blob: 1d15ebf4b345b8eadd3ddae2fff4fcffabcb7926 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
probe syscall.execve
{
if (pid() == target()) {
println(user_string($argv[0]))
printf("%c\n", $argv[0][0])
printf("%c\n", $argv[0][1])
printf("%c\n", $argv[0][2])
printf("%c\n", $argv[0][3])
printf("%c\n", $argv[0][4])
printf("%c\n", $argv[0][5])
printf("%c\n", $argv[0][6])
printf("%c\n", $argv[0][7])
printf("%c\n", $argv[0][8])
println($argv[0][9])
}
}
|