Skip to content

Instantly share code, notes, and snippets.

@juniorz
Last active September 23, 2023 12:54
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save juniorz/9986999 to your computer and use it in GitHub Desktop.
Save juniorz/9986999 to your computer and use it in GitHub Desktop.
sysdig sample capture file

Test file generated for sysdig homebrew formula

This is how it was generated

$ mkdir -p /tmp/sysdig && cd /tmp/sysdig
$ sudo sysdig -w sample.scap evt.type=open and fd.name contains /tmp/sysdig

The test performed should be

$ sudo sysdig -r sample.scap evt.type=open fd.name contains /tmp/sysdig/sample.scap
1 03:08:16.115840886 1 sysdig (3532) < open fd=5(<f>/tmp/sysdig/sample.scap) name=sample.scap(/tmp/sysdig/sample.scap) flags=262(O_TRUNC|O_CREAT|O_WRONLY) mode=0
$
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment