Show timestamps

-tt adds absolute time; -T shows time spent in each call

strace -tt -T curl https://example.com 2>&1 | head -40
tool
strace13 commands
tags
stracelinuxdebugperformance

More strace commands

  • Trace file access
    strace -e trace=openat -e trace=file myapp 2>&1 | grep 'ENOENT'

    Find files the process tries to open but cannot find

  • Trace network syscalls
    strace -e trace=network,socket curl https://example.com 2>&1 | grep -v '^---'

    Capture all network-related syscalls

  • Syscall count summary
    strace -c -f -S time -p <pid>

    Aggregate syscall counts/time across forks, sorted by time; pinpoints the costly call

  • Decode fds with timing
    strace -yy -T -tt -e trace=%file -p <pid>

    Show paths/sockets behind fds plus per-call duration and timestamps for file ops

  • Stack trace per syscall
    strace -k -e trace=openat -f -p <pid>

    Print user stack on each openat to find which code path opens a file; needs debug symbols

all 13 strace commands