Menu

#7 pause for the catched syscalls

None
closed
nobody
None
5
2018-04-05
2006-12-09
No

sometime it's necessary to pause for every catched syscalls. for example, if a process create a file then delete it immediately, it would be nice if we can pause on the 'unlink' syscall, then examine the content of the to-be-deleted file.

Discussion

  • Eugene Syromyatnikov

    That is possible by strace -e inject=unlink:signal=STOP since strace 4.16.

     
  • Eugene Syromyatnikov

    • status: open --> closed
    • Group: -->