ltrace

Used to track the process calling library functions

Supplementary instructions

ltrace command is used to track the process calling library functions.

grammar

ltrace [option ...] [command [arg ...]]

Options

-a aligns the return value of a specific column.
-c Counts times and calls and prints a summary when the program exits.
-C Decodes low-level names (kernel-level) into user-level names.
-d Print debugging information.
-e Changes tracked events.
-f traces child processes.
-h prints help information.
-i prints the instruction pointer when the library is called.
-l only prints calls within a library.
-L Do not print library calls.
-n, --indent=NR Indent output by NR spaces for each call level nesting.
-o, --output=file Direct output to file.
-p PID Attach ltrace to the process number whose value is PID.
-r prints relative timestamps.
-s STRLEN sets the maximum length of printed strings.
-S displays system calls.
-t, -tt, -ttt Print absolute timestamps.
-T Output the time cost of each called procedure.
-u USERNAME uses a user ID or group ID to run the command.
-V, --version Print version information and exit.
-x NAME treat the global NAME like a library subroutine. (Please translate)

Example

The most basic application, without any parameters:

[guest@localhost tmp]$ ltrace ./a.out
__libc_start_main(0x80484aa, 1, 0xbfc07744, 0x8048550, 0x8048540 <unfinished ...>
printf("no1:%d \t no2:%d \t diff:%d\n", 10, 6, 4no1:10 no2:6 diff:4 ) = 24
printf("no1:%d \t no2:%d \t diff:%d\n", 9, 7, 2no1:9 no2:7 diff:2 ) = 23
printf("no1:%d \t no2:%d \t diff:%d\n", 8, 8, 0no1:8 no2:8 diff:0 ) = 23
--- SIGFPE (Floating point exception) ---
+++ killed by SIGFPE +++

Output call time overhead:

[guest@localhost tmp]$ ltrace -T ./a.out
__libc_start_main(0x80484aa, 1, 0xbf81d394, 0x8048550, 0x8048540 <unfinished ...>
printf("no1:%d \t no2:%d \t diff:%d\n", 10, 6, 4no1:10 no2:6 diff:4 ) = 24 <0.000972>
printf("no1:%d \t no2:%d \t diff:%d\n", 9, 7, 2no1:9 no2:7 diff:2 ) = 23 <0.000155>
printf("no1:%d \t no2:%d \t diff:%d\n", 8, 8, 0no1:8 no2:8 diff:0 ) = 23 <0.000153>
--- SIGFPE (Floating point exception) ---
+++ killed by SIGFPE +++

Show system calls:

[guest@localhost tmp]$ ltrace -S ./a.out
SYS_brk(NULL) = 0x9e20000
SYS_access(0xa4710f, 4, 0xa4afc0, 0, 0xa4b644) = 0
SYS_open("/etc/ld.so.preload", 0, 02) = 3
SYS_fstat64(3, 0xbfbd7a94, 0xa4afc0, -1, 3) = 0
SYS_mmap2(0, 17, 3, 2, 3) = 0xb7f2a000
SYS_close(3) = 0
SYS_open("/lib/libcwait.so", 0, 00) = 3
SYS_read(3, "\177ELF\001\001\001", 512) = 512
SYS_fstat64(3, 0xbfbd76fc, 0xa4afc0, 4, 0xa4b658) = 0
SYS_mmap2(0, 4096, 3, 34, -1) = 0xb7f29000
SYS_mmap2(0, 5544, 5, 2050, 3) = 0x423000
SYS_mmap2(0x424000, 4096, 3, 2066, 3) = 0x424000
............. omit some lines