Visit Jeremy's Blog.
Go Back > Forums > Linux Forums > Linux - General
User Name
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.


  Search this Thread
Old 02-20-2007, 10:47 AM   #1
LQ Newbie
Registered: Feb 2007
Posts: 8

Rep: Reputation: 0
Question tracing 'create' system call called by any process to kernel


i need to know when create system call is called by any process in my system.. how am i to do it..? strace works only for a single process.. is there anythin similar to dtrace in solaris or how should i solve it..

Last edited by viv_nan; 02-20-2007 at 10:49 AM.
Old 02-20-2007, 02:43 PM   #2
Registered: May 2001
Posts: 29,394
Blog Entries: 55

Rep: Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565
Hello and welcome to LQ, hope you like it here.

There's nothing that we can call a true equivalent of Dtrace AFAIK, but the Linux Trace Toolkit (LTT, 2.6 kernels) or SysCallTrack (SCT, 2.4 series) could help. For example in SCT you would just define a rule like:
        syscall_name = create_module
        rule_name = root_create_module_rule
        filter_expression {UID==0}
        action { type = LOG }
Old 03-07-2007, 09:51 AM   #3
LQ Newbie
Registered: Feb 2007
Posts: 8

Original Poster
Rep: Reputation: 0
thanks ... i am using systemtap..
Old 03-07-2007, 12:09 PM   #4
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris 11.3, Oracle Linux, Mint, Tribblix
Posts: 9,756

Rep: Reputation: 459Reputation: 459Reputation: 459Reputation: 459Reputation: 459
If you install Solaris Express and Linux on a lx branded zone, you actually can run dtrace on the global zone an see with the lx-syscall provider what Linux system calls are used.

See and for details.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
System call to get current process memory usage? mattengland Programming 4 03-15-2006 08:07 PM
When does process swap happen in a system call? oldfogie Programming 3 05-03-2005 08:35 PM
is there a system call to send process to run in the background? feetyouwell Programming 4 10-01-2004 05:58 AM
Changing Process Priority in Linux w/ System Call sptchamp Programming 2 07-21-2004 10:58 AM
When a process locks up the system - what is the created image file called? thatgentleman Linux - General 3 03-22-2002 10:36 PM > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 06:00 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration