Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/jacereda/fsatrace

Filesystem access tracer
https://github.com/jacereda/fsatrace

Last synced: 6 days ago
JSON representation

Filesystem access tracer

Host: GitHub
URL: https://github.com/jacereda/fsatrace
Owner: jacereda
License: isc
Created: 2015-05-09T18:42:55.000Z (about 9 years ago)
Default Branch: master
Last Pushed: 2024-05-12T08:54:56.000Z (about 2 months ago)
Last Synced: 2024-05-12T09:39:26.310Z (about 2 months ago)
Language: C
Size: 233 KB
Stars: 75
Watchers: 4
Forks: 12
Open Issues: 20
Metadata Files:
- Readme: README.md
- License: LICENSE

Lists

awesome-ld-preload - fsatrace - filesystem access tracer (Libraries)

README

# Filesystem Access Tracer

This tool injects code into other applications in order to trace file accesses.

## Why?

This can be useful for things like build systems, since it allows to
automatically generate dependencies in a toolchain-agnostic way or to ensure
declared dependencies match the real ones.

## Compiling

On Unix, type `make` to generate the `fsatrace` executable and the
`fsatrace.so` shared library.

On Windows, you'll need recent 64-bit and 32-bit versions of
`mingw`. You can either adapt the `Makefile` to point to your
compilers or, alternatively, install
https://github.com/commercialhaskell/stack and run the following
sequence to get the required compilers:

stack setup --resolver ghc-8.6.5 --arch=x86_64
stack setup --resolver ghc-8.6.5 --arch=i386
stack exec -- pacman -S make

After that, invoke:

stack exec -- make

That should generate `fsatrace.exe`, `fsatracehelper.exe`,
`fsatrace32.dll` and `fsatrace64.dll`.

## Usage

Make sure the .dll or .so files are in the same path as the `fsatrace`
executable and run:

fsatrace --

Options is a combination of the following characters:

* `v`: print args vector
* `r`: dump read operations
* `w`: dump write operations
* `m`: dump file move operations
* `d`: dump file delete operations
* `q`: dump file stat operations
* `t`: dump touch operations

## macOS usage

In order to use `fsatrace` on systems newer than OS X 10.10, System Integrity Protection must be disabled as detailed in https://developer.apple.com/library/content/documentation/Security/Conceptual/System_Integrity_Protection_Guide/ConfiguringSystemIntegrityProtection/ConfiguringSystemIntegrityProtection.html

Use at your own risk!

## Output format

Newline-separated sequence with the following possibilities: