命令strace跟踪分析Linux内核系统调用处理过程

[root@localhost Workspace]# cat hello.c 

#include <stdio.h>

int main(void)
{
	printf("Hello World");
	return 0;
}

[root@localhost Workspace]# gcc -o hello hello.c

[root@localhost Workspace]# strace ./hello

execve("./hello", ["./hello"], [/* 34 vars */]) = 0
brk(0)                                  = 0x101d000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4c025b7000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=65352, ...}) = 0
mmap(NULL, 65352, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f4c025a7000
close(3)                                = 0
open("/lib64/libc.so.6", O_RDONLY)      = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\356\1\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=1924768, ...}) = 0
mmap(NULL, 3750184, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4c02004000
mprotect(0x7f4c0218e000, 2097152, PROT_NONE) = 0
mmap(0x7f4c0238e000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x18a000) = 0x7f4c0238e000
mmap(0x7f4c02394000, 14632, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4c02394000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4c025a6000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4c025a5000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4c025a4000
arch_prctl(ARCH_SET_FS, 0x7f4c025a5700) = 0
mprotect(0x7f4c0238e000, 16384, PROT_READ) = 0
mprotect(0x7f4c025b8000, 4096, PROT_READ) = 0
munmap(0x7f4c025a7000, 65352)           = 0
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4c025b6000
write(1, "Hello World", 11Hello World)             = 11
exit_group(0)                           = ?
+++ exited with 0 +++