#Run it against a simple ‘ps’ command: strace ps #Send output to a file: strace -o /tmp/strace_ps.log ps #Start the program under control of strace: strace -Ff -tt <program> <arguments> 2>&1 | tee strace-<program>.log #Start strace with the process ID - #(You can get PID of a process by typing pidof <program>): strace -Ff -tt -p <PID> 2>&1 | tee strace-<program>.log #To see only a trace of the #connect, open, close, read, and write system calls, enter: strace -e trace=connect,open,close,read,write df > /tmp/out.txt