From owner-freebsd-hackers Wed Oct 17 10:27:39 2001 Delivered-To: freebsd-hackers@freebsd.org Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by hub.freebsd.org (Postfix) with ESMTP id CEED537B403 for ; Wed, 17 Oct 2001 10:27:36 -0700 (PDT) Received: from fledge.watson.org (robert@fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.11.6/8.11.5) with SMTP id f9HHQYB34444; Wed, 17 Oct 2001 13:26:35 -0400 (EDT) (envelope-from robert@fledge.watson.org) Date: Wed, 17 Oct 2001 13:26:34 -0400 (EDT) From: Robert Watson X-Sender: robert@fledge.watson.org To: Jim Pirzyk Cc: freebsd-hackers@freebsd.org Subject: Re: truss vs ktrace In-Reply-To: <3BCCCF74.75B7F36C@disney.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG There are a fair number of differences, but from my perspective, one of the primary ones is that truss relies on procfs, whereas ktrace uses a seperate kernel tracing facility. For sites wanting to avoid procfs due to its history of security vulnerabilities, having truss rely on procfs means that truss can't be used. truss could probably be easily rewritten to use ptrace() instead. It will be interesting to see how the usefulness of both of these tools changes/evolves due to increases use of threadings and kse. Robert N M Watson FreeBSD Core Team, TrustedBSD Project robert@fledge.watson.org NAI Labs, Safeport Network Services On Tue, 16 Oct 2001, Jim Pirzyk wrote: > So which should I use? Why is there two around? I see that truss has > less command line switches than ktrace, but it is a little bit more > standard. > > I also see that truss works with the linux syscalls where ktrace does > not > remap the syscall names. > > - JimP > > -- > --- @(#) $Id: dot.signature,v 1.10 2001/05/17 23:38:49 Jim.Pirzyk Exp $ > __o Jim.Pirzyk@disney.com ------------- pirzyk@freebsd.org > _'\<,_ Senior Systems Engineer, Walt Disney Feature Animation > (*)/ (*) > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-hackers" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message