1. 03e4948 tools: Unify PID column width (at most 7 chars) by xingfeng2510 · 2 years, 3 months ago
  2. 32ab858 tools: add filtering by mount namespace by Alban Crequy · 4 years, 3 months ago
  3. 023154c bcc/tools: Introduce bpf_probe_read_user to the tools. by Sumanth Korikkar · 4 years, 2 months ago
  4. c949f61 tools: execsnoop add -U and -u flags by Slava Bacherikov · 4 years, 4 months ago
  5. b26b429 tools: fix confusion between execsnoop and opensnoop by Alban Crequy · 4 years, 4 months ago
  6. b2aa29f tools: cgroup filtering in execsnoop/opensnoop by Alban Crequy · 4 years, 6 months ago
  7. fc72531 tools/execsnoop: add -T option by Xiaozhou Liu · 5 years ago
  8. 6c79331 tools: don't mix print(end="") with printb() by Gary Lin · 5 years ago
  9. f03beca tools: fix some python3 bytes vs strings issues (#2205) by Jerome Marchand · 5 years ago
  10. 51d62d3 tools: remove redundant Python event data structure definitions (#2204) by Xiaozhou Liu · 5 years ago
  11. cc01a9c tools/examples: hardcode #!/usr/bin/python shebang by Alexey Ivanov · 5 years ago
  12. 777e802 Unify python executables to use `#!/usr/bin/env python` shebang (#2102) by Alexey Ivanov · 5 years ago
  13. 5167127 Tools: properly handle the keyboard interrupt (#2083) by Jerome Marchand · 5 years ago
  14. 4fae497 Add inline comment about issue in 4.13 kernels. by David Calavera · 6 years ago
  15. dee18fe Update get_ppid comment. by David Calavera · 6 years ago
  16. 020bcd4 Try to get parent PID from current task's real parent. by David Calavera · 6 years ago
  17. 2da3426 generate indirect parameter assignment if arch uses syscall wrapper (#1816) by yonghong-song · 6 years ago
  18. 5340c21 execsnoop: don't print newlines in argv by Javier Honduvilla Coto · 6 years ago
  19. 6433569 using get_syscall_fnname to get kprobe func name for tools by Yonghong Song · 6 years ago
  20. 059ff55 Added -q option to the USAGE string in execsnoop. Added -q option to the manpage for execsnoop by Bastian Reitemeier · 6 years ago
  21. 9345df1 moved quoting below argument pattern match, so that the pattern match happens on the unquoted argument by Bastian Reitemeier · 6 years ago
  22. 79ce51c Added -q option to execsnoop to quote individual arguments. This helps when working with arguments that contain spaces. by Bastian Reitemeier · 6 years ago
  23. dbf0029 Rename kprobe_poll to perf_buffer_poll by Teng Qin · 6 years ago
  24. 42d6098 tools: switch to v2/3 independent bytes usage by Brenden Blanco · 7 years ago
  25. f13107a Ensure execsnoop.py replace result is not misplaced by Nathan Scott · 6 years ago
  26. cf0792f continue adding --ebpf option to the python tools/ scripts by Nathan Scott · 6 years ago
  27. 3c399da execsnoop: fix the prototype for kprobe__sys_execve by htbegin · 6 years ago
  28. a0c9b48 execsnoop: argument to change the number of arguments parsed by Paul Chaignon · 7 years ago
  29. ce36bb6 execsnoop: Fix -x handling by Kirill Smelkov · 7 years ago
  30. d1324ac remove trailing white spaces from source code files by Mauricio Vasquez B · 7 years ago
  31. 0a01506 Execsnoop cli args matching (#1115) by Nikita V. Shirokov · 7 years ago
  32. 2d86204 Fixes for LLVM 4.0 and python3 by Brenden Blanco · 7 years ago
  33. f41ae86 Tools lint cleanup (#764) by Sasha Goldshtein · 8 years ago
  34. bfdb3d4 execsnoop: show PPID in output by Mark Drayton · 8 years ago
  35. 5b47e0f execsnoop: use BPF_PERF_OUTPUT instead of trace pipe by Mark Drayton · 8 years ago
  36. 4afa96a cc: introduce helpers to access pt_regs in an arch-independent manner by Naveen N. Rao · 8 years ago
  37. 151a43a makes more sense to invert the -X usage by Brendan Gregg · 8 years ago
  38. af18bb3 execsnoop by Brendan Gregg · 8 years ago