blob: ff0f9d3baa913f06fa275437e793fe0c101f4cfc (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
# strace(1)
```markdown
strace [opts] [prg]
-f .......... follow child processes on fork(2)
-p <pid> .... attach to running process
-s <size> ... max string size (default: 32)
-e <expr> ... expression for trace filtering
-o <file> ... log output into <file>
-c .......... dump syscall statitics at the end
```
```markdown
<expr>:
trace=syscall[,syscall] .... trace only syscall listed
trace=file ................. trace all syscall that take a filename as arg
trace=process .............. trace process management related syscalls
trace=signal ............... trace signal related syscalls
signal ..................... trace signals delivered to the process
```
# Examples
Trace `'open & socket` syscalls for a running process + childs.
```markdown
strace -f -p <pid> -e trace=open,socket
```
Trace signals delivered to a running process.
```markdown
strace -f -p <pid> -e signal
```
|
