strace常用选项instance

已于 2023-01-28 14:58:57 修改
阅读量541 收藏
点赞数 1
文章标签： java 服务器 html Powered by 金山文档
于 2023-01-28 14:52:00 首次发布
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/zyqash/article/details/128777411
版权

strace使用帮助

[root@ecs-3370 ~]# strace -h
usage: strace [-CdffhiqrtttTvVwxxy] [-I n] [-e expr]...
              [-a column] [-o file] [-s strsize] [-P path]...
              -p pid... / [-D] [-E var=val]... [-u username] PROG [ARGS]
   or: strace -c[dfw] [-I n] [-e expr]... [-O overhead] [-S sortby]
              -p pid... / [-D] [-E var=val]... [-u username] PROG [ARGS]

Output format:
  -a column      alignment COLUMN for printing syscall results (default 40)
  -i             print instruction pointer at time of syscall
  -k             obtain stack trace between each syscall
  -o file        send trace output to FILE instead of stderr
  -q             suppress messages about attaching, detaching, etc.
  -r             print relative timestamp
  -s strsize     limit length of print strings to STRSIZE chars (default 32)
  -t             print absolute timestamp
  -tt            print absolute timestamp with usecs
  -T             print time spent in each syscall
  -x             print non-ascii strings in hex
  -xx            print all strings in hex
  -X format      set the format for printing of named constants and flags
  -y             print paths associated with file descriptor arguments
  -yy            print protocol specific information associated with socket file descriptors

Statistics:
  -c             count time, calls, and errors for each syscall and report summary
  -C             like -c but also print regular output
  -O overhead    set overhead for tracing syscalls to OVERHEAD usecs
  -S sortby      sort syscall counts by: time, calls, name, nothing (default time)
  -w             summarise syscall latency (default is system time)

Filtering:
  -e expr        a qualifying expression: option=[!]all or option=[!]val1[,val2]...
     options:    trace, abbrev, verbose, raw, signal, read, write, fault, inject, kvm
  -P path        trace accesses to path

Tracing:
  -b execve      detach on execve syscall
  -D             run tracer process as a detached grandchild, not as parent
  -f             follow forks
  -ff            follow forks with output into separate files
  -I interruptible
     1:          no signals are blocked
     2:          fatal signals are blocked while decoding syscall (default)
     3:          fatal signals are always blocked (default if '-o FILE PROG')
     4:          fatal signals and SIGTSTP (^Z) are always blocked
                 (useful to make 'strace -o FILE PROG' not stop on ^Z)

Startup:
  -E var         remove var from the environment for command
  -E var=val     put var=val in the environment for command
  -p pid         trace process with process id PID, may be repeated
  -u username    run command as username handling setuid and/or setgid

Miscellaneous:
  -d             enable debug output to stderr
  -v             verbose mode: print unabbreviated argv, stat, termios, etc. args
  -h             print help message
  -V             print version

SYNOPSIS
       strace [-ACdffhikqrtttTvVxxy] [-I n] [-b execve] [-e expr]... [-a column] [-o file] [-s strsize] [-X format] [-P path]... [-p pid]... { -p pid | [-D] [-E var[=val]]... [-u username] command [args] }

       strace -c [-df] [-I n] [-b execve] [-e expr]... [-O overhead] [-S sortby] [-P path]... [-p pid]... { -p pid | [-D] [-E var[=val]]... [-u username] command [args] }

常规打印

[root@ecs-3370 ~]# strace  ./helloworld
execve("./helloworld", ["./helloworld"], 0x7fffb28ec2f0 /* 23 vars */) = 0
brk(NULL)                               = 0x7d6000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f94b1119000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=76353, ...}) = 0
mmap(NULL, 76353, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f94b1106000
close(3)                                = 0
open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`&\2\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=2156592, ...}) = 0
mmap(NULL, 3985920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f94b0b2b000
mprotect(0x7f94b0cef000, 2093056, PROT_NONE) = 0
mmap(0x7f94b0eee000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c3000) = 0x7f94b0eee000
mmap(0x7f94b0ef4000, 16896, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f94b0ef4000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f94b1105000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f94b1103000
arch_prctl(ARCH_SET_FS, 0x7f94b1103740) = 0
access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
mprotect(0x7f94b0eee000, 16384, PROT_READ) = 0
mprotect(0x600000, 4096, PROT_READ)     = 0
mprotect(0x7f94b111a000, 4096, PROT_READ) = 0
munmap(0x7f94b1106000, 76353)           = 0
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f94b1118000
write(1, "Hello, world\n", 13Hello, world
)          = 13
exit_group(13)

打印统计信息

[root@ecs-3370 ~]# strace -c ./helloworld
Hello, world
% time     seconds  usecs/call     calls    errors syscall
------ ----------- ----------- --------- --------- ----------------
 27.35    0.000064           8         8           mmap
 15.38    0.000036           9         4           mprotect
 11.54    0.000027           9         3         3 access
  8.97    0.000021           7         3           fstat
  8.12    0.000019           9         2           open
  5.56    0.000013           6         2           close
  5.13    0.000012          12         1           execve
  4.70    0.000011          11         1           write
  4.27    0.000010          10         1           munmap
  2.99    0.000007           7         1           read
  2.99    0.000007           7         1           brk
  2.99    0.000007           7         1           arch_prctl
------ ----------- ----------- --------- --------- ----------------
100.00    0.000234                    28         3 total

同时打印常规信息和统计信息

[root@ecs-3370 ~]# strace -C ./helloworld
execve("./helloworld", ["./helloworld"], 0x7ffea9557f48 /* 23 vars */) = 0
brk(NULL)                               = 0x1b45000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f26d0c5b000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=76353, ...}) = 0
mmap(NULL, 76353, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f26d0c48000
close(3)                                = 0
open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`&\2\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=2156592, ...}) = 0
mmap(NULL, 3985920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f26d066d000
mprotect(0x7f26d0831000, 2093056, PROT_NONE) = 0
mmap(0x7f26d0a30000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c3000) = 0x7f26d0a30000
mmap(0x7f26d0a36000, 16896, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f26d0a36000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f26d0c47000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f26d0c45000
arch_prctl(ARCH_SET_FS, 0x7f26d0c45740) = 0
access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
mprotect(0x7f26d0a30000, 16384, PROT_READ) = 0
mprotect(0x600000, 4096, PROT_READ)     = 0
mprotect(0x7f26d0c5c000, 4096, PROT_READ) = 0
munmap(0x7f26d0c48000, 76353)           = 0
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f26d0c5a000
write(1, "Hello, world\n", 13Hello, world
)          = 13
exit_group(13)                          = ?
+++ exited with 13 +++
% time     seconds  usecs/call     calls    errors syscall
------ ----------- ----------- --------- --------- ----------------
 46.43    0.000013           4         3           fstat
 32.14    0.000009           9         1           write
 21.43    0.000006           0         8           mmap
  0.00    0.000000           0         1           read
  0.00    0.000000           0         2           open
  0.00    0.000000           0         2           close
  0.00    0.000000           0         4           mprotect
  0.00    0.000000           0         1           munmap
  0.00    0.000000           0         1           brk
  0.00    0.000000           0         3         3 access
  0.00    0.000000           0         1           execve
  0.00    0.000000           0         1           arch_prctl
------ ----------- ----------- --------- --------- ----------------
100.00    0.000028                    28         3 total

过滤指定信息

[root@ecs-3370 ~]# strace ./helloworld 2>&1 | grep open
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3

或者通过以下方式

[root@ecs-3370 ~]# strace -e trace=open,close ./helloworld
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
close(3)                                = 0
open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
close(3)                                = 0
Hello, world
+++ exited with 13 +++

输出到指定文件中

[root@ecs-3370 ~]# strace -o test.txt ./helloworld
Hello, world

显示时间

[root@ecs-3370 ~]# strace -t ./helloworld
09:04:39 execve("./helloworld", ["./helloworld"], 0x7ffedd683318 /* 23 vars */) = 0
09:04:39 brk(NULL)                      = 0x20f4000
09:04:39 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feb1a9c5000
09:04:39 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
09:04:39 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
09:04:39 fstat(3, {st_mode=S_IFREG|0644, st_size=76353, ...}) = 0
09:04:39 mmap(NULL, 76353, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7feb1a9b2000
09:04:39 close(3)                       = 0
09:04:39 open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
09:04:39 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`&\2\0\0\0\0\0"..., 832) = 832
09:04:39 fstat(3, {st_mode=S_IFREG|0755, st_size=2156592, ...}) = 0
09:04:39 mmap(NULL, 3985920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7feb1a3d7000
09:04:39 mprotect(0x7feb1a59b000, 2093056, PROT_NONE) = 0
09:04:39 mmap(0x7feb1a79a000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c3000) = 0x7feb1a79a000
09:04:39 mmap(0x7feb1a7a0000, 16896, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7feb1a7a0000
09:04:39 close(3)                       = 0
09:04:39 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feb1a9b1000
09:04:39 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feb1a9af000
09:04:39 arch_prctl(ARCH_SET_FS, 0x7feb1a9af740) = 0
09:04:39 access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
09:04:39 access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
09:04:39 mprotect(0x7feb1a79a000, 16384, PROT_READ) = 0
09:04:39 mprotect(0x600000, 4096, PROT_READ) = 0
09:04:39 mprotect(0x7feb1a9c6000, 4096, PROT_READ) = 0
09:04:39 munmap(0x7feb1a9b2000, 76353)  = 0
09:04:39 fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
09:04:39 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feb1a9c4000
09:04:39 write(1, "Hello, world\n", 13Hello, world
) = 13
09:04:39 exit_group(13)                 = ?
09:04:39 +++ exited with 13 +++

显示更详细的时间

[root@ecs-3370 ~]# strace -tt ./helloworld
09:06:00.608448 execve("./helloworld", ["./helloworld"], 0x7ffe03473a78 /* 23 vars */) = 0
09:06:00.608797 brk(NULL)               = 0x792000
09:06:00.608890 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1439105000
09:06:00.608973 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
09:06:00.609107 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
09:06:00.609163 fstat(3, {st_mode=S_IFREG|0644, st_size=76353, ...}) = 0
09:06:00.609220 mmap(NULL, 76353, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f14390f2000
09:06:00.609259 close(3)                = 0
09:06:00.609301 open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
09:06:00.609361 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`&\2\0\0\0\0\0"..., 832) = 832
09:06:00.609404 fstat(3, {st_mode=S_IFREG|0755, st_size=2156592, ...}) = 0
09:06:00.609441 mmap(NULL, 3985920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1438b17000
09:06:00.609480 mprotect(0x7f1438cdb000, 2093056, PROT_NONE) = 0
09:06:00.609519 mmap(0x7f1438eda000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c3000) = 0x7f1438eda000
09:06:00.609560 mmap(0x7f1438ee0000, 16896, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f1438ee0000
09:06:00.609598 close(3)                = 0
09:06:00.609643 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f14390f1000
09:06:00.609681 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f14390ef000
09:06:00.609729 arch_prctl(ARCH_SET_FS, 0x7f14390ef740) = 0
09:06:00.609818 access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
09:06:00.609864 access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
09:06:00.609900 mprotect(0x7f1438eda000, 16384, PROT_READ) = 0
09:06:00.609934 mprotect(0x600000, 4096, PROT_READ) = 0
09:06:00.609968 mprotect(0x7f1439106000, 4096, PROT_READ) = 0
09:06:00.610007 munmap(0x7f14390f2000, 76353) = 0
09:06:00.610080 fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
09:06:00.610122 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1439104000
09:06:00.610160 write(1, "Hello, world\n", 13Hello, world
) = 13
09:06:00.610201 exit_group(13)          = ?
09:06:00.610260 +++ exited with 13 +++

显示每个系统调用所使用的时间

[root@ecs-3370 ~]# strace -T ./helloworld
execve("./helloworld", ["./helloworld"], 0x7ffea987d4e8 /* 23 vars */) = 0 <0.000191>
brk(NULL)                               = 0x1120000 <0.000022>
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f04270d1000 <0.000029>
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory) <0.000017>
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000013>
fstat(3, {st_mode=S_IFREG|0644, st_size=76353, ...}) = 0 <0.000015>
mmap(NULL, 76353, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f04270be000 <0.000012>
close(3)                                = 0 <0.000011>
open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000012>
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`&\2\0\0\0\0\0"..., 832) = 832 <0.000016>
fstat(3, {st_mode=S_IFREG|0755, st_size=2156592, ...}) = 0 <0.000012>
mmap(NULL, 3985920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f0426ae3000 <0.000010>
mprotect(0x7f0426ca7000, 2093056, PROT_NONE) = 0 <0.000015>
mmap(0x7f0426ea6000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c3000) = 0x7f0426ea6000 <0.000014>
mmap(0x7f0426eac000, 16896, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f0426eac000 <0.000012>
close(3)                                = 0 <0.000015>
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f04270bd000 <0.000011>
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f04270bb000 <0.000010>
arch_prctl(ARCH_SET_FS, 0x7f04270bb740) = 0 <0.000012>
access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory) <0.000010>
access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory) <0.000010>
mprotect(0x7f0426ea6000, 16384, PROT_READ) = 0 <0.000014>
mprotect(0x600000, 4096, PROT_READ)     = 0 <0.000011>
mprotect(0x7f04270d2000, 4096, PROT_READ) = 0 <0.000012>
munmap(0x7f04270be000, 76353)           = 0 <0.000015>
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0 <0.000012>
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f04270d0000 <0.000010>
write(1, "Hello, world\n", 13Hello, world
)          = 13 <0.000014>
exit_group(13)                          = ?
+++ exited with 13 +++

显示文件路径

[root@ecs-3370 ~]# strace -y ./helloworld
execve("./helloworld", ["./helloworld"], 0x7ffcd3d50b78 /* 23 vars */) = 0
brk(NULL)                               = 0x11f7000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7ae8f0000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3</etc/ld.so.cache>
fstat(3</etc/ld.so.cache>, {st_mode=S_IFREG|0644, st_size=76353, ...}) = 0
mmap(NULL, 76353, PROT_READ, MAP_PRIVATE, 3</etc/ld.so.cache>, 0) = 0x7fe7ae8dd000
close(3</etc/ld.so.cache>)              = 0
open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3</usr/lib64/libc-2.17.so>
read(3</usr/lib64/libc-2.17.so>, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`&\2\0\0\0\0\0"..., 832) = 832
fstat(3</usr/lib64/libc-2.17.so>, {st_mode=S_IFREG|0755, st_size=2156592, ...}) = 0
mmap(NULL, 3985920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3</usr/lib64/libc-2.17.so>, 0) = 0x7fe7ae302000
mprotect(0x7fe7ae4c6000, 2093056, PROT_NONE) = 0
mmap(0x7fe7ae6c5000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3</usr/lib64/libc-2.17.so>, 0x1c3000) = 0x7fe7ae6c5000
mmap(0x7fe7ae6cb000, 16896, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fe7ae6cb000
close(3</usr/lib64/libc-2.17.so>)       = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7ae8dc000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7ae8da000
arch_prctl(ARCH_SET_FS, 0x7fe7ae8da740) = 0
access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
mprotect(0x7fe7ae6c5000, 16384, PROT_READ) = 0
mprotect(0x600000, 4096, PROT_READ)     = 0
mprotect(0x7fe7ae8f1000, 4096, PROT_READ) = 0
munmap(0x7fe7ae8dd000, 76353)           = 0
fstat(1</dev/pts/2>, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7ae8ef000
write(1</dev/pts/2>, "Hello, world\n", 13Hello, world
) = 13
exit_group(13)                          = ?
+++ exited with 13 +++

注意观察以下两个系统调用多了尖括号的内容

fstat(1</dev/pts/2>, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0

write(1</dev/pts/2>, "Hello, world\n", 13Hello, world

) = 13

打印与套接字文件描述符相关的协议特定信息

print protocol specific information associated with socket file descriptors

[root@ecs-3370 ~]# strace -yy ./helloworld
execve("./helloworld", ["./helloworld"], 0x7ffff30c07f8 /* 23 vars */) = 0
brk(NULL)                               = 0x22fd000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4e65810000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3</etc/ld.so.cache>
fstat(3</etc/ld.so.cache>, {st_mode=S_IFREG|0644, st_size=76353, ...}) = 0
mmap(NULL, 76353, PROT_READ, MAP_PRIVATE, 3</etc/ld.so.cache>, 0) = 0x7f4e657fd000
close(3</etc/ld.so.cache>)              = 0
open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3</usr/lib64/libc-2.17.so>
read(3</usr/lib64/libc-2.17.so>, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`&\2\0\0\0\0\0"..., 832) = 832
fstat(3</usr/lib64/libc-2.17.so>, {st_mode=S_IFREG|0755, st_size=2156592, ...}) = 0
mmap(NULL, 3985920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3</usr/lib64/libc-2.17.so>, 0) = 0x7f4e65222000
mprotect(0x7f4e653e6000, 2093056, PROT_NONE) = 0
mmap(0x7f4e655e5000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3</usr/lib64/libc-2.17.so>, 0x1c3000) = 0x7f4e655e5000
mmap(0x7f4e655eb000, 16896, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4e655eb000
close(3</usr/lib64/libc-2.17.so>)       = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4e657fc000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4e657fa000
arch_prctl(ARCH_SET_FS, 0x7f4e657fa740) = 0
access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
access("/etc/sysconfig/strcasecmp-nonascii", F_OK) = -1 ENOENT (No such file or directory)
mprotect(0x7f4e655e5000, 16384, PROT_READ) = 0
mprotect(0x600000, 4096, PROT_READ)     = 0
mprotect(0x7f4e65811000, 4096, PROT_READ) = 0
munmap(0x7f4e657fd000, 76353)           = 0
fstat(1</dev/pts/2<char 136:2>>, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4e6580f000
write(1</dev/pts/2<char 136:2>>, "Hello, world\n", 13Hello, world
) = 13
exit_group(13)                          = ?
+++ exited with 13 +++

注意观察以下系统调用多出了更多尖括号的信息

fstat(1</dev/pts/2<char 136:2>>, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0

mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4e6580f000

write(1</dev/pts/2<char 136:2>>, "Hello, world\n", 13Hello, world

) = 13

ltrace VS strace

ltrace命令所执行的任务同strace类似，但它是针对库函数的调用。请通过man帮助获得更多细节。

[root@ecs-3370 ~]# ltrace ./helloworld
__libc_start_main(0x40052d, 1, 0x7ffe2fe55608, 0x400540 <unfinished ...>
puts("Hello, world"Hello, world
)                                                                                                                                = 13
+++ exited (status 13) +++
[root@ecs-3370 ~]# 

[root@ecs-3370 ~]# ltrace -c ./helloworld
Hello, world
% time     seconds  usecs/call     calls      function
------ ----------- ----------- --------- --------------------
 60.12    0.000392         392         1 __libc_start_main
 28.22    0.000184         184         1 puts
 11.66    0.000076          76         1 exit_group
------ ----------- ----------- --------- --------------------
100.00    0.000652                     3 total
[root@ecs-3370 ~]#

注意

strace命令是Linux下专有的，但大多数UNIX实现都提供了它们各自的等价物（例如，Solaris 上的truss，以及BSD上的ktrace）。

巭犇
关注
Linux日志保护机制,解读Linux安全机制之栈溢出保护
weixin_42407606的博客
05-06 1322
解读Linux安全机制之栈溢出保护0x00 概述栈溢出保护是一种缓冲区溢出攻击缓解手段，当函数存在缓冲区溢出攻击漏洞时，攻击者可以覆盖栈上的返回地址来让shellcode能够得到执行。当启用栈保护后，函数开始执行的时候会先往栈里插入cookie信息，当函数真正返回的时候会验证cookie信息是否合法，如果不合法就停止程序运行。攻击者在覆盖返回地址的时候往往也会将cookie信息给覆盖掉，导致栈保护...
Linux调试工具strace和lsof学习
lvturancao的博客
03-14 465
1、strace工具 （1）简介 strace是一个集诊断、调试、统计于一体的工具，常用来跟踪进程执行时的系统调用和所接收的信号。在Linux世界，进程不能直接访问硬件设备，当进程需要访问硬件设备时，必须由用户态切换至内核态模式，通过系统调用访问硬件设备。strace可以跟踪到一个进程产生的系统调用函数，包括参数，返回值，执行消耗的时间。 （2）使用参数 ...
Linux cal-date-ping-关机|重启-ping-strace-mkpasswd
最新发布
qq_60271706的博客
07-21 151
strace 命令是一款用于跟踪Linux系统调用和信号的工具，可以帮助开发者排除程序运行时的问题。shutdown -t 600 -s 600秒后关机。-s 特殊字符 special character。ping 用来测试网络的连通性，网络是否畅通。shutdown -a 取消关机。date 是Linux里查看时间的命令。-c 小写字母 character。-C 大写字母 character。win+r --》输入cmd。%M minute 分钟。%m month 月。%H hour 小时。
服务器入侵之找出隐藏字符的原理
自由早晚乱余生
09-16 919
文件内容为何显示不了，究竟是什么东西在作怪，让我们一探究竟。
内存分配（持续更新）
坏鱼儿恋夏的博客
08-13 362
1、brk释放内存和sbrk分配内存 #include&amp;amp;lt;unistd.h&amp;amp;gt; int brk(void *end_data_segment); 成功返回0，否则为-1 将内存边界设置为参数所指定位置 void *sbrk(intptr_t increment); 成功返回之前的内存边界，失败返回(void*)-1 增加内存边界，返回为新分配内存的起始位置(sbrk(0)就是获得堆...
进程、线程状态查看命令：top、strace、pstack
tuziaaa的博客
06-27 2693
top top命令是Linux下常用的性能分析工具，能够实时显示系统中各个进程的资源占用状况，类似于Windows的任务管理器。 语法: top [-] [d] [q] [c] [S] [s] [i] [n] [b] 参数说明： d : 改变显示的更新速度，或是在交谈式指令列( interactive command)按 s q : 没有任何延迟的显示速度，如果使用者是有 superuser 的权限，则 top 将会以最高的优先序执行 c : 切换显示模式，共有两种模式，一是只显示执行档.
Linux网络分析常用工具
lvturancao的博客
03-14 449
1、ethtool工具 （1）简介 ethtool是用于查询及设置网卡参数的 （2）工具编译方法 -p 跟踪指定的进程 -f 跟踪由fork子进程系统调用 -F 尝试跟踪vfo...
linux常用命令-part2
chinayuan的专栏
05-01 2万+
Ubuntu,Fedora,Debian,CentOS中文怎么发音 有奔头， 费德勒， 迪扁， 桑托斯。 乌版图 菲朵拉 德槟 森头斯 ================================ 使用find和wc命令统计代码行数 ================================ wc -l `find . -name "*.js" | xargs`
一文带你详解Redis常用的数据类型以及面试常碰到的数据持久化机制原理
程序媛小琬的博客
04-02 1125
前言 关于Redis的知识点总结了一个思维导图分享给大家： 简介 Redis是一种面向“key-value”类型数据的分布式NoSQL数据库系统,支持五种数据类型格式:** String,hash,list,set ,socket set **。 字符串（String） Redis中的字符串是一个字节序列。 常用操作命令有get、set等。 列表（list） Redis列表知识字符串列表，按插入顺序排序。您可以向Redis列表的头部或尾部添加元素,也可以用作队列。 散列/哈希（hash） Redis散
linux常用命令-part3
热门推荐
chinayuan的专栏
05-01 2万+
中文怎么发音 Ubuntu 有奔头，乌版图 Fedora 费德勒，菲朵拉 Debian 迪扁，德槟 CentOS 桑托斯 森头斯       Linux发展历史: 1) RedHat ---> 1.RedHat                2.CentOS                3.Fedora  桌面图形系统        rpm, yum 命令 2)
strace命令学习
后台开发
03-16 1万+
linux下strace命令是强大，今天来学习一下。利用strace命令可以追踪系统调用和信号值。 学习用的测试代码如下： [root@localhost mapan]# cat test.cpp #include &lt;iostream&gt; using namespace std; int main() { int a; cin &gt;&gt; a; ...
Strace 解决性能问题案例一则
weixin_33465519的博客
05-13 577
前言 前面一篇文章说了因为公司同事在解决一个故障(性能问题)时利用到strace，在学习strace工具的时候也查看《性能之巅》第十三章中，大神解决性能问题的思路和方法。本文将我遇到的故障的解决过程记录下来，前车之鉴。 业务逻辑 业务写入A表，通过canal监听binlog产生消息，应用接收消息经过一定逻辑(a,b,c)对消息进行三次校验(查询DB)并且聚合，然后写入B表。抽象的逻辑图示如下: [a] [A]--->[binlog]--->[b...
Linux strace命令
weixin_34218890的博客
01-08 2010
简介 strace常用来跟踪进程执行时的系统调用和所接收的信号。 在Linux世界，进程不能直接访问硬件设备，当进程需要访问硬件设备(比如读取磁盘文件，接收网络数据等等)时，必须由用户态模式切换至内核态模式，通 过系统调用访问硬件设备。strace可以跟踪到一个进程产生的系统调用,包括参数，返回值，执行消耗的时间。 输出参数含义 root@ubuntu:/usr# strace cat ...
强大的strace命令
weixin_33774615的博客
05-29 1996
strace是什么？按照strace官网的描述, strace是一个可用于诊断、调试和教学的Linux用户空间跟踪器。我们用它来监控用户空间进程和内核的交互，比如系统调用、信号传递、进程状态变更等。strace底层使用内核的ptrace特性来实现其功能。在运维的日常工作中，故障处理和问题诊断是个主要的内容，也是必备的技能。strace作为一种动态跟踪工具，能够帮助运维高效地定...
Golang 与系统调用
weixin_33744141的博客
08-12 1070
GopherCon2017 中的一个视频讲解了如何用golang实现一个简单的strace，本文是基于此演讲整理而来。 什么是系统调用 先看下wiki的定义： In computing, a system call is the programmatic way in which a computer program requests a...
linux 编程--prctl()函数应用
tmxkwzy的博客
07-15 2430
int prctl ( int option,unsigned long arg2,unsigned long arg3,unsigned long arg4,unsigned long arg5 ) 这个系统调用指令是为进程制定而设计的，明确的选择取决于option: PR_GET_PDEATHSIG :返回处理器信号；   PR_SET_PDEATHSIG :arg2作为处理器信号pd
Go语言goroutine调度器初始化(12)
weixin_30470643的博客
05-05 261
本文是《Go语言调度器源代码情景分析》系列的第12篇，也是第二章的第2小节。 本章将以下面这个简单的Hello World程序为例，通过跟踪其从启动到退出这一完整的运行流程来分析Go语言调度器的初始化、goroutine的创建与退出、工作线程的调度循环以及goroutine的切换等重要内容。 package main import "fmt" func main() ...
Linux系统下深究一个malloc/brk/sbrk新内存后的page fault问题
zdy0_2004的专栏
05-19 898
https://blog.csdn.net/dog250/article/details/80331590周四的休假团建又没有去，不因别的，只因年前东北行休假太多了，想缓缓…不过真实原因也确实因为假期剩余无几了…思考了一些问题，写下本文。  本文的缘起来自于和同事讨论一个关于缺页中断按需调页的讨论。真可谓是三人行必有我师，最近经常能从一些随意的比划或招架中悟出一丝意义，所以非常感谢周围的信息输出者...
strace(1) command
Dablelv 的博客专栏。
04-12 6710
1.命令简介 strace 命令是一个集诊断、调试、统计于一体的工具，我们可以使用 strace 对程序的系统调用和信号传递的跟踪结果来对应用进行分析，以达到解决问题或者是了解程序工作过程的目的。当然strace 与专业的调试工具比如说 gdb 之类的是没法相比的，因为它不是一个专业的调试器。 strace 的最简单的用法就是执行一个指定的命令，在指定的命令结束之后它也就退出了。在命令执行的过程中......
利用strace进行故障注入
`-s0`选项限制了字符串输出的长度，`-P /dev/urandom`则指定了strace仅对涉及`/dev/urandom`的系统调用进行追踪。结果显示了打开`/dev/urandom`，读取数据，然后关闭文件描述符等操作，最后显示进程以0状态退出。 ...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值