Skip to content

Instantly share code, notes, and snippets.

@romanenkor

romanenkor/killtrace

Created December 13, 2021 07:20
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save romanenkor/e3d423790e2480f80686bbc6d217f275 to your computer and use it in GitHub Desktop.
Save romanenkor/e3d423790e2480f80686bbc6d217f275 to your computer and use it in GitHub Desktop.
Download ZIP
Killtrace - print kill system calls
Raw
killtrace
#!./bash
echo > /sys/kernel/debug/tracing/set_event
sleep 1
echo 0 > /sys/kernel/debug/tracing/tracing_on
sleep 1
echo nop > /sys/kernel/debug/tracing/current_tracer
sleep 1
echo 1 > /sys/kernel/debug/tracing/events/raw_syscalls/sys_enter/enable
sleep 1
echo 1 > /sys/kernel/debug/tracing/tracing_on
sleep 1
cat /sys/kernel/debug/tracing/trace_pipe | grep -w 'NR 37'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment