logging system calls & services
 

i want to log all the system calls & services in the kernel(services are the transanction between modules in the kernel),with which tool i can do it?

We use audit. (auditd)

It comes with a nice set of utilities for looking at failed system calls and system summaries etc...

(aureport, ausearch, etc...)

are you sure that audit can log the services in the kernel?

Which distribiution are you using?

When using auditd w/utility this command will bring up a list of all system calls being made

If you want to see failed system calls

If you want to see events

And a handful of other things --

To list services/modules loaded in kernel just do:

sorry,i want to know audit can log transanctions between modules in the kernel(which called services),can it log services(in addition to modules in the kernel)?

i want to know exactly , can audit make log of all the services (which are )between modules in the subsysytem of kernel(for example in the disk part of kernel)?thanks

...maybe he's looking for Kprobes [0|1|2|3|4]?

so you mean kprob log both system calls and services?

I mean you should read the documentation behind those links and see if you can reach a conclusion yourself or not.

lttng installation
 

hi, when i was installing the binary package of lttng,in installation process when i wrote"
sudo apt-get install lttng" in command line i found a error which was:
Reading package lists... Done
Building dependency tree
Reading state information... Done
You might want to run 'apt-get -f install' to correct these:
The following packages have unmet dependencies:
lttng : Depends: linux-image-2.6.35-24-lttng but it is not going to
be installed
Depends: linux-headers-2.6.35-24-lttng but it is not going to
be installed
Depends: ltt-bin but it is not going to be installed
perl : Depends: perl-base (= 5.12.4-6) but 5.10.1-12ubuntu2 is to be installed
Depends: libdb5.1 but it is not installable
E: Unmet dependencies. Try 'apt-get -f install' with no packages (or
specify a solution).
what should i do?please help me.