1. 4fae497 Add inline comment about issue in 4.13 kernels. by David Calavera · 6 years ago
  2. dee18fe Update get_ppid comment. by David Calavera · 6 years ago
  3. 020bcd4 Try to get parent PID from current task's real parent. by David Calavera · 6 years ago
  4. 2da3426 generate indirect parameter assignment if arch uses syscall wrapper (#1816) by yonghong-song · 6 years ago
  5. 5340c21 execsnoop: don't print newlines in argv by Javier Honduvilla Coto · 6 years ago
  6. 6433569 using get_syscall_fnname to get kprobe func name for tools by Yonghong Song · 7 years ago
  7. 059ff55 Added -q option to the USAGE string in execsnoop. Added -q option to the manpage for execsnoop by Bastian Reitemeier · 7 years ago
  8. 9345df1 moved quoting below argument pattern match, so that the pattern match happens on the unquoted argument by Bastian Reitemeier · 7 years ago
  9. 79ce51c Added -q option to execsnoop to quote individual arguments. This helps when working with arguments that contain spaces. by Bastian Reitemeier · 7 years ago
  10. dbf0029 Rename kprobe_poll to perf_buffer_poll by Teng Qin · 7 years ago
  11. 42d6098 tools: switch to v2/3 independent bytes usage by Brenden Blanco · 8 years ago
  12. f13107a Ensure execsnoop.py replace result is not misplaced by Nathan Scott · 7 years ago
  13. cf0792f continue adding --ebpf option to the python tools/ scripts by Nathan Scott · 7 years ago
  14. 3c399da execsnoop: fix the prototype for kprobe__sys_execve by htbegin · 7 years ago
  15. a0c9b48 execsnoop: argument to change the number of arguments parsed by Paul Chaignon · 7 years ago
  16. ce36bb6 execsnoop: Fix -x handling by Kirill Smelkov · 7 years ago
  17. d1324ac remove trailing white spaces from source code files by Mauricio Vasquez B · 7 years ago
  18. 0a01506 Execsnoop cli args matching (#1115) by Nikita V. Shirokov · 8 years ago
  19. 2d86204 Fixes for LLVM 4.0 and python3 by Brenden Blanco · 8 years ago
  20. f41ae86 Tools lint cleanup (#764) by Sasha Goldshtein · 8 years ago
  21. bfdb3d4 execsnoop: show PPID in output by Mark Drayton · 8 years ago
  22. 5b47e0f execsnoop: use BPF_PERF_OUTPUT instead of trace pipe by Mark Drayton · 8 years ago
  23. 4afa96a cc: introduce helpers to access pt_regs in an arch-independent manner by Naveen N. Rao · 9 years ago
  24. 151a43a makes more sense to invert the -X usage by Brendan Gregg · 9 years ago
  25. af18bb3 execsnoop by Brendan Gregg · 9 years ago