forkstat 是用于探测进程 fork/exec/exit 事件的工具

# 下载

[https://launchpad.net/ubuntu/xenial/+package/forkstat](https://launchpad.net/ubuntu/xenial/+package/forkstat)

# 安装

```bash
tar xf forkstat_0.01.13.orig.tar.gz 
cd forkstat-0.01.13/
make
sudo make install
```

# 使用

```bash
sudo forkstat -e fork
```

# 参考

- [http://manpages.ubuntu.com/manpages/xenial/man8/forkstat.8.html](http://manpages.ubuntu.com/manpages/xenial/man8/forkstat.8.html)
- [https://www.jesusninoc.com/06/26/forkstat/](https://www.jesusninoc.com/06/26/forkstat/)
- [https://stackoverflow.com/questions/26852228/detect-new-process-creation-instantly-in-linux](https://stackoverflow.com/questions/26852228/detect-new-process-creation-instantly-in-linux)