LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software > Linux - Kernel
User Name
Password
Linux - Kernel This forum is for all discussion relating to the Linux kernel.

Notices


Reply
  Search this Thread
Old 11-17-2011, 04:08 PM   #1
8613133
LQ Newbie
 
Registered: Nov 2011
Posts: 11

Rep: Reputation: Disabled
logging system calls & services


i want to log all the system calls & services in the kernel(services are the transanction between modules in the kernel),with which tool i can do it?
 
Old 11-18-2011, 08:53 AM   #2
kbscores
Member
 
Registered: Oct 2011
Location: USA
Distribution: Red Hat
Posts: 259
Blog Entries: 9

Rep: Reputation: 32
We use audit. (auditd)

It comes with a nice set of utilities for looking at failed system calls and system summaries etc...

(aureport, ausearch, etc...)
 
Old 11-18-2011, 10:11 AM   #3
8613133
LQ Newbie
 
Registered: Nov 2011
Posts: 11

Original Poster
Rep: Reputation: Disabled
are you sure that audit can log the services in the kernel?
 
Old 11-18-2011, 10:28 AM   #4
kbscores
Member
 
Registered: Oct 2011
Location: USA
Distribution: Red Hat
Posts: 259
Blog Entries: 9

Rep: Reputation: 32
Which distribiution are you using?
 
Old 11-18-2011, 10:36 AM   #5
kbscores
Member
 
Registered: Oct 2011
Location: USA
Distribution: Red Hat
Posts: 259
Blog Entries: 9

Rep: Reputation: 32
When using auditd w/utility this command will bring up a list of all system calls being made

Code:
aureport --start today --syscall
If you want to see failed system calls

Code:
aureport --start today --syscall --failed
If you want to see events

Code:
aureport --start today --event
And a handful of other things --

To list services/modules loaded in kernel just do:
Code:
lsmod
 
Old 11-18-2011, 03:30 PM   #6
8613133
LQ Newbie
 
Registered: Nov 2011
Posts: 11

Original Poster
Rep: Reputation: Disabled
sorry,i want to know audit can log transanctions between modules in the kernel(which called services),can it log services(in addition to modules in the kernel)?
 
Old 11-19-2011, 01:02 AM   #7
8613133
LQ Newbie
 
Registered: Nov 2011
Posts: 11

Original Poster
Rep: Reputation: Disabled
i want to know exactly , can audit make log of all the services (which are )between modules in the subsysytem of kernel(for example in the disk part of kernel)?thanks
 
Old 11-19-2011, 04:09 AM   #8
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
...maybe he's looking for Kprobes [0|1|2|3|4]?
 
Old 11-19-2011, 02:03 PM   #9
zanier
LQ Newbie
 
Registered: Nov 2011
Distribution: ubuntu/debian
Posts: 29

Rep: Reputation: Disabled
so you mean kprob log both system calls and services?
 
Old 11-19-2011, 02:35 PM   #10
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
I mean you should read the documentation behind those links and see if you can reach a conclusion yourself or not.
 
Old 11-30-2011, 06:48 AM   #11
8613133
LQ Newbie
 
Registered: Nov 2011
Posts: 11

Original Poster
Rep: Reputation: Disabled
lttng installation

hi, when i was installing the binary package of lttng,in installation process when i wrote"
sudo apt-get install lttng" in command line i found a error which was:
Reading package lists... Done
Building dependency tree
Reading state information... Done
You might want to run 'apt-get -f install' to correct these:
The following packages have unmet dependencies:
lttng : Depends: linux-image-2.6.35-24-lttng but it is not going to
be installed
Depends: linux-headers-2.6.35-24-lttng but it is not going to
be installed
Depends: ltt-bin but it is not going to be installed
perl : Depends: perl-base (= 5.12.4-6) but 5.10.1-12ubuntu2 is to be installed
Depends: libdb5.1 but it is not installable
E: Unmet dependencies. Try 'apt-get -f install' with no packages (or
specify a solution).
what should i do?please help me.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
how does java calls the system calls which are written in c babu198649 Linux - General 3 12-05-2011 03:40 AM
system calls goldeneagle1234 Linux - Newbie 1 09-14-2008 04:52 AM
[B]Netware Directory Services Calls Library required for Linux/Solaris[/B] ravisankar_vulimiri Linux - Newbie 0 07-25-2008 02:23 PM
what calls csh.cshrc when logging in? ron7000 SUSE / openSUSE 1 11-09-2007 07:06 PM
Logging DirectPlay calls? Griffon26 Programming 1 11-12-2001 02:13 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software > Linux - Kernel

All times are GMT -5. The time now is 01:01 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration