sh_who.d - trace Bourne shell line execution by process using DTrace. sh_who.d This traces shell activity from all Bourne shells on the system that are running with sh provider support. Filenames are printed if available. Any Evolving - uses the DTrace Shell provider, which may change as additional features are introduced. Check Shell/Readme to see what version these scripts are based on.

Default output, # sh_who.d

PID Process ID of the shell

UID User ID of the owner

LINES Number of times a line was executed

FILE Pathname of the shell or shellscript

See the DTraceToolkit for further documentation under the Examples, Notes and Docs directories. The example files may be especially useful as they aim to demonstrate how to interpret the output. sh_who.d will run until Ctrl-C is hit. Brendan Gregg [CA, USA] dtrace(1M)