From 95d12d92545ffc15fae8a2ff36e7cf219dcc2a7d Mon Sep 17 00:00:00 2001
From: Lars Windolf <lars.windolf@gmx.de>
Date: Tue, 14 Nov 2017 23:34:28 +0100
Subject: [PATCH] Fix usage copy&paste from opensnoop

---
 execsnoop | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/execsnoop b/execsnoop
index 2a96a57..ed42e2e 100755
--- a/execsnoop
+++ b/execsnoop
@@ -73,7 +73,7 @@ function usage {
 	       execsnoop                 # watch exec()s live (unbuffered)
 	       execsnoop -d 1            # trace 1 sec (buffered)
 	       execsnoop grep            # trace process names containing grep
-	       execsnoop 'log$'          # filenames ending in "log"
+	       execsnoop 'udevd$'        # process names ending in "udevd"
 
 	See the man page and example file for more info.
 END