Linux command
intentrace 命令
文本
复制后可按需替换文件名、目录或参数。
常用示例
Trace a command
intentrace [command]
Trace a running process
intentrace -p [pid]
Show only a summary table
intentrace -c [command]
Follow child processes
intentrace -f [command]
Only show failed syscalls
intentrace -Z [command]
Redirect output to a file
intentrace -o [file] [command]
说明
intentrace is a syscall tracer that goes beyond raw syscall logging by consulting an extensive backlog of deduction heuristics to explain what each syscall is actually trying to accomplish. Because Linux syscalls often have dual usage that is obfuscated by libraries, seeing the intent behind a syscall is immensely useful when debugging crashing binaries. Unlike traditional strace output which shows raw syscall numbers and arguments, intentrace provides human-readable explanations of what each system call is doing in context.
参数
- -p _pid_, --attach _pid_
- Attach to a running process by PID.
- -c, --summary-only
- Display only a summary table.
- -C, --summary
- Show summary table in addition to normal output.
- -f, --follow-forks
- Trace child processes when traced programs create them.
- -Z, --failed-only
- Only show failed syscalls.
- -o _file_, --output _file_
- Redirect output to a file.
- -q, --mute-stdout
- Suppress traced program's standard output.
- --trace=_syscall1,syscall2_
- Trace only specific syscalls.
FAQ
What is the intentrace command used for?
intentrace is a syscall tracer that goes beyond raw syscall logging by consulting an extensive backlog of deduction heuristics to explain what each syscall is actually trying to accomplish. Because Linux syscalls often have dual usage that is obfuscated by libraries, seeing the intent behind a syscall is immensely useful when debugging crashing binaries. Unlike traditional strace output which shows raw syscall numbers and arguments, intentrace provides human-readable explanations of what each system call is doing in context.
How do I run a basic intentrace example?
Run `intentrace [command]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -p _pid_, --attach _pid_ do in intentrace?
Attach to a running process by PID.