Problems with strace

• Not entirely non-invasive

  • Signals can interrupt syscalls
  • Programs may not handle interrupted syscalls and may terminate, e.g.: qmail-send from qmail

• Logs can be quite verbose (i.e.: big)

  • You may not know what you're looking for until you've looked

Notes: