Comments (1)
With AppScope version 1.4.1 I am able to see events and metrics generated by screen. This issue seems to have been resolved somewhere along the way.
sudo apt install -y screen
./scope screen
echo foo
exit
./scope events
...
[231] Jul 17 10:54:27 screen fs fs.open file:/etc/screenrc
[Kb1] Jul 17 10:54:27 screen fs fs.close file:/etc/screenrc file_read_bytes:221184 file_read_ops:108 file_write_bytes:0 file_write_ops:0
[3m1] Jul 17 10:54:27 screen fs fs.open file:/lib/terminfo/x/xterm-256color
[2v1] Jul 17 10:54:27 screen fs fs.close file:/lib/terminfo/x/xterm-256color file_read_bytes:0 file_read_ops:0 file_write_bytes:0 file_write_ops:0
[wF1] Jul 17 10:54:27 screen fs fs.open file:/lib/terminfo/s/screen.xterm-256color
[BO1] Jul 17 10:54:27 screen fs fs.close file:/lib/terminfo/s/screen.xterm-256color file_read_bytes:0 file_read_ops:0 file_write_bytes:0 file_write_ops:0
[bZ1] Jul 17 10:54:27 screen fs fs.open file:/lib/terminfo/x/xterm-256color
[982] Jul 17 10:54:27 screen fs fs.close file:/lib/terminfo/x/xterm-256color file_read_bytes:0 file_read_ops:0 file_write_bytes:0 file_write_ops:0
[Di2] Jul 17 10:54:27 screen fs fs.open file:/etc/screenrc
[RX2] Jul 17 10:54:27 screen fs fs.close file:/etc/screenrc file_read_bytes:221184 file_read_ops:108 file_write_bytes:0 file_write_ops:0
[1Wg] Jul 17 10:54:35 screen fs fs.delete file:/run/screen/S-sean/788853.pts-5.redacted host:redacted op:unlink pid:788853 proc:screen unit
...
./scope metrics
...
NAME VALUE TYPE UNIT PID TAGS
proc.start 1 Count process 788842 args: screen,gid: 1000,groupname: sean,host: redacted,proc: screen,uid: …
proc.start 1 Count process 788853 args: screen,gid: 1000,groupname: sean,host: redacted,proc: screen,uid: …
proc.start 1 Count process 788855 args: SCREEN,gid: 1000,groupname: sean,host: redacted,proc: SCREEN,uid: …
proc.start 1 Count process 788856 args: SCREEN,gid: 1000,groupname: sean,host: redacted,proc: SCREEN,uid: …
proc.start 1 Count process 788855 args: /bin/bash,gid: 1000,groupname: sean,host: redacted,proc: bash,uid:…
proc.start 1 Count process 788858 args: /bin/bash,gid: 1000,groupname: sean,host: redacted,proc: bash,uid:…
proc.start 1 Count process 788858 args: /bin/sh /usr/bin/lesspipe,gid: 1000,groupname: sean,host: redacted…
proc.start 1 Count process 788859 args: /bin/sh /usr/bin/lesspipe,gid: 1000,groupname: sean,host: redacted…
proc.start 1 Count process 788859 args: basename /usr/bin/lesspipe,gid: 1000,groupname: sean,host: precisio…
proc.start 1 Count process 788866 args: SCREEN,gid: 1000,groupname: sean,host: redacted,proc: SCREEN,uid: …
proc.cpu 474667 Count microsecond 788853 host: redacted,proc: screen
proc.cpu_perc 4.74667 Gauge percent 788853 host: redacted,proc: screen
proc.mem 47372 Gauge kibibyte 788853 host: redacted,proc: screen
proc.thread 2 Gauge thread 788853 host: redacted,proc: screen
proc.fd 8 Gauge file 788853 host: redacted,proc: screen
proc.child 1 Gauge process 788853 host: redacted,proc: screen
fs.read 442393 Count byte 788853 host: redacted,proc: screen,summary: true
proc.cpu 513297 Count microsecond 788842 host: redacted,proc: screen
fs.write 1707 Count byte 788853 host: redacted,proc: screen,summary: true
fs.stat 3 Count operation 788853 host: redacted,proc: screen,summary: true
proc.cpu_perc 5.13297 Gauge percent 788842 host: redacted,proc: screen
fs.open 12 Count operation 788853 host: redacted,proc: screen,summary: true
fs.close 12 Count operation 788853 host: redacted,proc: screen,summary: true
net.port 1 Gauge instance 788853 host: redacted,proc: screen,summary: true
net.tcp 1 Gauge connection 788853 host: redacted,proc: screen,summary: true
proc.mem 47068 Gauge kibibyte 788842 host: redacted,proc: screen
fs.duration 1 Count microsecond 788853 host: redacted,proc: screen,summary: true
net.error 1 Count operation 788853 class: connection,host: redacted,proc: screen,summary: true
proc.thread 2 Gauge thread 788842 host: redacted,proc: screen
fs.error 2 Count operation 788853 class: open_close,host: redacted,proc: screen,summary: true
fs.error 5 Count operation 788853 class: read_write,host: redacted,proc: screen,summary: true
fs.error 3 Count operation 788853 class: stat,host: redacted,proc: screen,summary: true
proc.fd 6 Gauge file 788842 host: redacted,proc: screen
proc.child 1 Gauge process 788842 host: redacted,proc: screen
fs.stat 1 Count operation 788842 host: redacted,proc: screen,summary: true
fs.error 1 Count operation 788842 class: stat,host: redacted,proc: screen,summary: true
...
from appscope.
Related Issues (20)
- Mount the socket dir not the socket file
- ld.so.preload and scope in the PATH HOT 1
- Go build error with ld.so.preload enabled HOT 2
- top on Fedora error HOT 1
- Config is not getting set correctly in rules file or in attach when using filter --add HOT 6
- scope attach --inspect <pid> from container to host can return error when successful HOT 1
- Warning when scoping an an application that has the s bit set
- Use symbolic link to avoid two appscope libraries in one process
- [Bug]: Missing payload (request) using `host` app HOT 1
- Timeouts seen with appscope/edge integration HOT 2
- DNS tunelling/exfiltration POC HOT 3
- File system obfuscation
- Add support for sending the payloads using event channel HOT 3
- LD_PRELOAD is not set in some cases when exec'ing into a container that was started after a scope rule was added
- Unable to exec into container after re-adding a scope rule HOT 4
- Connection Graph HOT 1
- [Bug]: Sending payloads with cribl/event transport type - inconsistency with channel type
- Memory Snapshot on Command HOT 1
- Attempt to mount non-existent directory from host into container HOT 2
- Updates needed to CI
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from appscope.