2 ms·

Curious if truss , which was used, or Dtrace would give you the syscalls in a nicer format for this application?

• sunshowers 2y ago
  DTrace allows a bunch of nicer filtering (for example by process name, or by function in call stack), but in this case truss was just a no-brainer. I'm not as comfortable with DTrace yet as I'd like to be!
  • shrubble 2y ago
    The truss tool has been around for about 30 years, so nothing wrong with sticking with the classics!
    • glandium 2y ago
      Implementation-wise, didn't Solaris adopt dtruss (dtrace-based truss) as truss at some point (and thus Illumos)?
      • fch42 2y ago
        yes, truss has been based on / implemented in terms of dtrace since Solaris 10. (dtrace userland is a library; you can, if you so choose, write your own tooling there. The command is "just a wrapper", a lot of similarities to bpftrace on Linux)
        • jclulow 2y ago
          truss(1) is not DTrace-based. It continues to be implemented in terms of the process control and instrumentation facilities provided by the proc(5) file system, as it has been for a long time.
          • fch42 2y ago
            you're right ... "rusty" memory there. You made me check the sources ... it uses libproc but not libdtrace. (can I be forgiven since I haven't really touched anything Solaris-ish for near 15 years ?)