Date:         Sun, 9 Jan 2000 14:01:17 -0500
From: Karim Yaghmour <karym@INFO.POLYMTL.CA>
Subject:      strace can lie ... but LTT might be handy
To: BUGTRAQ@SECURITYFOCUS.COM

Hello,

I recently received a forward of a message you sent on bugtraq
about strace providing inaccurate information. I see what the
problem is and I think you'd be interested to know that there's
a tool out there that'll fix the problem, the Linux Trace
Toolkit. I wrote this tool in order to be able to reconstruct
the dynamic behavior of a Linux system and it doesn't lie ;)
It tracks all important events and stores in the order they
occur in the kernel. Therefore ptrace() is not involved in any
way.

Check it out :

www.info.polymtl.ca/~karym/trace

Please give me feedback ... it's important for any further
enhancements.

Thanks.

P.S.: I'm not on bugtraq, so please CC if you send it there.

===================================================
                 Karim Yaghmour
               karym@info.polymtl.ca
            Operating System Consultant
 (Linux kernel, real-time and distributed systems)
===================================================