Sysdig is an open source, system-level exploration that capture system state and activity from a running Linux instance, then save, filter and analyze.