2025-03-14 21:59:59 -06:00
|
|
|
# extrace
|
|
|
|
|
|
|
|
|
|
> Trace exec() calls.
|
|
|
|
|
> More information: <https://github.com/chneukirchen/extrace>.
|
|
|
|
|
|
|
|
|
|
- Trace all program executions occurring on the system:
|
|
|
|
|
|
|
|
|
|
`sudo extrace`
|
|
|
|
|
|
|
|
|
|
- Run a command and only trace descendants of this command:
|
|
|
|
|
|
|
|
|
|
`sudo extrace {{command}}`
|
|
|
|
|
|
2025-07-24 22:27:13 -06:00
|
|
|
- Print the current working [d]irectory of each process:
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
`sudo extrace -d`
|
|
|
|
|
|
|
|
|
|
- Resolve the full path of each executable:
|
|
|
|
|
|
|
|
|
|
`sudo extrace -l`
|
|
|
|
|
|
2025-07-24 22:27:13 -06:00
|
|
|
- Display the [u]ser running each process:
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
`sudo extrace -u`
|
