Re: truss vs ktrace

2001-10-20 Thread Dag-Erling Smorgrav
Arun Sharma [EMAIL PROTECTED] writes: Another advantage of truss is that the output is online and interactive. ktrace requires you to use kdump to view the trace. I certainly wouldn't call truss interactive. As for online, see the -l command-line option to kdump. DES -- Dag-Erling Smorgrav

Re: truss vs ktrace

2001-10-20 Thread Arun Sharma
On Wed, 17 Oct 2001 02:02:07 + (UTC), Dag-Erling Smorgrav [EMAIL PROTECTED] wrote: Jim Pirzyk [EMAIL PROTECTED] writes: So which should I use? Why is there two around? I see that truss has less command line switches than ktrace, but it is a little bit more standard. - truss slows

Re: truss vs ktrace

2001-10-20 Thread Dag-Erling Smorgrav
Robert Watson [EMAIL PROTECTED] writes: There are a fair number of differences, but from my perspective, one of the primary ones is that truss relies on procfs, Truss could be easily be rewritten to use ptrace() instead of procfs. It'd be a lot slower though, because ptrace() can only return

Re: truss vs ktrace

2001-10-17 Thread Robert Watson
There are a fair number of differences, but from my perspective, one of the primary ones is that truss relies on procfs, whereas ktrace uses a seperate kernel tracing facility. For sites wanting to avoid procfs due to its history of security vulnerabilities, having truss rely on procfs means

truss vs ktrace

2001-10-16 Thread Jim Pirzyk
So which should I use? Why is there two around? I see that truss has less command line switches than ktrace, but it is a little bit more standard. I also see that truss works with the linux syscalls where ktrace does not remap the syscall names. - JimP -- --- @(#) $Id: dot.signature,v 1.10