1The following is a demonstration of the dnlcsnoop.d script. 2 3 4Here we run dnlcsnoop.d, while in another window a "find /etc/default" 5command is executed, 6 7 # dnlcsnoop.d 8 PID CMD TIME HIT PATH 9 9185 bash 9 Y /etc 10 9185 bash 3 Y /etc 11 12293 bash 9 Y /usr 12 12293 bash 3 Y /usr/bin 13 12293 bash 4 Y /usr/bin/find 14 12293 bash 7 Y /lib 15 12293 bash 3 Y /lib/ld.so.1 16 12293 find 6 Y /usr 17 12293 find 3 Y /usr/bin 18 12293 find 3 Y /usr/bin/find 19 12293 find 3 Y /usr 20 12293 find 3 Y /usr/lib 21 12293 find 3 Y /usr/lib/ld.so.1 22 12293 find 3 Y /usr/lib/.. 23 12293 find 3 Y /usr/.. 24 12293 find 3 Y /lib 25 12293 find 3 Y /lib/ld.so.1 26 12293 find 3 Y /usr 27 12293 find 3 Y /usr/bin 28 12293 find 2 Y /usr/bin/find 29 12293 find 4 Y /var 30 12293 find 3 Y /var/ld 31 12293 find 3 Y /var/ld/ld.config 32 12293 find 3 Y /lib 33 12293 find 3 Y /lib/libc.so.1 34 12293 find 3 Y /lib 35 12293 find 3 Y /lib/libc.so.1 36 12293 find 3 Y /lib 37 12293 find 3 Y /lib/libc.so.1 38 12293 find 8 Y /export 39 12293 find 4 Y /export/home 40 12293 find 3 Y /export/home/root 41 12293 find 4 Y /export/home/root/CacheKit-0.93 42 12293 find 3 Y /export 43 12293 find 3 Y /export/home 44 12293 find 3 Y /export/home/root 45 12293 find 3 Y /export/home/root/CacheKit-0.93 46 12293 find 3 Y /etc 47 12293 find 3 Y /etc/default 48 12293 find 3 Y /etc 49 12293 find 3 Y /etc/default 50 12293 find 5 N /etc/default/cron 51 12293 find 3 N /etc/default/devfsadm 52 12293 find 4 N /etc/default/fs 53 12293 find 4 N /etc/default/kbd 54 12293 find 3 N /etc/default/keyserv 55 12293 find 4 N /etc/default/nss 56 12293 find 3 N /etc/default/syslogd 57 12293 find 3 N /etc/default/tar 58 12293 find 4 N /etc/default/utmpd 59 12293 find 5 N /etc/default/init 60 12293 find 4 Y /etc/default/login 61 12293 find 4 Y /etc/default/su 62 12293 find 3 N /etc/default/passwd 63 12293 find 3 N /etc/default/dhcpagent 64 12293 find 4 N /etc/default/inetinit 65 12293 find 3 N /etc/default/ipsec 66 12293 find 3 N /etc/default/mpathd 67 12293 find 3 N /etc/default/telnetd 68 12293 find 3 Y /etc/default/nfs 69 12293 find 3 N /etc/default/autofs 70 12293 find 9 Y /etc/default/ftp 71 12293 find 5 N /etc/default/rpc.nisd 72 12293 find 5 N /etc/default/nfslogd 73 12293 find 4 N /etc/default/lu 74 12293 find 6 N /etc/default/power 75 12293 find 5 N /etc/default/sys-suspend 76 12293 find 6 N /etc/default/metassist.xml 77 12293 find 5 N /etc/default/yppasswdd 78 12293 find 4 N /etc/default/webconsole 79 12293 find 5 Y /export 80 12293 find 4 Y /export/home 81 12293 find 4 Y /export/home/root 82 12293 find 4 Y /export/home/root/CacheKit-0.93 83 84The DNLC is the Directory Name Lookup Cache. Here we can see name lookups, 85and whether the cache returned a hit. "/export/home/root/CacheKit-0.93" was 86looked up a few times - this was the current directory that the find 87command was executed from. 88 89