Linux Tracing Techniques
Talkat Open Source Summit Europe 2022 · on Tuesday, 2022-09-13· at 15:05· Liffey B Part 1 (Level 1), Convention Centre Dublin, Spencer Dock, N Wall Quay, North Wall Dublin 1, D01 T1·
summary
strace uses the ptrace backend to record every system call name, arguments and return values and demonstrates that a tiny hello world collapses to write and exit_group calls; useful options shown are -f -v -e -p -c to follow forks, expand args, filter syscalls, attach to PIDs and show counts/timings. ftrace exposes kernel function tracing via tracefs, function_graph prints entry/exit with durations, and dynamic probes come from kprobes/uprobes and trace_event macros for custom kernel events.
AI-written summary · about
chapters (18)
- 0:00Intro
- 0:58Agenda
- 1:22What is tracing
- 4:03System calls
- 6:45Understanding strace
- 9:46Simple example: strace at command line
- 14:31Tracing child process
- 20:40Filtering the strace by category
- 23:43Obtaining system call summary
- 26:29How does Ftrace works
- 28:39Ftrace - what can be traced
- 30:32Enabling events
- 32:29Event formats
- 33:48Events calling
- 36:23Function tracer
- 37:13Function graph tracer
- 38:00Setting filters
- 38:49Tracers vs Events
