Linux系统调用跟踪和进程错误退出分析  

Linux Syscall Trace and Process Error Exit Analysis

作　　者：毛英明[1] 陆慧梅[1] 向勇[2] MAO Yingming;LU Huimei;XIANG Yong(School of Computer Science and Technology,Beijing Institute of Technology,Beijing 100081,China;Department of Computer Science and Technology,Tsinghua University,Beijing 100084,China)

机构地区：[1]北京理工大学计算机学院,北京100081 [2]清华大学计算机科学与技术系,北京100084

出　　处：《计算机工程与应用》2019年第6期57-66,共10页Computer Engineering and Applications

基　　金：核高基项目(No.2012ZX01039-004-41;No.2012ZX01039-003)

摘　　要：现有的Linux系统调用跟踪工具存在跟踪上下文信息不全、无法高效地对通过网络通信的多进程应用程序进行跟踪以及跟踪结果缺少图形化展现的问题。通过扩展Linux系统调用跟踪工具strace,实现了启发式跟踪工具heuristic-strace,其能够实时发现和自动跟踪应用程序中通过网络通信的进程,形成进程创建关系图、进程网络通信关系图,并结合系统调用的栈回溯信息,定位进程的错误退出原因。实验结果表明,此工具对能对典型的GUI和网络应用软件进行跟踪,引入的性能开销比较低,并能保证被跟踪软件的正常交互。The existing Linux syscall tracing tools can’t effectively trace multi process applications that communicate with other processes through network.The tracing result’s context information is incomplete and lacks of graphical display.So a new tracing tool named heuristic-strace is designed based on the existing syscall tracing tool strace.It can automatically find and trace the processes that communicate through network.Moreover,it can display the tracing result in the form of process creation graph and network communication graph.Combined with the stack trace info,it can locate the process error exit reason.The experimental results show that this tool can trace typical GUI and network applications with lower performance overhead and ensure normal interact with the traced software.

关 键 词：Linux系统调用 启发式跟踪 网络通信 进程错误退出分析 

分 类 号：TP316.81[自动化与计算机技术—计算机软件与理论]