ratrace – trace process system calls
] | [
shows the system calls executed by a process,
either the one with
or a fresh invocation of
Trace output is determined by the kernel, not
Certain fixed rules apply.
The first four fields of the output are
pid, text name, system call name, and the PC of the user program.
Data is always printed as
is the first 32 bytes of the data, with
replacing non-printing ASCII characters
(printing characters are those between ASCII space (SP) and delete (DEL), exclusive).
Return values follow an
and include the integer return value,
(with "" if there is no
the start and stop times for the system call in nanoseconds.
The times are exclusive of the overhead for tracing.
The printing of the data is too limited in length;
instead of something more sensible is limiting.