#!/usr/sbin/dtrace -s /* * creatbyproc.d - file creat()s by process name. DTrace OneLiner. * * This is a DTrace OneLiner from the DTraceToolkit. * * $Id: creatbyproc.d 3 2007-08-01 10:50:08Z brendan $ */ syscall::creat*:entry { printf("%s %s", execname, copyinstr(arg0)); }