Added -q option to the USAGE string in execsnoop. Added -q option to the manpage for execsnoop

man/man8/execsnoop.8

@@ -30,6 +30,10 @@ Include a timestamp column.
 \-x
 Include failed exec()s
 .TP
+\-q
+Add "quotemarks" around arguments. Escape quotemarks in arguments with a
+backslash. For tracing empty arguments or arguments that contain whitespace. 
+.TP
 \-n NAME
 Only print command lines matching this name (regex)
 .TP
@@ -52,6 +56,10 @@ Include failed exec()s:
 #
 .B execsnoop \-x
 .TP
+Put quotemarks around arguments. 
+#
+.B execsnoop \-q
+.TP
 Only trace exec()s where the filename contains "mount":
 #
 .B execsnoop \-n mount

tools/execsnoop.py

@@ -31,6 +31,7 @@ examples = """examples:
     ./execsnoop           # trace all exec() syscalls
     ./execsnoop -x        # include failed exec()s
     ./execsnoop -t        # include timestamps
+    ./execsnoop -q        # add "quotemarks" around arguments
     ./execsnoop -n main   # only print command lines containing "main"
     ./execsnoop -l tpkg   # only print command where arguments contains "tpkg"
 """