From a345258c3082903702c81c6c830ff1fd35758861 Mon Sep 17 00:00:00 2001 From: We-unite <3205135446@qq.com> Date: Mon, 29 Jul 2024 11:46:02 +0800 Subject: Hear file Open and close, especially O_TRUNC this commit i successfully catch open/close syscall, and insert them as an independent collection in mongodb otherwise along with pids. and now I've record those open flag "O_TRUNC" as written. --- src/global.go | 1 + 1 file changed, 1 insertion(+) (limited to 'src/global.go') diff --git a/src/global.go b/src/global.go index 7401dc5..d1c5c0f 100644 --- a/src/global.go +++ b/src/global.go @@ -13,6 +13,7 @@ const ( EXECVE FILEOPEN FILEWRITE + FILECLOSE TYPENUM ) -- cgit v1.2.3-70-g09d2