Trace kernel operations for process
command and log data to file ktrace.out in the current working directory. The tracing continues until you either exit
command or clear the trace points (with the -c or -C options). Use kdump to view the trace log.
Append new data to the trace file instead of overwriting it.
Stop tracing all processes run by a user invoking ktrace. If this option is used with superuser privileges, the tracing of all processes is stopped.
Stop tracing process command.
Also trace any current child processes of the specified process.
file instead of ktrace.out, the default.
Toggle tracing of all processes that are part of the process group
Also trace any future child processes of the specified process.
Toggle tracing of process
Trace only kernel operations specified in
tracepoints. Use the appropriate letters from this list to indicate which type of operation(s) to trace:
Trace only system calls and I/O on process 489:
ktrace -t ci -p 489
Run the atlookup command and trace all its kernel operations:
Turn off tracing for all user processes: