Hi Deba, > Now I want to know which script is updating this file. I would like to the > see the output of "ptree 18786". I am not sure how to this structure of ptree > or the name of the script.
The simple approach may just be to stop the target process, ptree it and then continue it: #!/usr/sbin/dtrace -s #pragma D option destructive syscall::open*:entry /pid == $1/ { printf("%s %s %d", execname, copyinstr(arg0), pid); stop(); system("ptree %d", pid); system("prun %d", pid); } Jon. _______________________________________________ dtrace-discuss mailing list dtrace-discuss@opensolaris.org