Skip to end of metadata
Go to start of metadata


Strace can capture the execution of a binary from start to end. It intercepts and records the system calls which are called by a process and the signals which are received by a process. The name of each system call, its arguments and its return value(s) are all printed.  Strace takes advantage of a Linux kernel feature called 'ptrace' which isn't available in the Windows OS architecture.  Strace is very similar to 'truss' which is available for use on Solaris.





 'strace' is shipped and installed with Redhat, Suse and virtually all Linux distro's.  No download is needed.

Related Content

External facing powerpoint explaining use cases to be attached in the near future. 

Requirements Dependencies

The only dependency is that the 'strace' binary can be located on the server and the user has permissions to execute it as well as see the running process/pid you plan on attaching 'strace' to.

Additional Resources

Wikipedia history and definition for 'strace' -

strace - Linux Man Page:

Suse documentation on 'strace' -


Use this structure to help you compose your contributions for WIKI and at the same time will ensure spelling and grammar.

  • No labels