Date: Sun, 9 Jan 2000 14:01:17 -0500 From: Karim Yaghmour <karym@INFO.POLYMTL.CA> Subject: strace can lie ... but LTT might be handy To: BUGTRAQ@SECURITYFOCUS.COM Hello, I recently received a forward of a message you sent on bugtraq about strace providing inaccurate information. I see what the problem is and I think you'd be interested to know that there's a tool out there that'll fix the problem, the Linux Trace Toolkit. I wrote this tool in order to be able to reconstruct the dynamic behavior of a Linux system and it doesn't lie ;) It tracks all important events and stores in the order they occur in the kernel. Therefore ptrace() is not involved in any way. Check it out : www.info.polymtl.ca/~karym/trace Please give me feedback ... it's important for any further enhancements. Thanks. P.S.: I'm not on bugtraq, so please CC if you send it there. =================================================== Karim Yaghmour karym@info.polymtl.ca Operating System Consultant (Linux kernel, real-time and distributed systems) ===================================================