-.\" $OpenBSD: kdump.1,v 1.5 1999/06/05 01:21:28 aaron Exp $
+.\" $OpenBSD: kdump.1,v 1.6 2000/03/04 15:53:40 aaron Exp $
.\" Copyright (c) 1990, 1993
.\" The Regents of the University of California. All rights reserved.
.\"
.Op Fl m Ar maxdata
.Op Fl t Op cenis
.Sh DESCRIPTION
-.Nm kdump
+.Nm
displays the kernel trace files produced with
.Xr ktrace 1
in human-readable format.
By default, the file
.Pa ktrace.out
-in the current directory is displayed.
+in the current directory is displayed, unless overriden by the
+.Fl f
+option.
.Pp
The options are as follows:
-.Bl -tag -width Fl
+.Bl -tag -width Ds
.It Fl d
Display all numbers in decimal.
+By default, values are printed out in hexadecimal.
.It Fl e Ar emulation
-Interpret system call maps assuming the named emulation instead of "bsd".
+Interpret system call maps assuming the named emulation instead of
+.Qq bsd .
+For example, to view trace output from a Linux binary, use
+.Fl e Ar linux .
.It Fl f Ar file
Display the specified file instead of
.Pa ktrace.out .
.It Fl n
Suppress ad hoc translations.
Normally
-.Nm kdump
+.Nm
tries to decode many system calls into a more human-readable format.
For example,
.Xr ioctl 2
Display relative timestamps (time since previous entry).
.It Fl T
Display absolute timestamps for each entry (seconds since epoch).
-.It Fl t Ar cnis
+.It Fl t Op cenis
See the
.Fl t
option of
.Xr ktrace 1 .
.El
+.Sh FILES
+.Bl -tag -width ktrace.out -compact
+.It Pa ktrace.out
+default ktrace dump file
+.El
.Sh SEE ALSO
.Xr ktrace 1
.Sh HISTORY
The
-.Nm kdump
+.Nm
command appeared in
.Bx 4.4 .
-.\" $OpenBSD: ktrace.1,v 1.7 1999/06/05 01:21:28 aaron Exp $
+.\" $OpenBSD: ktrace.1,v 1.8 2000/03/04 15:53:40 aaron Exp $
.\" Copyright (c) 1990, 1993
.\" The Regents of the University of California. All rights reserved.
.\"
.Sh DESCRIPTION
.Nm ktrace
enables kernel trace logging for the specified processes.
-Kernel trace data is logged to the file
-.Pa ktrace.out .
+By default, kernel trace data is logged to the file
+.Pa ktrace.out ,
+unless overridden by the
+.Fl f
+option.
The kernel operations that are traced include system calls, namei
translations, signal processing, and
.Tn I/O .
Once tracing is enabled on a process, trace data will be logged until
either the process exits or the trace point is cleared.
A traced process can generate enormous amounts of log data quickly;
-It is strongly suggested that users memorize how to disable tracing before
+it is strongly suggested that users memorize how to disable tracing before
attempting to trace a process.
The following command is sufficient to disable tracing on all user owned
processes, and, if executed by root, all processes:
.Pp
# disable tracing of all processes owned by the user
.Dl $ ktrace -C
+.Sh FILES
+.Bl -tag -width ktrace.out -compact
+.It Pa ktrace.out
+default ktrace dump file
+.El
.Sh SEE ALSO
.Xr kdump 1
.Sh HISTORY