Gather an strace for the cbdaemon

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To generate an strace output for the cbdaemon process for troubleshooting purposes. 

Environment

• EDR Sensor: 6.x and higher
• Linux: All Supported Versions

Resolution

1. Get the PID of the cbdaemon process:

# ps -ef | grep cbdaemon

2. Run:

# strace -f -p <PID> -o strace.out

...where <PID> is the PID of the cbdaemon process from step 1

3. Reproduce the issue being observed (if applicable)
4. Press Ctrl-c to cancel after the reproducing the issue

Additional Information

The strace package is required to run these steps.