dtruss
10.12.x (이후 csrutil disable
) 에서 훌륭하게 작동 했지만 10.13에서는 더 이상 작동하지 않는 것으로 나타났습니다. sudo dtruss ls
우리는 다음 과 같은 결과 만 얻습니다.
SYSCALL(args) = return
여기서 무슨 일이 일어나고 있으며 지금 당장 필요한 정보를 얻는 방법에 대한 뉴스가 있습니까?
명확성을 위해 10.12.6은 훨씬 더 나은 결과를 제공합니다.
$ sudo dtruss ls
SYSCALL(args) = return
open("/dev/dtracehelper\0", 0x2, 0x7FFF5D851A20) = 3 0
ioctl(0x3, 0x80086804, 0x7FFF5D8519A8) = 0 0
close(0x3) = 0 0
thread_selfid(0x3, 0x80086804, 0x7FFF5D8519A8) = 13508 0
bsdthread_register(0x7FFFB4F6C080, 0x7FFFB4F6C070, 0x2000) = 1073741919 0
ulock_wake(0x1, 0x7FFF5D85106C, 0x0) = -1 Err#2
issetugid(0x1, 0x7FFF5D85106C, 0x0) = 0 0
mprotect(0x1023B9000, 0x88, 0x1) = 0 0
mprotect(0x1023BB000, 0x1000, 0x0) = 0 0
mprotect(0x1023D1000, 0x1000, 0x0) = 0 0
mprotect(0x1023D2000, 0x1000, 0x0) = 0 0
mprotect(0x1023E8000, 0x1000, 0x0) = 0 0
mprotect(0x1023E9000, 0x1000, 0x1) = 0 0
mprotect(0x1023B9000, 0x88, 0x3) = 0 0
mprotect(0x1023B9000, 0x88, 0x1) = 0 0
getpid(0x1023B9000, 0x88, 0x1) = 2137 0
stat64("/AppleInternal/XBS/.isChrooted\0", 0x7FFF5D850F28, 0x1) = -1 Err#2
stat64("/AppleInternal\0", 0x7FFF5D850FC0, 0x1) = -1 Err#2
csops(0x859, 0x7, 0x7FFF5D850A50) = 0 0
sysctl([CTL_KERN, 14, 1, 2137, 0, 0] (4), 0x7FFF5D850BA8, 0x7FFF5D850BA0, 0x0, 0x0) = 0 0
ulock_wake(0x1, 0x7FFF5D850FD0, 0x0) = -1 Err#2
csops(0x859, 0x7, 0x7FFF5D850330) = 0 0
open_nocancel("/usr/share/locale/en_US.UTF-8/LC_COLLATE\0", 0x0, 0x7) = 3 0
fcntl_nocancel(0x3, 0x3, 0x0) = 0 0
getrlimit(0x1008, 0x7FFF5D851FA8, 0x0) = 0 0
fstat64(0x3, 0x7FFF5D851F68, 0x0) = 0 0
read_nocancel(0x3, "1.1A\n\0", 0x1000) = 2086 0
close_nocancel(0x3) = 0 0
open_nocancel("/usr/share/locale/en_US.UTF-8/LC_CTYPE\0", 0x0, 0x5) = 3 0
fcntl_nocancel(0x3, 0x3, 0x0) = 0 0
fstat64(0x3, 0x7FFF5D8520A8, 0x0) = 0 0
fstat64(0x3, 0x7FFF5D851E98, 0x0) = 0 0
lseek(0x3, 0x0, 0x1) = 0 0
lseek(0x3, 0x0, 0x0) = 0 0
read_nocancel(0x3, "RuneMagAUTF-8\0", 0x1000) = 4096 0
read_nocancel(0x3, "\0", 0x1000) = 4096 0
read_nocancel(0x3, "\0", 0x1000) = 4096 0
read_nocancel(0x3, "\0", 0x1000) = 4096 0
read_nocancel(0x3, "\0", 0x1000) = 4096 0
read_nocancel(0x3, "\0", 0x1000) = 4096 0
read_nocancel(0x3, "@\004\031\0", 0xDE80) = 56960 0
close_nocancel(0x3) = 0 0
open_nocancel("/usr/share/locale/en_US.UTF-8/LC_MONETARY\0", 0x0, 0x8) = 3 0
fstat64(0x3, 0x7FFF5D8520C0, 0x8) = 0 0
read_nocancel(0x3, "USD \n$\n.\n,\n3;3\n\n-\n2\n2\n1\n0\n1\n0\n1\n1\n\b\0", 0x22) = 34 0
close_nocancel(0x3) = 0 0
open_nocancel("/usr/share/locale/en_US.UTF-8/LC_NUMERIC\0", 0x0, 0x7) = 3 0
fstat64(0x3, 0x7FFF5D8520C0, 0x7) = 0 0
read_nocancel(0x3, ".\n,\n3;3\n@$\b\0", 0x8) = 8 0
close_nocancel(0x3) = 0 0
open_nocancel("/usr/share/locale/en_US.UTF-8/LC_TIME\0", 0x0, 0x4) = 3 0
fstat64(0x3, 0x7FFF5D8520C0, 0x4) = 0 0
read_nocancel(0x3, "Jan\nFeb\nMar\nApr\nMay\nJun\nJul\nAug\nSep\nOct\nNov\nDec\nJanuary\nFebruary\nMarch\nApril\nMay\nJune\nJuly\nAugust\nSeptember\nOctober\nNovember\nDecember\nSun\nMon\nTue\nWed\nThu\nFri\nSat\nSunday\nMonday\nTuesday\nWednesday\nThursday\nFriday\nSaturday\n%H:%M:%S\n%m/%d/%Y\n%a %b %e %X %Y\nAM\nP", 0x179) = 377 0
close_nocancel(0x3) = 0 0
open_nocancel("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/LC_MESSAGES\0", 0x0, 0xFFFFFFFFFFFFFFF4) = 3 0
fstat64(0x3, 0x7FFF5D8520C0, 0xFFFFFFFFFFFFFFF4) = 0 0
read_nocancel(0x3, "^[yYsS].*\n^[nN].*\n(\0", 0x12) = 18 0
close_nocancel(0x3) = 0 0
ioctl(0x1, 0x4004667A, 0x7FFF5D8525EC) = 0 0
ioctl(0x1, 0x40087468, 0x7FFF5D852C80) = 0 0
getuid(0x1, 0x40087468, 0x7FFF5D852C80) = 0 0
fstatat64(0xFFFFFFFE, 0x7FB70C402B98, 0x7FFF5D8524F8) = 0 0
open_nocancel(".\0", 0x1000000, 0x0) = 3 0
fchdir(0x3, 0x1000000, 0x0) = 0 0
open_nocancel(".\0", 0x1000000, 0x0) = 4 0
open_nocancel(".\0", 0x1100004, 0x0) = 5 0
getattrlistbulk(0x5, 0x7FFF5D8524B8, 0x7FB70C819E00) = 0 0
close_nocancel(0x5) = 0 0
fchdir(0x4, 0x7FFF5D8524B8, 0x7FB70C819E00) = 0 0
close_nocancel(0x4) = 0 0
open_nocancel(".\0", 0x1100004, 0x3) = 4 0
getattrlistbulk(0x4, 0x7FFF5D8524B8, 0x7FB70C819E00) = 0 0
fstat64(0x4, 0x7FFF5D852350, 0x7FB70C819E00) = 0 0
fchdir(0x4, 0x7FFF5D852350, 0x7FB70C819E00) = 0 0
close_nocancel(0x4) = 0 0
fchdir(0x3, 0x7FFF5D852350, 0x7FB70C819E00) = 0 0
fchdir(0x3, 0x7FFF5D852350, 0x7FB70C819E00) = 0 0
close_nocancel(0x3) = 0 0
ALL 출력을 제공했는지 궁금한 사람은 다음과 같이 6 개의 "testing"파일이있는 "test"라는 폴더에 대한 모든 출력을 다음과 같이 실행합니다 root
.
hostname:test root# dtruss ls
testing testing1 testing2 testing3 testing4 testing5
SYSCALL(args) = return
hostname:test root#
@klanomath 오류 정보가 없습니다. 전혀받지 않으며 처음에 위에서 공유 한 것만받지 않습니다. 나는 10.13.4를 실행하고 다른 10.13.5 베타를 실행하는 두 개의 워크 스테이션에서 이것을 시도했습니다. 루트로 실행하는 동안 ENTIRE 출력을 보여주는 편집 내용을 참조하십시오.
—
ylluminate
sudo dtruss ls
후에이 명령 은 10.13.4에서 작동합니다. 몇 가지 오류 정보를 추가해야합니다 ...