Re: intercepting system calls?
site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com Wade Tregaskis ICQ: 40056898 AIM, Yahoo & Skype: wadetregaskis MSN: wjtregaskis@students.latrobe.edu.au iChat & email: wadetregaskis@mac.com Jabber: wadetregaskis@jabber.org Google Talk: wadetregaskis@gmail.com http://homepage.mac.com/wadetregaskis/ -- Sed quis custodiet ipsos custodes? _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... I'd like to catch the system calls that an process is making, so I can examine the system call and optionally handle it myself. Under Linux and Solaris, I can use ptrace() with the PTRACE_SYSCALL command, which will let the process run until it enters or exits a system call. Is systrace <http://www.citi.umich.edu/u/provos/systrace/> suitable for your purposes? It hasn't been updated for the recent MacOS X kernels, as far as I know, but it did work up until at least Jaguar. If nothing else, it's probably a good starting point for how-to. This email sent to site_archiver@lists.apple.com
participants (1)
-
wadeslists@mac.com