29
f6XF
2936462bda8612e290f17231fddca9a658b472680cb661b537b1121d5b3d683b
f6XF
strace
See the interface into the kernel
Traces all “system calls”
Use “ptrace” (you really don’t want to know)
- Same as gdb
Ring0 is kernel space
Ring1 is not used
Ring2 is not used
Ring3 is user space
User space : low address
Kernel space : high address
