0

The main task I have to carry out, is to trace the system call of processes in ubuntu 12.04 LTS.

Problem is, I am unable to trace them continuously, i.e. as soon as they are added to the system, they should get traced.

Is there any kind of signal or interrupt which can inform the user about a newly added process in the system?

10
  • Check if http://linux.die.net/man/8/autrace could help you.
    – ott--
    May 13, 2013 at 12:44
  • @ott-- I have already gone through audit utility, it does not help. I am working with strace. Problem is it does not respond until the process to which it is attached gets terminated. May 13, 2013 at 12:56
  • What's the cmdline you use to trace what process?
    – ott--
    May 13, 2013 at 14:17
  • I extract the pid of running process using ps command and then feed them to strace as strace -c -p <pid> -o <out_put> May 13, 2013 at 19:40
  • Have you tried adding the -f option? Tho it was not helpful for me e.g. with apache.
    – ott--
    May 13, 2013 at 20:11

0

You must log in to answer this question.

Browse other questions tagged .