GitHub - nvll/traceio: Program to track IO syscalls on x86

nvll / traceio Public

Notifications You must be signed in to change notification settings
Fork 0
Star 5

Program to track IO syscalls on x86_64 Linux

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 5 Commits
Makefile		Makefile
README		README
flag_maps.cpp		flag_maps.cpp
flag_maps.hpp		flag_maps.hpp
flag_test.cpp		flag_test.cpp
main.cpp		main.cpp

Repository files navigation

Just a program to trace open/close/read/write syscalls and dump as much information as possible.

For example:
chris@k ~/traceio $ ./traceio ./hello
open("/etc/ld.so.cache", 524288, 1) = 3
close(3) = 0
open("/lib/x86_64-linux-gnu/libc.so.6", 524288, 1663570344) = 3
read(3, 0xA794D940, 832) = 832
00000000  7F 45 4C 46 02 01 01 03  00 00 00 00 00 00 00 00  [.ELF............]
00000010  03 00 3E 00 01 00 00 00  50 1C 02 00 00 00 00 00  [..>.....P.......]
00000020  40 00 00 00 00 00 00 00  C0 64 1A 00 00 00 00 00  [@........d......]
00000030  00 00 00 00 40 00 38 00  0A 00 40 00 44 00 43 00  [[email protected][email protected].]
00000040  06 00 00 00 05 00 00 00  40 00 00 00 00 00 00 00  [........@.......]
00000050  40 00 00 00 00 00 00 00  40 00 00 00 00 00 00 00  [@.......@.......]
00000060  30 02 00 00 00 00 00 00  30 02 00 00 00 00 00 00  [0.......0.......]
00000070  08 00 00 00 00 00 00 00  03 00 00 00 04 00 00 00  [................]
00000080  10 CD 16 00 00 00 00 00  10 CD 16 00 00 00 00 00  [................]
00000090  10 CD 16 00 00 00 00 00  1C 00 00 00 00 00 00 00  [................]
000000A0  1C 00 00 00 00 00 00 00  10 00 00 00 00 00 00 00  [................]
000000B0  01 00 00 00 05 00 00 00  00 00 00 00 00 00 00 00  [................]
000000C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  [................]
000000D0  84 F9 19 00 00 00 00 00  84 F9 19 00 00 00 00 00  [................]
000000E0  00 00 20 00 00 00 00 00  01 00 00 00 06 00 00 00  [................]
000000F0  40 07 1A 00 00 00 00 00  40 07 3A 00 00 00 00 00  [@.......@.:.....]
00000100  40 07 3A 00 00 00 00 00  F8 4F 00 00 00 00 00 00  [@.:......O......]
00000110  00 93 00 00 00 00 00 00  00 00 20 00 00 00 00 00  [................]
00000120  02 00 00 00 06 00 00 00  A0 3B 1A 00 00 00 00 00  [.........;......]
00000130  A0 3B 3A 00 00 00 00 00  A0 3B 3A 00 00 00 00 00  [.;:......;:.....]
00000140  E0 01 00 00 00 00 00 00  E0 01 00 00 00 00 00 00  [................]
00000150  08 00 00 00 00 00 00 00  04 00 00 00 04 00 00 00  [................]
00000160  70 02 00 00 00 00 00 00  70 02 00 00 00 00 00 00  [p.......p.......]
00000170  70 02 00 00 00 00 00 00  44 00 00 00 00 00 00 00  [p.......D.......]
00000180  44 00 00 00 00 00 00 00  04 00 00 00 00 00 00 00  [D...............]
00000190  07 00 00 00 04 00 00 00  40 07 1A 00 00 00 00 00  [........@.......]
000001A0  40 07 3A 00 00 00 00 00  40 07 3A 00 00 00 00 00  [@.:.....@.:.....]
000001B0  10 00 00 00 00 00 00 00  80 00 00 00 00 00 00 00  [................]
000001C0  08 00 00 00 00 00 00 00  50 E5 74 64 04 00 00 00  [........P.td....]
000001D0  2C CD 16 00 00 00 00 00  2C CD 16 00 00 00 00 00  [,.......,.......]
000001E0  2C CD 16 00 00 00 00 00  9C 6A 00 00 00 00 00 00  [,........j......]
000001F0  9C 6A 00 00 00 00 00 00  04 00 00 00 00 00 00 00  [.j..............]
00000200  51 E5 74 64 06 00 00 00  00 00 00 00 00 00 00 00  [Q.td............]
00000210  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  [................]
00000220  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  [................]
00000230  10 00 00 00 00 00 00 00  52 E5 74 64 04 00 00 00  [........R.td....]
00000240  40 07 1A 00 00 00 00 00  40 07 3A 00 00 00 00 00  [@.......@.:.....]
00000250  40 07 3A 00 00 00 00 00  C0 38 00 00 00 00 00 00  [@.:......8......]
00000260  C0 38 00 00 00 00 00 00  01 00 00 00 00 00 00 00  [.8..............]
00000270  04 00 00 00 14 00 00 00  03 00 00 00 47 4E 55 00  [............GNU.]
00000280  BE C1 09 88 43 EF 2D 99  23 B5 FB 5F 9F 51 CD 6D  [....C.-.#.._.Q.m]
00000290  F2 5A 2E 38 04 00 00 00  10 00 00 00 01 00 00 00  [.Z.8............]
000002A0  47 4E 55 00 00 00 00 00  02 00 00 00 06 00 00 00  [GNU.............]
000002B0  20 00 00 00 00 00 00 00  F3 03 00 00 0A 00 00 00  [................]
000002C0  00 01 00 00 0E 00 00 00  00 30 10 44 A0 20 02 01  [.........0.D....]
000002D0  88 03 E6 90 C5 45 8C 00  C0 00 08 00 05 80 00 60  [.....E.........`]
000002E0  C0 80 00 0D 8A 0C 00 04  10 00 88 44 32 08 2E 40  [...........D2..@]
000002F0  88 50 34 2C 20 0E 22 48  26 84 C0 8C 04 08 00 02  [.P4,.."H&.......]
00000300  02 0E A1 AC 1A 04 66 C0  00 C0 32 00 C0 00 50 01  [......f...2...P.]
00000310  20 81 08 84 0B 20 20 28  24 00 04 20 50 00 10 58  [.......($...P..X]
00000320  80 CA 44 42 28 00 06 80  10 18 42 00 20 40 80 00  [..DB(.....B..@..]
00000330  09 50 00 51 8A 40 10 00  00 00 00 08 00 00 11 10  [.P.Q.@..........]
close(3) = 0
hello world!
write(1, 0x6327C000, 13) = 13
00000000  68 65 6C 6C 6F 20 77 6F  72 6C 64 21 0A           [hello.world!.   ]