3 ms·
Would you mind going into detail about how you use strace in that context? Or about how you learned to do that? That's a very handy skill which I need to learn.
by sillysaurus3 12y ago
Would you mind going into detail about how you use strace in that context? Or about how you learned to do that? That's a very handy skill which I need to learn.
- seanp2k2 12y agoThis should whet your appetite and give you a bit of direction on what to dig deeper into: http://althing.cs.dartmouth.edu/local/reverse-talk.pdf http://althing.cs.dartmouth.edu/local/reverse-talk.pdf
- vhost- 12y agoStart with htop. You can get that package from apt in a debian-based distro: `sudo apt-get install htop strace`. When you launch htop, you will see a list of all your running procs. If you select a proc with the arrow keys, you can hit "s" to start a strace and then hit f4 to follow the strace as it dishes output. This won't work for all procs, you will need root to strace certain procs. This is a good place to start as it's visual and easy to follow. Later you can start traces from the shell with proc IDs and even get system call info from GDB.