Microsoft under MIT license the source texts of the ProcMon (Process Monitor) utility for Linux. Initially, the utility was provided as part of the Sysinternals suite for Windows and is now adapted for Linux. Tracing in Linux is organized using instrumentation (BPF Compiler Collection), which allows the creation of efficient BPF programs for tracing and manipulating kernel structures. Ready-to-install packages for Ubuntu Linux.
The utility provides a simple console interface for monitoring the state of processes in the system and analyzing activity related to system calls. For instance, you can view summary reports of all processes and system calls, enable tracing of system call accesses for specified processes, and start monitoring the activation of certain system calls. Output can be displayed on the screen or the operation dump can be written to a file.
Kilde: opennet.ru
