Vulnerability Development mailing list archives

Re: Capturing System Calls


From: areisse () WAM UMD EDU (Andrew Reisse)
Date: Thu, 22 Jun 2000 13:47:54 -0400


The strace command prints out all the system calls made by a program
(ktrace on bsd). Under linux "ltrace" prints out library calls (like
printf, fopen, etc) instead of just system calls.

On Thu, 22 Jun 2000, Green Charles Contr AFRL/IFGB wrote:

On UNIX Systems, (FreeBSD, Linux, Solaris) is there a way to capture/modify
system calls calls from an application with out modifying the kernel (or
using kernel modules) - preferably in userspace? The reason I ask is that a
group of us are being asked to evaluate a piece of software for my company
but they've put some heavy restrictions on how we do it. One of the
restriction is that we're not allowed to modify the kernel.



Current thread: