# STRACE ```shell strace -e trace=open,close -s 1024 /bin/ls -la /home/ganitak ``` **-e trace=open,close:** Only trace the open and close system calls. **-s 1024:** Set the maximum string size to 1024 bytes. **/bin/ls -la /home/user:** Execute ls -la /home/user. - **Options:** -A, -C, -d, -f, -f, -h, -i, -k, -q, -q, -r, -t, -t, -t, -T, -v, -V, -w, -x, -x, -y, -y, -z, -Z -I N -b execve -e EXPR... -a COLUMN -o FILE -s STRSIZE -X FORMAT -O OVERHEAD -S SORTBY -P PATH... -p PID... -U COLUMNS #### more readable version : ```shell strace [options]... [--seccomp-bpf] { -p PID | [additional options] PROG [ARGS] } ``` **Explanation:** - **[options]:** This is a placeholder for various single-character options that control the behavior of strace. These options can be combined. - **-p PID:** This specifies the process ID (PID) to trace. - **PROG [ARGS]:** Specifies the program and its arguments to be executed and traced by strace. - **--seccomp-bpf:** Enables seccomp filtering.** ### List ALL processes : ```shell ps -e ```