If you find strace useful, you should check out sysdig[1]. Sysdig is like strace but uses kernel trace points instead of ptrace so it has a lower probe effect o

If you find strace useful, you should check out sysdig[1]. Sysdig is like strace but uses kernel trace points instead of ptrace so it has a lower probe effect on the running process. [1]: http://www.sysdig.org/ http://www.sysdig.org/