Skip to content

Instantly share code, notes, and snippets.

@jaredbeck

jaredbeck/gist:dd701be841309e11a54a

Created July 2, 2014 15:08
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jaredbeck/dd701be841309e11a54a to your computer and use it in GitHub Desktop.
Save jaredbeck/dd701be841309e11a54a to your computer and use it in GitHub Desktop.
Download ZIP
dtruss example
Raw
gistfile1.txt
PID/THRD SYSCALL(args) = return
18235/0x163c3b: execve("/Users/jared/bin/bash\0", 0x7FFF5310DBA8, 0x7FFF5310DBC8) = -1 Err#2
18235/0x163c3b: execve("/usr/local/bin/bash\0", 0x7FFF5310DBA8, 0x7FFF5310DBC8) = -1 Err#2
18235/0x163c3b: execve("/Users/jared/.rbenv/shims/bash\0", 0x7FFF5310DBA8, 0x7FFF5310DBC8) = -1 Err#2
18235/0x163c3b: execve("/Users/jared/.rbenv/bin/bash\0", 0x7FFF5310DBA8, 0x7FFF5310DBC8) = -1 Err#2
18235/0x163c3b: execve("/usr/local/heroku/bin/bash\0", 0x7FFF5310DBA8, 0x7FFF5310DBC8) = -1 Err#2
18235/0x163c3b: execve("/usr/bin/bash\0", 0x7FFF5310DBA8, 0x7FFF5310DBC8) = -1 Err#2
18235/0x163c3b: thread_selfid(0x0, 0x1DC0, 0x7FFF671FD550) = 1457211 0
18235/0x163c3b: csops(0x0, 0x0, 0x7FFF5310D294) = 0 0
18235/0x163c3b: issetugid(0x0, 0x0, 0x0) = 0 0
18235/0x163c3b: shared_region_check_np(0x7FFF5310B1C8, 0x10CAF2000, 0x4) = 0 0
18235/0x163c3b: stat64("/usr/lib/dtrace/libdtrace_dyld.dylib\0", 0x7FFF5310C378, 0x7FFF5310D2B0) = 0 0
18235/0x163c3b: open("/usr/lib/dtrace/libdtrace_dyld.dylib\0", 0x0, 0x0) = 3 0
18235/0x163c3b: pread(0x3, "\312\376\272\276\0", 0x1000, 0x0) = 4096 0
18235/0x163c3b: pread(0x3, "\317\372\355\376\a\0", 0x1000, 0x1000) = 4096 0
18235/0x163c3b: fcntl(0x3, 0x3D, 0x7FFF5310A6E0) = 0 0
18235/0x163c3b: mmap(0x10CAF7000, 0x2000, 0x5, 0x12, 0x3, 0x1000) = 0x10CAF7000 0
18235/0x163c3b: mmap(0x10CAF9000, 0x1000, 0x3, 0x12, 0x3, 0x3000) = 0x10CAF9000 0
18235/0x163c3b: mmap(0x10CAFA000, 0x2050, 0x1, 0x12, 0x3, 0x4000) = 0x10CAFA000 0
18235/0x163c3b: close(0x3) = 0 0
18235/0x163c3b: stat64("/usr/lib/libSystem.B.dylib\0", 0x7FFF5310C198, 0x7FFF5310D030) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libcache.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libcommonCrypto.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libcompiler_rt.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libcopyfile.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libcorecrypto.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libdispatch.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libdyld.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libkeymgr.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/liblaunch.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libmacho.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libquarantine.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libremovefile.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_asl.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_blocks.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_c.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_configuration.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_dnssd.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_info.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_kernel.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_m.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_malloc.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_network.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_notify.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_platform.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_pthread.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_sandbox.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libsystem_stats.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libunc.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libunwind.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/system/libxpc.dylib\0", 0x7FFF5310BDF8, 0x7FFF5310CC90) = 0 0
18235/0x163c3b: stat64("/usr/lib/libobjc.A.dylib\0", 0x7FFF5310B038, 0x7FFF5310BED0) = 0 0
18235/0x163c3b: stat64("/usr/lib/libauto.dylib\0", 0x7FFF5310B038, 0x7FFF5310BED0) = 0 0
18235/0x163c3b: stat64("/usr/lib/libc++abi.dylib\0", 0x7FFF5310AAE8, 0x7FFF5310B980) = 0 0
18235/0x163c3b: stat64("/usr/lib/libc++.1.dylib\0", 0x7FFF5310AAE8, 0x7FFF5310B980) = 0 0
18235/0x163c3b: stat64("/usr/lib/libDiagnosticMessagesClient.dylib\0", 0x7FFF5310A9C8, 0x7FFF5310B860) = 0 0
18235/0x163c3b: getpid(0x7FFF5310D088, 0x10CAF6004, 0xEA60) = 18235 0
18235/0x163c3b: open("/dev/dtracehelper\0", 0x2, 0x7FFF5310D180) = 3 0
18235/0x163c3b: ioctl(0x3, 0x80086804, 0x7FFF5310D108) = 0 0
18235/0x163c3b: __sysctl(0x7FFF5310CB28, 0x2, 0x7FFF5310CB38) = 0 0
18235/0x163c3b: thread_selfid(0x7FFF7D43C310, 0x7FFF7D43C258, 0x10101) = 1457211 0
18235/0x163c3b: bsdthread_register(0x7FFF987A3FBC, 0x7FFF987A3FAC, 0x2000) = 0 0
18235/0x163c3b: mprotect(0x10CAFD000, 0x88, 0x1) = 0 0
18235/0x163c3b: mprotect(0x10CAFF000, 0x1000, 0x0) = 0 0
18235/0x163c3b: mprotect(0x10CB15000, 0x1000, 0x0) = 0 0
18235/0x163c3b: mprotect(0x10CB16000, 0x1000, 0x0) = 0 0
18235/0x163c3b: mprotect(0x10CB2C000, 0x1000, 0x0) = 0 0
18235/0x163c3b: mprotect(0x10CB2D000, 0x1000, 0x1) = 0 0
18235/0x163c3b: mprotect(0x10CAFD000, 0x88, 0x3) = 0 0
18235/0x163c3b: mprotect(0x10CAFD000, 0x88, 0x1) = 0 0
18235/0x163c3b: issetugid(0x7FFF7B439480, 0x7FFFFFE00034, 0x7FFFFFE00036) = 0 0
18235/0x163c3b: getpid(0x1, 0x10CB2E000, 0x49656E69) = 18235 0
18235/0x163c3b: __mac_syscall(0x7FFF988EFE3F, 0x2, 0x7FFF5310C9A8) = 0 0
18235/0x163c3b: stat64("/AppleInternal\0", 0x7FFF5310CA28, 0x0) = -1 Err#2
18235/0x163c3b: audit_session_self(0x7FFF5310C8E0, 0x7FFF5310C718, 0x4) = 4099 0
18235/0x163c3b: geteuid(0x7FFF5310C8E0, 0x7FFF5310C718, 0x0) = 0 0
18235/0x163c3b: getegid(0x7FFF5310C8E0, 0x7FFF5310C718, 0x0) = 0 0
18235/0x163c3b: getaudit_addr(0x7FFF5310C9B8, 0x30, 0x0) = 0 0
18235/0x163c3b: csops(0x473B, 0x7, 0x7FFF5310C5A0) = 0 0
18235/0x163c3b: close(0x3) = 0 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment