrace OneLiner.
4 *
5 * This is a DTrace OneLiner from the DTraceToolkit.
6 *
7 * $Id: filebyproc.d 3 2007-08-01 10:50:08Z brendan $
8 */
9
10syscall::open*:entry { printf("%s %s", execname, copyinstr(arg0)); }
11