Re: Capturing System Calls

[cbell () JAYHAWKS NET (Christofer C. Bell)]

On Thu, 22 Jun 2000, Green Charles Contr AFRL/IFGB wrote:

> On UNIX Systems, (FreeBSD, Linux, Solaris) is there a way to capture/modify
> system calls calls from an application with out modifying the kernel (or
> using kernel modules) - preferably in userspace? The reason I ask is that a
> group of us are being asked to evaluate a piece of software for my company
> but they've put some heavy restrictions on how we do it. One of the
> restriction is that we're not allowed to modify the kernel.

You can view system calls on Linux with strace(1), library calls with
ltrace(1).  On FreeBSD you can use ktrace(1), and on Solaris you can use
truss(1).  Each has documentation that comes with the OS.

I hope this points you in the right direction.  Good luck!

--
Chris