Skip to content

Instantly share code, notes, and snippets.

@staticfloat
Created January 20, 2017 00:49
Show Gist options
  • Save staticfloat/b16d92174d75404e7462bb03d724424f to your computer and use it in GitHub Desktop.
Save staticfloat/b16d92174d75404e7462bb03d724424f to your computer and use it in GitHub Desktop.
execve("/usr/bin/inotifywait", ["inotifywait", "-m", "/tmp"], [/* 7 vars */]) = 0
brk(0) = 0xa77000
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f49efcaf000
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=13347, ...}) = 0
mmap(NULL, 13347, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f49efcab000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/usr/lib/libinotifytools.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320'\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=35336, ...}) = 0
mmap(NULL, 2210848, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f49ef875000
mprotect(0x7f49ef87d000, 2093056, PROT_NONE) = 0
mmap(0x7f49efa7c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f49efa7c000
mmap(0x7f49efa7e000, 76832, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f49efa7e000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\34\2\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=1738176, ...}) = 0
mmap(NULL, 3844640, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f49ef4ca000
mprotect(0x7f49ef66b000, 2097152, PROT_NONE) = 0
mmap(0x7f49ef86b000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a1000) = 0x7f49ef86b000
mmap(0x7f49ef871000, 14880, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f49ef871000
close(3) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f49efcaa000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f49efca9000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f49efca8000
arch_prctl(ARCH_SET_FS, 0x7f49efca9700) = 0
mprotect(0x7f49ef86b000, 16384, PROT_READ) = 0
mprotect(0x7f49efa7c000, 4096, PROT_READ) = 0
mprotect(0x605000, 4096, PROT_READ) = 0
mprotect(0x7f49efcb1000, 4096, PROT_READ) = 0
munmap(0x7f49efcab000, 13347) = 0
inotify_init() = 3
brk(0) = 0xa77000
brk(0xa98000) = 0xa98000
write(2, "Setting up watches.\n", 20Setting up watches.
) = 20
inotify_add_watch(3, "/tmp", IN_ACCESS|IN_MODIFY|IN_ATTRIB|IN_CLOSE|IN_OPEN|IN_MOVE|IN_CREATE|IN_DELETE|IN_DELETE_SELF|IN_MOVE_SELF) = 1
lstat("/tmp", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0
write(2, "Watches established.\n", 21Watches established.
) = 21
select(4, [3], NULL, NULL, NULL) = 1 (in [3])
ioctl(3, FIONREAD, [128]) = 0
read(3, "\1\0\0\0\0\1\0\0\0\0\0\0\20\0\0\0a\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 65536) = 128
fstat(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 5), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f49efcae000
write(1, "/tmp/ CREATE a\n", 15/tmp/ CREATE a
) = 15
write(1, "/tmp/ OPEN a\n", 13/tmp/ OPEN a
) = 13
write(1, "/tmp/ ATTRIB a\n", 15/tmp/ ATTRIB a
) = 15
write(1, "/tmp/ CLOSE_WRITE,CLOSE a\n", 26/tmp/ CLOSE_WRITE,CLOSE a
) = 26
select(4, [3], NULL, NULL, NULL
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment