Osquery: An sqlite3 virtual table exposing operating system data to SQL

Re:Osquery: An sqlite3 virtual table exposing operating syst... by signa11 on Monday February 26, 2024 @12:35AM (#39507967)

> Can anyone give a competing non-osquery implementation on MacOS?

shouldn't lsof with some awk munging get you there ?

edit-01:

for example

    lsof -iTCP -sTCP:LISTEN -n -P | awk '{print $1, substr($0, index($0,$9))}'

might be useful enough ? fwiw, it does give me something useful on my machine

[ Parent | on HN ]

Re:Osquery: An sqlite3 virtual table exposing operating syst... by MrBuddyCasino on Monday February 26, 2024 @03:41AM (#39508893)

Thanks, added.

    alias ports="lsof -iTCP -sTCP:LISTEN -n -P | awk '{print \$1, substr(\$0, index(\$0,\$9))}'"

[ Parent | on HN ]