#! /usr/bin env stap global opens[4000] function print_opens() { foreach ([exe, fn, wr] in opens-) { if (wr) str = "WR" else str = "RD" printf("%4d %-20s: %s %s\n", opens[exe, fn, wr], exe, str, fn) } } probe kernel.function("sys_open") { fn = user_string($filename) if (substr(fn, 0, 6) == "/proc/" || substr(fn, 0, 5) == "/sys/") opens[execname(), fn, $flags & 1] ++ } probe end { print_opens() exit() }