2019-11-26 23:49:27 +01:00
|
|
|
# extrace
|
|
|
|
|
|
|
|
|
|
> Trace exec() calls.
|
|
|
|
|
> More information: <https://github.com/chneukirchen/extrace>.
|
|
|
|
|
|
|
|
|
|
- Trace all program executions occurring on the system:
|
|
|
|
|
|
|
|
|
|
`sudo extrace`
|
|
|
|
|
|
|
|
|
|
- Run a command and only trace descendants of this command:
|
|
|
|
|
|
|
|
|
|
`sudo extrace {{command}}`
|
|
|
|
|
|
2025-06-28 12:47:25 +03:00
|
|
|
- Print the current working [d]irectory of each process:
|
2019-11-26 23:49:27 +01:00
|
|
|
|
|
|
|
|
`sudo extrace -d`
|
|
|
|
|
|
|
|
|
|
- Resolve the full path of each executable:
|
|
|
|
|
|
|
|
|
|
`sudo extrace -l`
|
|
|
|
|
|
2025-06-28 12:47:25 +03:00
|
|
|
- Display the [u]ser running each process:
|
2019-11-26 23:49:27 +01:00
|
|
|
|
|
|
|
|
`sudo extrace -u`
|
