Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Looks very useful. Some things you can do with it:

Dump system activity to file, so that sysdig can be used to process it later.

* sysdig -w trace.scap

Print process name and connection details for each incoming connection not served by apache.

* sysdig -p "%proc.name %fd.name" "evt.type=accept and proc.name!=httpd"

See the files where apache spends the most time doing I/O.

* sysdig -c topfiles_time proc.name=httpd

Show the network data that apache exchanged with 192.168.0.1.

* sysdig -A -c echo_fds fd.sip=192.168.0.1 and proc.name=httpd

Show every time a file is opened under /etc.

* sysdig evt.type=open and fd.name contains /etc



Thanks! A full list of examples can be found here: https://github.com/draios/sysdig/wiki/Sysdig%20Examples




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: