Skip to main content
Version: latest

Gadget execsnoop

execsnoop shows new created processes, with container details.

Example CR​

apiVersion: gadget.kinvolk.io/v1alpha1
kind: Trace
metadata:
  name: execsnoop
  namespace: gadget
spec:
  node: ubuntu-hirsute
  gadget: execsnoop
  runMode: Manual
  outputMode: Stream
  filter:
    namespace: default

Operations​

start​

Start execsnoop gadget

$ kubectl annotate -n gadget trace/execsnoop \
    gadget.kinvolk.io/operation=start

stop​

Stop execsnoop gadget

$ kubectl annotate -n gadget trace/execsnoop \
    gadget.kinvolk.io/operation=stop

Output Modes​

  • Stream