1The following demonstrates iosnoop. It was run on a system that was 2fairly quiet until a tar command was run, 3 4# ./iosnoop 5 UID PID D BLOCK SIZE COMM PATHNAME 6 0 0 W 1067 512 sched <none> 7 0 0 W 6496304 1024 sched <none> 8 0 3 W 6498797 512 fsflush <none> 9 0 0 W 1067 512 sched <none> 10 0 0 W 6496304 1024 sched <none> 11 100 443 R 892288 4096 Xsun /usr/openwin/bin/Xsun 12 100 443 R 891456 4096 Xsun /usr/openwin/bin/Xsun 13 100 15795 R 3808 8192 tar /usr/bin/eject 14 100 15795 R 35904 6144 tar /usr/bin/eject 15 100 15795 R 39828 6144 tar /usr/bin/env 16 100 15795 R 3872 8192 tar /usr/bin/expr 17 100 15795 R 21120 7168 tar /usr/bin/expr 18 100 15795 R 43680 6144 tar /usr/bin/false 19 100 15795 R 44176 6144 tar /usr/bin/fdetach 20 100 15795 R 3920 8192 tar /usr/bin/fdformat 21 100 15795 R 3936 8192 tar /usr/bin/fdformat 22 100 15795 R 4080 8192 tar /usr/bin/fdformat 23 100 15795 R 9680 3072 tar /usr/bin/fdformat 24 100 15795 R 4096 8192 tar /usr/bin/fgrep 25 100 15795 R 46896 6144 tar /usr/bin/fgrep 26 100 15795 R 4112 8192 tar /usr/bin/file 27 100 15795 R 4128 8192 tar /usr/bin/file 28 100 15795 R 4144 8192 tar /usr/bin/file 29 100 15795 R 21552 7168 tar /usr/bin/file 30 100 15795 R 4192 8192 tar /usr/bin/fmli 31 100 15795 R 4208 8192 tar /usr/bin/fmli 32 100 15795 R 4224 57344 tar /usr/bin/fmli 33 100 15795 R 4336 24576 tar /usr/bin/fmli 34 100 15795 R 695792 8192 tar <none> 35 100 15795 R 696432 57344 tar /usr/bin/fmli 36[...] 37 38 39 40