Advanced and improved absolute paths decoding

[Philippe Ombredanne]

On Wed, Feb 26, 2014 at 2:28 AM, Dmitry V. Levin <ldv at altlinux.org> wrote:

> Fourth, I think -yy should also "canonicalize" socket descriptors, i.e.
> print their addresses in <> form, resembling lsof(8) output.  This would
> be a really nice feature.

Indeed that would be awesome and help a lot with tracing network related calls.

I think you meant this lsof output, for instance from a wget invocation:

COMMAND     PID        USER   FD   TYPE    DEVICE SIZE/OFF     NODE NAME
wget    3695865 pombredanne    3u  IPv4 125707086      0t0      TCP
myhost.local:56120->ch3.sourceforge.net:http (ESTABLISHED)

How would you report this?

Would this work for the example above?:
3<socket:[125707086] IPv4, TCP, "myhost.local:56120",
"ch3.sourceforge.net:http">
where:
- IPv4 would be the type as reported by lsof(8)
- TCP, "myhost.local:56120" and  "ch3.sourceforge.net:http" would the
parts of the node name as reported by lsof(8)



-- 
Philippe Ombredanne