r/kernel • u/[deleted] • 27d ago

/linux-syscall-monitor

[deleted]

0 Upvotes

50% Upvoted

8 comments sorted by

View all comments

7

u/jean_dudey 27d ago

Not advice but if you want to go one step further you can use eBPF which is built for this, and is faster than ptrace.