1 #!/usr/sbin/dtrace -s 2 /* 3 * creatbyproc.d - file creat()s by process name. DTrace OneLiner. 4 * 5 * This is a DTrace OneLiner from the DTraceToolkit. 6 * 7 * $Id: creatbyproc.d,v 1.1.1.1 2015/09/30 22:01:09 christos Exp $ 8 */ 9 10 syscall::creat*:entry { printf("%s %s", execname, copyinstr(arg0)); } 11