1 files changed, 10 insertions, 0 deletions
diff --git a/Proc/filebyproc.d b/Proc/filebyproc.d
new file mode 100755
index 000000000000..d1f75897bf17
--- /dev/null
+++ b/Proc/filebyproc.d
@@ -0,0 +1,10 @@
+#!/usr/sbin/dtrace -s
+/*
+ * filebyproc.d - snoop files opened by process name. DTrace OneLiner.
+ *
+ * This is a DTrace OneLiner from the DTraceToolkit.
+ *
+ * $Id: filebyproc.d 3 2007-08-01 10:50:08Z brendan $
+ */
+
+syscall::open*:entry { printf("%s %s", execname, copyinstr(arg0)); }