Package: etrace (1:0.8a25-3)

[ Source: eresi  ]

The Embedded ELF tracer

The ERESI tracer is an embedded tracer which operates directly from within the traced the binary itself. We acheive this modus operandi by using binary module injection and function redirection. A new binary is created where all functions are hooked so we can display the program entering and leaving functions. As the tracer is directly into the traced binary, we gain performance as we don't need to single-step, in comparison with others tracers relying on a kernel interface like its ptrace debugging API. Another major difference is that etrace works on all functions without using a predefined list, as done by most other tracers. Etrace was designed for reverse engineering targets with not only glibc functions, but also a custom function present in your binary or in a specific library.

The main features of the ELF tracer (etrace) are :

 * Command-line tracing on ELF binaries without using ptrace.
 * A logical organization of trace events fully integrated in the scripting
   language.
 * Support debug format information (if available) to display names and types
   of function parameters.
 * Advanced user control over selection of traced functions with regular
   expressions.

Tags: Interface Toolkit: Ncurses TUI

Other Packages Related to etrace

• dep: libasm0

  Disassembling engine provided to the ERESI framework

• dep: libaspect0

  The ERESI aspect library

• dep: libc6 (>= 2.2.5) [amd64]

  Wbudowana biblioteka GNU C: biblioteki współdzielone
  also a virtual package provided by libc6-udeb

  dep: libc6 (>= 2.3.6-6~) [i386]

  dep: libc6 (>= 2.4) [mips, mipsel, powerpc, s390]

  dep: libc6 (>= 2.6) [sparc]

• dep: libc6.1 (>= 2.2) [ia64]

  Wbudowana biblioteka GNU C: biblioteki współdzielone
  also a virtual package provided by libc6.1-udeb

• dep: libedfmt0

  The ERESI debug format library

• dep: libelfsh0

  The ELF shell library

• dep: libetrace0

  The ERESI tracer library

• dep: libmjollnir0

  Flow analysis and fingerprinting component of the ERESI framework

• dep: libncurses5 (>= 5.6+20071006-3) [not mips, mipsel]

  Biblioteki współdzielone przeznaczone do obsługi terminala

  dep: libncurses5 (>= 5.7+20100313) [mips, mipsel]

• dep: libreadline5 (>= 5.2)

  Biblioteki GNU readline i history, wersje uruchomieniowe

• dep: librevm0

  The Reverse Engineering Vector Machine

• dep: libstderesi0

  The ERESI standard library

• dep: libui0

  The ERESI user interface

Download etrace

Download for all available architectures

Architecture	Package Size	Installed Size	Files
amd64	11.6 kB	56.0 kB	[list of files]
i386	11.1 kB	84.0 kB	[list of files]
ia64	13.5 kB	116.0 kB	[list of files]
mips	11.7 kB	92.0 kB	[list of files]
mipsel	11.6 kB	92.0 kB	[list of files]
powerpc	13.9 kB	100.0 kB	[list of files]
s390	13.0 kB	92.0 kB	[list of files]
sparc	11.7 kB	92.0 kB	[list of files]