Analyzer syscall-execve


syscall-execve - fork and execute commands

Resource Category


Application Type & Technical Stack

  • C/C++

Command Line Syntax

The analyzer can be invoked directly on the command-line via the orxray utility from the openresty-xray-cli software package.

Alternatively, the analyzer can also be invoked manually or automatically on the web console UI of OpenResty XRay (like on the Advanced web page).

# PID is the target process PID.
orxray analyzer run syscall-execve -p PID

# trace a shell command directly
orxray analyzer run syscall-execve -c SHELL_CMD

# PGID is the process group ID or any process's PID within the target process
# group.
orxray analyzer run syscall-execve -p -PGID

# trace any processes started from the specified executable path.
orxray analyzer run syscall-execve --exe /path/to/exe/file

Tracing Multiple Processes


Output Formats

  • Flame Graphs


The OpenResty Inc. Team.

Copyright (C) by OpenResty Inc. All rights reserved.