sofdsnoop - traces FDs passed by sockets

       Trace file descriptors passed via socket

   optionalarguments:-h, --help
              show this help message and exit

       -T, --timestamp
              include timestamp on output

       -p PID, --pid PID
              trace this PID only

       -t TID, --tid TID
              trace this TID only

       -n NAME, --name NAME
              only print process names containing this name

       -d DURATION, --duration DURATION
              total duration of trace in seconds

       Trace passed file descriptors
              # sofdsnoop

       Include timestamps
              # sofdsnoop-T

       Only trace PID 181
              # sofdsnoop-p 181

       Only trace TID 123
              # sofdsnoop-t 123

       Trace for 10 seconds only
              # sofdsnoop-d 10

       Only print process names containing "main"
              # sofdsnoop-n main

       sofdsnoop - traces FDs passed by sockets

       Linux

       This is from bcc.

              https://github.com/iovisor/bcc

       Also  look  in  the bcc distribution for a companion _examples.txt file containing example usage, output,
       and commentary for this tool.

       Unstable - in development.

USER COMMANDS                                      2019-07-29                                       SOFDSNOOP(8)

       usage: sofdsnoop [-h] [-T] [-p PID] [-t TID] [-n NAME] [-d DURATION]