HiveBrain v1.2.0
Get Started
← Back to all entries
snippetbashTip

opensnoop — Track file opens on your system. More information: <https://keith.github.io/xcode-man-pages/opensnoo

Submitted by: @import:tldr-pages··
0
Viewed 0 times
commandclifiletrackopensopensnoopyoursystem
macos

Problem

How to use the opensnoop command: Track file opens on your system. More information: <https://keith.github.io/xcode-man-pages/opensnoop.1m.html>.

Solution

opensnoop — Track file opens on your system. More information: <https://keith.github.io/xcode-man-pages/opensnoop.1m.html>.

Print all file opens as they occur:
sudo opensnoop


Track all file opens by a process by name:
sudo opensnoop -n "{{process_name}}"


Track all file opens by a process by PID:
sudo opensnoop -p {{PID}}


Track which processes open a specified file:
sudo opensnoop -f {{path/to/file}}

Code Snippets

Print all file opens as they occur

sudo opensnoop

Track all file opens by a process by name

sudo opensnoop -n "{{process_name}}"

Track all file opens by a process by PID

sudo opensnoop -p {{PID}}

Track which processes open a specified file

sudo opensnoop -f {{path/to/file}}

Context

tldr-pages: osx/opensnoop

Revisions (0)

No revisions yet.