1N/AThe following is an example of the creatbyproc.d script,

1N/A

1N/A

1N/AHere we run creatbyproc.d for several seconds,

1N/A

1N/A # ./creatbyproc.d

1N/A dtrace: script './creatbyproc.d' matched 2 probes

1N/A CPU ID FUNCTION:NAME

1N/A 0 5438 creat64:entry touch /tmp/newfile

1N/A 0 5438 creat64:entry sh /tmp/mpLaaOik

1N/A 0 5438 creat64:entry sh /dev/null

1N/A ^C

1N/A

1N/AIn another window, the following commands were run,

1N/A

1N/A touch /tmp/newfile

1N/A man ls

1N/A

1N/AThe file creation activity caused by these commands can be seen in the

1N/Aoutput by creatbyproc.d

1N/A

1N/A

1N/A