Hi,
Obviously LTTng has much lower overhead compared to auditd, when we turn on all system calls and use the same load. Is it true for both user space and kernel space? So far I haven't seen any report compare LTTng and auditd, anyone knows? Regards Hai
_______________________________________________ lttng-dev mailing list lttng-dev@lists.lttng.org https://lists.lttng.org/cgi-bin/mailman/listinfo/lttng-dev