1 1.1 christos The following is a demonstration of the dnlcsnoop.d script. 2 1.1 christos 3 1.1 christos 4 1.1 christos Here we run dnlcsnoop.d, while in another window a "find /etc/default" 5 1.1 christos command is executed, 6 1.1 christos 7 1.1 christos # dnlcsnoop.d 8 1.1 christos PID CMD TIME HIT PATH 9 1.1 christos 9185 bash 9 Y /etc 10 1.1 christos 9185 bash 3 Y /etc 11 1.1 christos 12293 bash 9 Y /usr 12 1.1 christos 12293 bash 3 Y /usr/bin 13 1.1 christos 12293 bash 4 Y /usr/bin/find 14 1.1 christos 12293 bash 7 Y /lib 15 1.1 christos 12293 bash 3 Y /lib/ld.so.1 16 1.1 christos 12293 find 6 Y /usr 17 1.1 christos 12293 find 3 Y /usr/bin 18 1.1 christos 12293 find 3 Y /usr/bin/find 19 1.1 christos 12293 find 3 Y /usr 20 1.1 christos 12293 find 3 Y /usr/lib 21 1.1 christos 12293 find 3 Y /usr/lib/ld.so.1 22 1.1 christos 12293 find 3 Y /usr/lib/.. 23 1.1 christos 12293 find 3 Y /usr/.. 24 1.1 christos 12293 find 3 Y /lib 25 1.1 christos 12293 find 3 Y /lib/ld.so.1 26 1.1 christos 12293 find 3 Y /usr 27 1.1 christos 12293 find 3 Y /usr/bin 28 1.1 christos 12293 find 2 Y /usr/bin/find 29 1.1 christos 12293 find 4 Y /var 30 1.1 christos 12293 find 3 Y /var/ld 31 1.1 christos 12293 find 3 Y /var/ld/ld.config 32 1.1 christos 12293 find 3 Y /lib 33 1.1 christos 12293 find 3 Y /lib/libc.so.1 34 1.1 christos 12293 find 3 Y /lib 35 1.1 christos 12293 find 3 Y /lib/libc.so.1 36 1.1 christos 12293 find 3 Y /lib 37 1.1 christos 12293 find 3 Y /lib/libc.so.1 38 1.1 christos 12293 find 8 Y /export 39 1.1 christos 12293 find 4 Y /export/home 40 1.1 christos 12293 find 3 Y /export/home/root 41 1.1 christos 12293 find 4 Y /export/home/root/CacheKit-0.93 42 1.1 christos 12293 find 3 Y /export 43 1.1 christos 12293 find 3 Y /export/home 44 1.1 christos 12293 find 3 Y /export/home/root 45 1.1 christos 12293 find 3 Y /export/home/root/CacheKit-0.93 46 1.1 christos 12293 find 3 Y /etc 47 1.1 christos 12293 find 3 Y /etc/default 48 1.1 christos 12293 find 3 Y /etc 49 1.1 christos 12293 find 3 Y /etc/default 50 1.1 christos 12293 find 5 N /etc/default/cron 51 1.1 christos 12293 find 3 N /etc/default/devfsadm 52 1.1 christos 12293 find 4 N /etc/default/fs 53 1.1 christos 12293 find 4 N /etc/default/kbd 54 1.1 christos 12293 find 3 N /etc/default/keyserv 55 1.1 christos 12293 find 4 N /etc/default/nss 56 1.1 christos 12293 find 3 N /etc/default/syslogd 57 1.1 christos 12293 find 3 N /etc/default/tar 58 1.1 christos 12293 find 4 N /etc/default/utmpd 59 1.1 christos 12293 find 5 N /etc/default/init 60 1.1 christos 12293 find 4 Y /etc/default/login 61 1.1 christos 12293 find 4 Y /etc/default/su 62 1.1 christos 12293 find 3 N /etc/default/passwd 63 1.1 christos 12293 find 3 N /etc/default/dhcpagent 64 1.1 christos 12293 find 4 N /etc/default/inetinit 65 1.1 christos 12293 find 3 N /etc/default/ipsec 66 1.1 christos 12293 find 3 N /etc/default/mpathd 67 1.1 christos 12293 find 3 N /etc/default/telnetd 68 1.1 christos 12293 find 3 Y /etc/default/nfs 69 1.1 christos 12293 find 3 N /etc/default/autofs 70 1.1 christos 12293 find 9 Y /etc/default/ftp 71 1.1 christos 12293 find 5 N /etc/default/rpc.nisd 72 1.1 christos 12293 find 5 N /etc/default/nfslogd 73 1.1 christos 12293 find 4 N /etc/default/lu 74 1.1 christos 12293 find 6 N /etc/default/power 75 1.1 christos 12293 find 5 N /etc/default/sys-suspend 76 1.1 christos 12293 find 6 N /etc/default/metassist.xml 77 1.1 christos 12293 find 5 N /etc/default/yppasswdd 78 1.1 christos 12293 find 4 N /etc/default/webconsole 79 1.1 christos 12293 find 5 Y /export 80 1.1 christos 12293 find 4 Y /export/home 81 1.1 christos 12293 find 4 Y /export/home/root 82 1.1 christos 12293 find 4 Y /export/home/root/CacheKit-0.93 83 1.1 christos 84 1.1 christos The DNLC is the Directory Name Lookup Cache. Here we can see name lookups, 85 1.1 christos and whether the cache returned a hit. "/export/home/root/CacheKit-0.93" was 86 1.1 christos looked up a few times - this was the current directory that the find 87 1.1 christos command was executed from. 88 1.1 christos 89