CONTENTS

SYNOPSIS

DESCRIPTION

Once tracing is enabled on a process, trace data will be logged until either the process exits or the trace point is cleared. A traced process can generate enormous amounts of log data quickly; It is strongly suggested that users memorize how to disable tracing before attempting to trace a process. The following command is sufficient to disable tracing on all user owned processes, and, if executed by root, all processes:

$ ktrace -C

The trace file is not human readable; use kdump(1) to decode it.

The options are as follows:

$ ktrace -p 34

# trace all kernel operations of processes in process group 15 and # pass the trace flags to all current and future children

$ ktrace -idg 15

# disable all tracing of process 65

$ ktrace -cp 65

# disable tracing signals on process 70 and all current children

$ ktrace -t s -cdp 70

# enable tracing of I/O on process 67

$ ktrace -ti -p 67

# run the command "w", tracing only system calls

$ ktrace -tc w

# disable all tracing to the file "tracedata"

$ ktrace -c -f tracedata

# disable tracing of all processes owned by the user

$ ktrace -C

HISTORY

BUGS