CAFAI, le 23/10/2014 à 09:31
Sysdig captures system calls and other system level events using a linux kernel facility called tracepoints, providing a rich set of real-time, system-level information.

Sysdig "packetizes" this information, so that you can do things like save it into trace files and easily filter it, a bit like you would do with tcpdump. This makes it very flexible to explore what processes are doing.

Sysdig is also packed with a set of scripts called Chisels that make it easier to extract useful information and do troubleshooting.

Sysdig is designed from the ground up for minimal overhead and is production ready.

http://draios.com/fishing-for-hackers-part-2/
(Permalink)