DTrace on Ubuntu, how-to?

As author of dtrace4linux, let me answer. In essence, dtrace on Linux/MacOS/FreeBSD/Solaris is the same – we are all based on the same source code with the same goals. Because there is no central maintainer, the codes are effectively forks, with Solaris being considered the master. The major source code difference is the glue for … Read more

iosnoop, iotop, opensnoop, execsnoop, opensnoop, dtruss and other dtrace based commands don’t work on osx El capitan, macOS Sierra

iosnoop relies on the dtrace subsystem. from: http://jimtechstuff.blogspot.com/2015/10/dtrace-broken-under-el-capitan.html Dtrace is broken under El Capitan One of the tools that I use quite a lot in debugging is ‘dtrace’ and the various utilities that use it. e.g. open snoop, iotop and a few that I wrote myself. With the GA of El Capitan, any utility that … Read more

Is there a workaround for: “dtrace cannot control executables signed with restricted entitlements”?

Following up to Alexander Ushakov and Charles’ answers: Once you csrutil enable –without dtrace, there is an alternative to copying the binary: run the binary in one Terminal window and trace the Terminal process itself in another Terminal window. In the first terminal window, find its PID: $ echo $$ 1154 In the second terminal … Read more