sh_flow.d - snoop Bourne shell execution showing function flow using DTrace. sh_flow.d This traces shell activity from all Bourne shells on the system that are running with sh provider support. This watches shell function entries and returns, and indents child function calls. Shell builtins are also printed. Any Evolving - uses the DTrace Shell provider, which may change as additional features are introduced. Check Shell/Readme to see what version these scripts are based on.

Default output, # sh_flow.d

C CPU-id

TIME(us) Time since boot, us

FILE Filename that this function belongs to

NAME Shell function, builtin or command name

-> function entry

<- function return

> builtin

| external command

Watch the first column carefully, it prints the CPU-id. If it changes, then it is very likely that the output has been shuffled.

See the DTraceToolkit for further documentation under the Examples, Notes and Docs directories. The example files may be especially useful as they aim to demonstrate how to interpret the output. sh_flow.d will run until Ctrl-C is hit. Brendan Gregg [CA, USA] dtrace(1M)