问：有没有跟踪系统调用时的函数调用链的工具？

poleman

如题

lucifer

ltrace

poleman

这好象是跟踪 到某个网站间的网络情况的，能满足我的需要？

lucifer

你保证？
ltrace --help
Usage: ltrace [option ...] [command [arg ...]]
Trace library calls of a given program.

  -d, --debug         print debugging info.
  -f                  follow forks.
  -i                  print instruction pointer at time of library call.
  -L                  do NOT display library calls.
  -S                  display system calls.
  -r                  print relative timestamps.
  -t, -tt, -ttt       print absolute timestamps.
  -C, --demangle      decode low-level symbol names into user-level names.
  -a, --align=COLUMN  align return values in a secific column.
  -s STRLEN           specify the maximum string size to print.
  -o, --output=FILE   write the trace output to that file.
  -u USERNAME         run command with the userid, groupid of username.
  -p PID              attach to the process with the process ID pid.
  -e expr             modify which events to trace.
  -h, --help          display this help and exit.
  -V, --version       output version information and exit.

Report bugs to Juan Cespedes <cespedes@debian.org>

poleman

我在网上搜索了，大多是介绍网络应用，谢谢你

但是我的机器上(FC2,万全安装)没有这个工具，是要自己安装的吧，我先去找找有没有下载的

lucifer

以前rh7是自带的
anyway，这里http://packages.debian.org/unstable/utils/ltrace.html有原码
google的话，第一个就是了

poleman

我的系统里有strace是跟踪系统调用的
# strace -help
usage: strace [-dffhiqrtttTvVxx] [-a column] [-e expr] ... [-o file]
              [-p pid] ... [-s strsize] [-u username] [-E var=val] ...
              [command [arg ...]]
   or: strace -c [-e expr] ... [-O overhead] [-S sortby] [-E var=val] ...
              [command [arg ...]]
-c -- count time, calls, and errors for each syscall and report summary
-f -- follow forks, -ff -- with output into separate files
-F -- attempt to follow vforks, -h -- print help message
-i -- print instruction pointer at time of syscall
-q -- suppress messages about attaching, detaching, etc.
-r -- print relative timestamp, -t -- absolute timestamp, -tt -- with usecs
-T -- print time spent in each syscall, -V -- print version
-v -- verbose mode: print unabbreviated argv, stat, termio, etc. args
-x -- print non-ascii strings in hex, -xx -- print all strings in hex
-a column -- alignment COLUMN for printing syscall results (default 40)
-e expr -- a qualifying expression: option=[!]all or option=[!]val1[,val2]...
   options: trace, abbrev, verbose, raw, signal, read, or write
-o file -- send trace output to FILE instead of stderr
-O overhead -- set overhead for tracing syscalls to OVERHEAD usecs
-p pid -- trace process with process id PID, may be repeated
-s strsize -- limit length of print strings to STRSIZE chars (default 32)
-S sortby -- sort syscall counts by: time, calls, name, nothing (default time)
-u username -- run command as username handling setuid and/or setgid
-E var=val -- put var=val in the environment for command
-E var -- remove var from the environment for command

poleman

我把ltrace用成itrace了， 系统里ltrace和strace都有，但感觉ltrace信息更简捷，明显