Cool MySQL example.

[SchizoDuckie]

I'm not allowed to add examples to the wiki, so i thought i'd share this.

Monitor all traffic between apache and mysql and dump the SELECT queries it executes

sysdig -A -c echo_fds fd.sip=192.168.30.5 and proc.name=apache2 | grep SELECT

[kristopolous]

hey this one's pretty clever. nice going.

[gianlucaborello]

Great!

Now let's get rid of that "ugly" grep:

sysdig -A -c echo_fds fd.sip=192.168.30.5 and proc.name=apache2 and evt.buffer contains SELECT

Much better output, right?

PS: You can also control the size of the captured buffer this way, take a look at sysdig --help

[gianlucaborello]

I also just opened the wiki permissions so feel free to add a new example (the less you pipe sysdig output to other tools the more you score points :))

Thanks!

[ldegio]

By the way,it can still be improved a little bit if you need to see more than 80 bytes of each buffer:

sysdig -s 2000 -A -c echo_fds fd.sip=192.168.30.5 and proc.name=apache2 and evt.buffer contains SELECT