I would like to be able to trace system calls especially ones made to the file system.

i dont only want the api calls like read and write but i want to be able to determine whether the read resulted from a read from cache or from disk.

any tools or settings that would help is greatly appreciated.

thank you.

Does strace/ltrace help someway?

thank you for your response

honestly i didnt try ltrace but i knew about strace

when i run strace i get the following
Process 2933 attached - interrupt to quit
futex(....., futex_wait, 2934 null)

i am running a java jar file that i wrote using command line from a terminal

and then strace does not register any actions, maybe i am using the wrong process id but its the one that says java

ltrace does nothing

but for gedit strace and ltrace seems to work fine, ltrace outputs tons of more calls and i think might serve the purpose looking at it first glance.

would there be something in the kernel that i can enable that actually traces only file system calls?

any other alternatives?

thanks in advance

ptrace?