Comment on I made a real-time C/C++/Rust build visualizerparentComments−flakes1yCurious, what were you using for doing syscall logging? LD_PRELOAD tricks, or ebpf filtering?−entelechy1ymostly strace and it's macos equivalent; Later we moved to ptrace and ebpf. LD_PRELOAD unfortunately doesn't work for statically linked libc. There are also kernel probes but didn't like that it required root permissions...
Comments
Curious, what were you using for doing syscall logging? LD_PRELOAD tricks, or ebpf filtering?
mostly strace and it's macos equivalent; Later we moved to ptrace and ebpf. LD_PRELOAD unfortunately doesn't work for statically linked libc. There are also kernel probes but didn't like that it required root permissions...