* Pavel Machek <pavel@xxxxxxx> wrote:
On Tue 2009-01-27 12:08:04, Kok, Auke wrote:This tracer monitors regular file open() syscalls. This is a fastMaybe fanotify() should be used instead?
and low-overhead alternative to strace, and does not allow or
require to be attached to every process.
The tracer only logs succesfull calls, as those are the only ones we
are currently interested in, and we can determine the absolute path
of these files as we log.
Or maybe just plain strace? One slow boot should not really hurt...
ptrace is out of question for good tracing because it's not a transparent probe. (ptrace monopolizes the traced task - if we use that then we break regular strace usage.)
Ingo