Solaris Developer Quiz February 28, 2007

Lippman

Prior to Solaris10 and DTrace, ________ was the widely used tool for tracing system calls, library calls etc.
a) proc
b) lseek
c) truss
d) snoop
The correct answer is c.
'truss' executes the specified command and produces a trace of the system calls it performs, the signals it receives, and the machine faults it incurs.  
'proc' tools are utilities that exercise features of /proc (see  proc(4)). Most of them take a list of process-ids (pid). Some of the proc tools can also be applied to core files (see core(4)). Some of the proc tools can operate on individual threads.
'lseek' function sets the file pointer associated with the open file descriptor. 'lseek' allows the file pointer to be set beyond the existing data in the file. If data are later written at this point, subsequent reads in the gap between the previous end of data and the newly written data return bytes of value 0 until data are written into the gap.
'snoop' captures packets from the network and displays their contents. 'snoop' uses both the network packet filter and streams buffer modules to provide efficient capture of packets from the network. Captured packets can be displayed as they are received, or saved to a file for later inspection.


本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/27174/showart_465046.html