On Tue, May 18, 2010 at 10:45 PM, erik quanstrom <quans...@quanstro.net> wrote:
> ron, please enlighten the ignorant. could you constrast this with > truss? or maybe there's a man page? I need to write one. The biggest diff from truss is that the program itself is dead simple, since most of the work is done by the kernel and the data relayed to the program as text. The program is really a fancier, fork-following version of this script: while (echo startsyscall > /proc/$1/ctl) cat /proc/$1/syscalltrace All the formatting etc. is in the kernel. ron