Re: truss vs ktrace

2001-10-20 Thread Dag-Erling Smorgrav
Arun Sharma <[EMAIL PROTECTED]> writes: > Another advantage of truss is that the output is "online" and interactive. > ktrace requires you to use kdump to view the trace. I certainly wouldn't call truss "interactive". As for "online", see the -l command-line option to kdump. DES -- Dag-Erling

Re: truss vs ktrace

2001-10-20 Thread Dag-Erling Smorgrav
Robert Watson <[EMAIL PROTECTED]> writes: > There are a fair number of differences, but from my perspective, one of > the primary ones is that truss relies on procfs, Truss could be easily be rewritten to use ptrace() instead of procfs. It'd be a lot slower though, because ptrace() can only retur

Re: truss vs ktrace

2001-10-20 Thread Arun Sharma
On Wed, 17 Oct 2001 02:02:07 + (UTC), Dag-Erling Smorgrav <[EMAIL PROTECTED]> wrote: > Jim Pirzyk <[EMAIL PROTECTED]> writes: > > So which should I use? Why is there two around? I see that truss has > > less command line switches than ktrace, but it is a little bit more > > standard. > > -

Re: truss vs ktrace

2001-10-17 Thread Robert Watson
There are a fair number of differences, but from my perspective, one of the primary ones is that truss relies on procfs, whereas ktrace uses a seperate kernel tracing facility. For sites wanting to avoid procfs due to its history of security vulnerabilities, having truss rely on procfs means that

truss vs ktrace

2001-10-16 Thread Jim Pirzyk
So which should I use? Why is there two around? I see that truss has less command line switches than ktrace, but it is a little bit more standard. I also see that truss works with the linux syscalls where ktrace does not remap the syscall names. - JimP -- --- @(#) $Id: dot.signature,v 1.10 200