On Tue, May 18, 2010 at 10:45 PM, erik quanstrom <quans...@quanstro.net> wrote:

> ron, please enlighten the ignorant.  could you constrast this with
> truss?  or maybe there's a man page?

I need to write one.

The biggest diff from truss is that the program itself is dead simple,
since most of the work is done by the kernel and the data relayed to
the program as text. The program is really a fancier, fork-following
version of this script:
while (echo startsyscall > /proc/$1/ctl) cat /proc/$1/syscalltrace

All the formatting etc. is in the kernel.

ron

Reply via email to