Decode fds with timing strace
Show paths/sockets behind fds plus per-call duration and timestamps for file ops
strace -yy -T -tt -e trace=%file -p <pid>
more strace
all 13 commands →
Stack trace per syscall
strace -k -e trace=openat -f -p <pid>
Syscall fault injection
strace -f -e inject=openat:error=ENOENT:when=3 -p <pid>
Trace signals delivered
strace -f -e signal=all -e trace=none -p <pid>
Trace a new process
strace -o trace.log ls /tmp
Attach to running process
strace -p $(pgrep nginx | head -1) -o /tmp/nginx.trace