exitsnoop 960 B

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748
  1. #
  2. # pcp-htop(1) configuration file - see pcp-htop(5)
  3. #
  4. [exitsnoop]
  5. heading = ExitSnoop
  6. caption = BPF process exit(2) snoop
  7. default = false
  8. pid.heading = PID
  9. pid.caption = Process Identifier
  10. pid.metric = bpf.exitsnoop.pid
  11. pid.format = process
  12. ppid.heading = PPID
  13. ppid.caption = Parent Process
  14. ppid.metric = bpf.exitsnoop.ppid
  15. ppid.format = process
  16. tid.heading = TID
  17. tid.caption = Task Identifier
  18. tid.metric = bpf.exitsnoop.tid
  19. tid.format = process
  20. tid.default = false
  21. signal.heading = SIG
  22. signal.caption = Signal number
  23. signal.metric = bpf.exitsnoop.sig
  24. exit.heading = EXIT
  25. exit.caption = Exit Code
  26. exit.metric = bpf.exitsnoop.exit_code
  27. core.heading = CORE
  28. core.caption = Dumped core
  29. core.metric = bpf.exitsnoop.coredump
  30. core.default = false
  31. age.heading = AGE
  32. age.caption = Process age
  33. age.metric = bpf.exitsnoop.age
  34. age.default = false
  35. comm.heading = Command
  36. comm.caption = COMM
  37. comm.width = -16
  38. comm.metric = bpf.exitsnoop.comm
  39. comm.format = command