snippetbashTip

sysdig — System troubleshooting, analysis, and exploration. Capture, filter, and store systemcalls. More info

Submitted by: @import:tldr-pages·Mar 2, 2026·

Viewed 0 times

troubleshootingcommandexplorationsysdiganalysisandclisystem

linux

Problem

How to use the sysdig command: System troubleshooting, analysis, and exploration. Capture, filter, and store systemcalls. More information: <https://github.com/draios/sysdig/wiki>.

Solution

sysdig — System troubleshooting, analysis, and exploration. Capture, filter, and store systemcalls. More information: <https://github.com/draios/sysdig/wiki>.

Capture all the events from the live system and print them to screen:

sysdig

Capture all the events from the live system and save them to disk:

sysdig {{[-w|--write]}} {{path/to/file}}.scap

Read events from a file and print them to screen:

sysdig {{[-r|--read]}} {{path/to/file}}.scap

Filter and Print all the open system calls invoked by cat:

sysdig proc.name=cat and evt.type=open

Register any found plugin and use dummy as input source passing to it open params:

sysdig -I dummy:'{{parameter}}'

List the available chisels:

sysdig {{[-cl|--list-chisels]}}

Use the spy_ip chisel to look at the data exchanged with ip address:

sysdig {{[-c|--chisel]}} spy_ip {{ip_address}}

Code Snippets

Capture all the events from the live system and print them to screen

sysdig

Capture all the events from the live system and save them to disk

sysdig {{[-w|--write]}} {{path/to/file}}.scap

Read events from a file and print them to screen

sysdig {{[-r|--read]}} {{path/to/file}}.scap

Filter and Print all the open system calls invoked by cat

sysdig proc.name=cat and evt.type=open

sysdig -I dummy:'{{parameter}}'

Context

tldr-pages: linux/sysdig

Revisions (0)

No revisions yet.