Comments (3)
The first issue (only matching when "evt.dir=<") is caused by the fact that when the enter event is parsed, there's neither FD number nor FD name. They are both part of the exit event for open. Since the values are not defined, the filtering system drops the event. I've been thinking about the issue in the past, and I couldn't come up with a good solution. It might be possible to buffer the enter events before feeding them to the filtering system, but that would have not trivial implications in terms of performance and event reordering.
Issue #2 (missing errors) is a bug and I will work on it.
from sysdig.
I think 6fe5611 should fix the second issue. Can you please try and close the issue if it works as expected?
from sysdig.
# sysdig -p "%fd.num %fd.name" "evt.type=open and proc.name=df"
3 /etc/ld.so.cache
3 /lib/x86_64-linux-gnu/libc.so.6
3 /usr/lib/locale/locale-archive
3 /etc/mtab
3 /usr/share/locale/locale.alias
-1 /usr/share/locale/en_US.UTF-8/LC_MESSAGES/coreutils.mo
-1 /usr/share/locale/en_US.utf8/LC_MESSAGES/coreutils.mo
-1 /usr/share/locale/en_US/LC_MESSAGES/coreutils.mo
-1 /usr/share/locale/en.UTF-8/LC_MESSAGES/coreutils.mo
-1 /usr/share/locale/en.utf8/LC_MESSAGES/coreutils.mo
-1 /usr/share/locale/en/LC_MESSAGES/coreutils.mo
-1 /usr/share/locale-langpack/en_US.UTF-8/LC_MESSAGES/coreutils.mo
-1 /usr/share/locale-langpack/en_US.utf8/LC_MESSAGES/coreutils.mo
-1 /usr/share/locale-langpack/en_US/LC_MESSAGES/coreutils.mo
-1 /usr/share/locale-langpack/en.UTF-8/LC_MESSAGES/coreutils.mo
-1 /usr/share/locale-langpack/en.utf8/LC_MESSAGES/coreutils.mo
-1 /usr/share/locale-langpack/en/LC_MESSAGES/coreutils.mo
3 /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache
Much better, that's expected. Thanks!
from sysdig.
Related Issues (20)
- if use "container.id" or "container.name" ,there is no feedback or output HOT 2
- How to install or use sysdig in container on Fedora Silverblue or Fedora CoreOS? HOT 3
- Red Hat 9 isn't supported - SHA 1 deprecated HOT 2
- Tools for tracking down I/O Wait HOT 1
- Container image missing tools used in chisels
- CPU usage reported as 0.00 when using `--modern-bpf` HOT 2
- sysdig manual needs to be updated HOT 4
- The tracking of orphan processes is lost. HOT 2
- The situation where syscall events are lost when tracing programs with frequent system calls. HOT 3
- Docker image build "E: Unable to locate package clang-7 E: Unable to locate package llvm-7 E: Unable to locate package libmpx2" HOT 4
- Compilation error: “install TARGETS given target "sinsp" which does not exist in this directory.” HOT 4
- Unable to load the driver. Error opening device /dev/scap0 HOT 3
- CSysdig Rendering IPv6 Addresses For IPv4 Addresses? HOT 1
- Compile error for BPF driver on arm64 GKE server HOT 50
- Undetected syscall error HOT 1
- All chisels are broken: `attempt to index global 'sysdig' (a nil value)` HOT 13
- `evt.res` and `evt.rawres` and `evt.failed` are gone HOT 2
- csysdig Crashes When `~/chisels` Directory Is Missing HOT 11
- Ask about evt.type=procinfo HOT 3
- UDP connections not closing anymore HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sysdig.