Syscall count summary strace
Aggregate syscall counts/time across forks, sorted by time; pinpoints the costly call
strace -c -f -S time -p <pid>
more strace
all 13 commands →
Decode fds with timing
strace -yy -T -tt -e trace=%file -p <pid>
Stack trace per syscall
strace -k -e trace=openat -f -p <pid>
Syscall fault injection
strace -f -e inject=openat:error=ENOENT:when=3 -p <pid>
Trace signals delivered
strace -f -e signal=all -e trace=none -p <pid>
Trace a new process
strace -o trace.log ls /tmp