On 05/17/2010 10:33, Dan McNulty wrote:
> Hi all,
> 
> I have been experimenting with ptrace to determine when a child
> process forks or calls exec. Particularly, I have explored tracing
> every system call entry and exit similar to what the truss utility
> does, and for my case, the performance impact of tracing every system
> call is too great.
> 
> Is there a more efficient way than tracing every system call entry and
> exit to determine when a child process forks, calls exec, or creates a
> new LWP?
> 
> Thanks a lot for your help!
> -Dan

Not sure if this is exactly what your looking for but have you looked
into possibly using the audit system for tracking these things ? In its
own way its really efficient and the utilities that are provided
(auditreduce) you might just find a easier way to get the information
your looking for.

Regards,

-- 

 jhell
_______________________________________________
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscr...@freebsd.org"

Reply via email to