Show timestamps strace
-tt adds absolute time; -T shows time spent in each call
strace -tt -T curl https://example.com 2>&1 | head -40
more strace
all 13 commands →
Trace file access
strace -e trace=openat -e trace=file myapp 2>&1 | grep 'ENOENT'
Trace network syscalls
strace -e trace=network,socket curl https://example.com 2>&1 | grep -v '^---'
Syscall count summary
strace -c -f -S time -p <pid>
Decode fds with timing
strace -yy -T -tt -e trace=%file -p <pid>
Stack trace per syscall
strace -k -e trace=openat -f -p <pid>