Re: How to trace system level call in AIX

From: Pete Finnigan (peteat_private)
Date: Thu Dec 20 2001 - 08:58:05 PST

  • Next message: frog frog: "1 last CSS hole in PHPNuke :)"

    Hi
    
    Please have a look at http://www.pgibbs.co.uk/useful_code/libtrace.htm.
    This is a friend of mines private home page, he has a lot of useful C
    programs one being libtrace that tracks calls on AIX, he wrote it
    himself in his spare time and its worth a look.
    
    regards
    Pete Finnigan
    www.pentest-limited.com
    
    In article <75C025AE395F374B81F6416B1D4BDEFB0FAF5E@MTV-CORPMAIL>,
    Michael Wojcik <Michael.Wojcikat_private> writes
    >There's a third-party product for AIX 4 (and 3) which is similar to truss:
    >sctrace, from SevOne Software.  It's quite good, but you do have to pay for
    >it.
    >
    >AIX's trace facility is actually quite powerful (you can do some interesting
    >things if you dig into its innards and rewrite the template file), but it's
    >not nearly as convenient for quick tracing of a single process as
    >truss/ltrace/sctrace.
    >
    >Michael Wojcik                402 438-7842
    >Software Systems Developer    Micro Focus
    >
    >
    >> -----Original Message-----
    >> From: Valdis.Kletnieksat_private [mailto:Valdis.Kletnieksat_private]
    >> Sent: Tuesday, December 18, 2001 4:13 PM
    >> To: Minchu Mo
    >> Cc: vuln-devat_private
    >> Subject: Re: How to trace system level call in AIX 
    >> 
    >> 
    >> On Mon, 17 Dec 2001 20:36:12 GMT, Minchu Mo 
    >> <morris_minchuat_private>  said:
    >> > Somthing like truss in solaris, ltrace in linux. Anybody
    >> > know the command used to trace system call in AIX?
    >> 
    >> AIX 5.1 has 'truss'.
    >> 
    >> AIX 4.3.3 and earlier you can use the 'trace' command - but 
    >> it's a pain
    >> because it's a system-level trace from which you can then extract the
    >> information for the process you cared about.
    >> 
    >> -- 
    >>                              Valdis Kletnieks
    >>                              Operating Systems Analyst
    >>                              Virginia Tech
    >> 
    >> 
    
    -- 
    This email and any files transmitted with it are confidential and
    intended solely for the use of the individual or entity to whom they
    are addressed. If you have received this email in error please notify
    the system manager at admin@pentest-limited.com
    --
    Pete Finnigan
    IT Security Consultant
    PenTest Limited
    
    Office  01565 830 990
    Fax     01565 830 889
    Mobile  07974 087 885
    
    pete.finnigan@pentest-limited.com
    
    www.pentest-limited.com
    



    This archive was generated by hypermail 2b30 : Thu Dec 20 2001 - 09:10:14 PST