16 comments

[ 2.4 ms ] story [ 38.8 ms ] thread
If this works remotely as well as the Windows version, I'm stoked. Polling for information (like with lsof) really rubs me the wrong way.
does this provide telemetry not available with strace?

And is the output csv/logfile compatible with the windows equivalent? If so, that'd be amazing! tools like procdot can analyze/visualize the data:

https://procdot.com/

This can trace all processes on the host while strace traces one PID and its descendants. And bpf tracing does not stop processes at each syscall, so they run without slowdowns.
Expect Microsoft to come out with more Linux tools. The demand, interest, and requests are likely to only increase.
I remember Steve Ballmer's Microsoft well enough to know to never touch anything Microsoft for Linux.

(All: feel free to downvote my neckbeard comment because I'm obviously in the wrong here)

This feels like a TUI front-end for strace, but I'm not complaining. This I think will come in handy.
This is great but it's kinda sad the INSTALL.md file was updated 2 months ago and it still doesn't work. Won't anyone report these issues?
How is this different from using 'htop' and pressing 's' to strace a process?
strace is not available on macOS
This is not microsofty enough.

I mean it.

I wonder why the project needs both GCC and Clang to build, usually it's one or the other.
I wonder what the goals of this project. Why does it exist?
Requirements OS: Ubuntu 18.04 lts

It's quite limited for an auditing tool...