Hi Deba,

> Now I want to know which script is updating this file. I would like to the 
> see the output of "ptree 18786". I am not sure how to this structure of ptree 
> or the name of the script.

The simple approach may just be to stop the target process,
ptree it and then continue it:

#!/usr/sbin/dtrace -s

#pragma D option destructive

syscall::open*:entry
/pid == $1/
{
    printf("%s %s %d", execname, copyinstr(arg0), pid);
    stop();
    system("ptree %d", pid);
    system("prun %d", pid);
}


Jon.
_______________________________________________
dtrace-discuss mailing list
dtrace-discuss@opensolaris.org

Reply via email to