Created
March 19, 2026 22:47
-
-
Save hed0rah/9d6e46ea3ddce576d767273ce17b2540 to your computer and use it in GitHub Desktop.
jkdsakjdsa
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ┌──(booger㉿killengn)-[~/bcc-bpf] | |
| └─$ sudo python3 ~/bcc-bpf/examples/file_watcher.py python3 | |
| Watching file I/O for: python3 (excluding self pid=8531) | |
| ────────────────────────────────────────────────────────────────────────────── | |
| OP PID COMM BYTES FILENAME | |
| ────────────────────────────────────────────────────────────────────────────── | |
| OPEN pid=8534 comm=python3 /etc/ld.so.cache | |
| OPEN pid=8534 comm=python3 /lib/aarch64-linux-gnu/libm.so.6 | |
| READ pid=8534 comm=python3 832 bytes | |
| OPEN pid=8534 comm=python3 /lib/aarch64-linux-gnu/libz.so.1 | |
| READ pid=8534 comm=python3 832 bytes | |
| OPEN pid=8534 comm=python3 /lib/aarch64-linux-gnu/libexpat.so.1 | |
| READ pid=8534 comm=python3 832 bytes | |
| OPEN pid=8534 comm=python3 /lib/aarch64-linux-gnu/libc.so.6 | |
| READ pid=8534 comm=python3 832 bytes | |
| OPEN pid=8534 comm=python3 /proc/sys/vm/overcommit_memory | |
| READ pid=8534 comm=python3 2 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/locale/locale-archive | |
| OPEN pid=8534 comm=python3 /usr/lib/aarch64-linux-gnu/gconv/gconv-modules.cache | |
| OPEN pid=8534 comm=python3 /usr/pyvenv.cfg | |
| OPEN pid=8534 comm=python3 /usr/bin/pyvenv.cfg | |
| OPEN pid=8534 comm=python3 /usr/bin/python3._pth | |
| OPEN pid=8534 comm=python3 /usr/bin/python3.13._pth | |
| OPEN pid=8534 comm=python3 /usr/bin/pybuilddir.txt | |
| OPEN pid=8534 comm=python3 /etc/localtime | |
| READ pid=8534 comm=python3 3552 bytes | |
| READ pid=8534 comm=python3 2260 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13 | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/encodings/__pycache__/__init__.cpython-313.pyc | |
| READ pid=8534 comm=python3 6017 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/encodings | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/encodings/__pycache__/aliases.cpython-313.pyc | |
| READ pid=8534 comm=python3 12385 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/encodings/__pycache__/utf_8.cpython-313.pyc | |
| READ pid=8534 comm=python3 2284 bytes | |
| OPEN pid=8534 comm=python3 /usr/local/lib/python3.13/dist-packages | |
| OPEN pid=8534 comm=python3 /usr/lib/python3/dist-packages | |
| OPEN pid=8534 comm=python3 /usr/lib/python3/dist-packages/distutils-precedence.pth | |
| READ pid=8534 comm=python3 151 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/encodings/__pycache__/utf_8_sig.cpython-313.pyc | |
| READ pid=8534 comm=python3 6913 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/lib-dynload | |
| OPEN pid=8534 comm=python3 /usr/local/lib/python3.13/dist-packages | |
| OPEN pid=8534 comm=python3 /usr/lib/python3/dist-packages | |
| OPEN pid=8534 comm=python3 /usr/lib/python3/dist-packages/_distutils_hack/__pycache__/__init__.cpython-313.pyc | |
| READ pid=8534 comm=python3 10714 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3/dist-packages/logilab_common-2.1.0-nspkg.pth | |
| READ pid=8534 comm=python3 472 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/types.cpython-313.pyc | |
| READ pid=8534 comm=python3 15545 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/importlib/__pycache__/__init__.cpython-313.pyc | |
| READ pid=8534 comm=python3 4544 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/importlib | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/importlib/__pycache__/_abc.cpython-313.pyc | |
| READ pid=8534 comm=python3 1618 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/sitecustomize.cpython-313.pyc | |
| READ pid=8534 comm=python3 299 bytes | |
| OPEN pid=8534 comm=python3 /home/booger/bcc-bpf/examples/file_walker.py | |
| READ pid=8534 comm=python3 940 bytes | |
| OPEN pid=8534 comm=python3 /home/booger/bcc-bpf/examples/file_walker.py | |
| READ pid=8534 comm=python3 940 bytes | |
| READ pid=8534 comm=python3 940 bytes | |
| OPEN pid=8534 comm=python3 /home/booger/bcc-bpf/examples | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/tempfile.cpython-313.pyc | |
| READ pid=8534 comm=python3 49845 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/functools.cpython-313.pyc | |
| READ pid=8534 comm=python3 42253 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/collections/__pycache__/__init__.cpython-313.pyc | |
| READ pid=8534 comm=python3 73200 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/keyword.cpython-313.pyc | |
| READ pid=8534 comm=python3 1041 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/operator.cpython-313.pyc | |
| READ pid=8534 comm=python3 17365 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/reprlib.cpython-313.pyc | |
| READ pid=8534 comm=python3 10423 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/warnings.cpython-313.pyc | |
| READ pid=8534 comm=python3 29538 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/shutil.cpython-313.pyc | |
| READ pid=8534 comm=python3 67452 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/fnmatch.cpython-313.pyc | |
| READ pid=8534 comm=python3 6804 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/re/__pycache__/__init__.cpython-313.pyc | |
| READ pid=8534 comm=python3 19368 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/enum.cpython-313.pyc | |
| READ pid=8534 comm=python3 85851 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/re | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/re/__pycache__/_compiler.cpython-313.pyc | |
| READ pid=8534 comm=python3 26866 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/re/__pycache__/_parser.cpython-313.pyc | |
| READ pid=8534 comm=python3 43564 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/re/__pycache__/_constants.cpython-313.pyc | |
| READ pid=8534 comm=python3 5379 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/re/__pycache__/_casefix.cpython-313.pyc | |
| READ pid=8534 comm=python3 1816 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/copyreg.cpython-313.pyc | |
| READ pid=8534 comm=python3 7536 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/bz2.cpython-313.pyc | |
| READ pid=8534 comm=python3 15165 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/_compression.cpython-313.pyc | |
| READ pid=8534 comm=python3 7805 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/lib-dynload/_bz2.cpython-313-aarch64-linux-gnu.so | |
| READ pid=8534 comm=python3 832 bytes | |
| OPEN pid=8534 comm=python3 /etc/ld.so.cache | |
| OPEN pid=8534 comm=python3 /lib/aarch64-linux-gnu/libbz2.so.1.0 | |
| READ pid=8534 comm=python3 832 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/lzma.cpython-313.pyc | |
| READ pid=8534 comm=python3 15718 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/lib-dynload/_lzma.cpython-313-aarch64-linux-gnu.so | |
| READ pid=8534 comm=python3 832 bytes | |
| OPEN pid=8534 comm=python3 /etc/ld.so.cache | |
| OPEN pid=8534 comm=python3 /lib/aarch64-linux-gnu/liblzma.so.5 | |
| READ pid=8534 comm=python3 832 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/random.cpython-313.pyc | |
| READ pid=8534 comm=python3 35256 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/bisect.cpython-313.pyc | |
| READ pid=8534 comm=python3 3497 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/weakref.cpython-313.pyc | |
| READ pid=8534 comm=python3 31803 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/_weakrefset.cpython-313.pyc | |
| READ pid=8534 comm=python3 12049 bytes | |
| OPEN pid=8534 comm=python3 /tmp/v5j2rvry | |
| WRITE pid=8534 comm=python3 4 bytes | |
| WRITE pid=8534 comm=python3 43 bytes | |
| WRITE pid=8534 comm=python3 46 bytes | |
| WRITE pid=8534 comm=python3 1 bytes | |
| OPEN pid=8534 comm=python3 /tmp/walker_log.txt | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/traceback.cpython-313.pyc | |
| READ pid=8534 comm=python3 72124 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/linecache.cpython-313.pyc | |
| READ pid=8534 comm=python3 8552 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/textwrap.cpython-313.pyc | |
| READ pid=8534 comm=python3 17934 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/contextlib.cpython-313.pyc | |
| READ pid=8534 comm=python3 30494 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/_colorize.cpython-313.pyc | |
| READ pid=8534 comm=python3 4011 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/__future__.cpython-313.pyc | |
| READ pid=8534 comm=python3 4722 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/tokenize.cpython-313.pyc | |
| READ pid=8534 comm=python3 25434 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/token.cpython-313.pyc | |
| READ pid=8534 comm=python3 3573 bytes | |
| OPEN pid=8534 comm=python3 /home/booger/bcc-bpf/examples/file_walker.py | |
| READ pid=8534 comm=python3 940 bytes | |
| WRITE pid=8534 comm=python3 35 bytes | |
| OPEN pid=8534 comm=python3 /usr/lib/python3.13/__pycache__/ast.cpython-313.pyc |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment