sysdig digs sysdig

[brendangregg]

By default, sysdig writes entries to the log of itself writing entries to the log. Would be nice to filter out sysdig by default (with an option to enable for debug purposes?), filtered in the kernel (user-level for now).

# sysdig -w /tmp/out
# sysdig -r /tmp/out "proc.name=sysdig and evt.type=write" |more
25883 21:28:38.182317039 1 sysdig (14257) > write fd=5(<f>/tmp/out) size=4096 
25884 21:28:38.182344198 1 sysdig (14257) < write res=4096 data=........M<+..............................`..............bgregg-test-i-2
7eff009.. 
25889 21:28:38.182369428 1 sysdig (14257) > write fd=5(<f>/tmp/out) size=4096 
25890 21:28:38.182383233 1 sysdig (14257) < write res=4096 data=.........................rsyslogd../usr/sbin/rsyslogd..-c5.../.........
 ..e...g. 
25891 21:28:38.182410715 1 sysdig (14257) > write fd=5(<f>/tmp/out) size=4096 
25892 21:28:38.182423846 1 sysdig (14257) < write res=4096 data=pid.-g.-u.106:112.../............j...p...0.......0.......|.........plat
formservi 
[...]

[gianlucaborello]

fixed in 4beeb44