IO-Tracer

How it works

Visit IO Tracer documentations for more detail.

Installation

One-line installation

curl -sSL https://raw.githubusercontent.com/cacheMon/io-tracer/refs/heads/main/install.sh | sudo bash

Manual Installation

1. Clone the repo

git clone https://github.com/cacheMon/io-tracer.git
cd io-tracer

2. Install BCC

# Debian
echo deb [http://cloudfront.debian.net/debian](http://cloudfront.debian.net/debian) sid main >> /etc/apt/sources.list
sudo apt-get install -y bpfcc-tools libbpfcc libbpfcc-dev linux-headers-$(uname -r)

# Ubuntu
sudo apt-get install bpfcc-tools linux-headers-$(uname -r)

# Fedora
sudo dnf install bcc

# Arch
pacman -S bcc bcc-tools python-bcc

For more distros, visit the official BCC's installation guide

3. Finally, install these last two libraries!

# Ubuntu 
sudo apt install python3-psutil
sudo apt install python3-requests
sudo apt install python3-pytest


# ... (adjust the package manager for other distros)

Usage

usage: sudo iotrc [-h] [-v] [-a] [--dev] [--computer-id] [--reward]

Trace IO syscalls

options:
  -h, --help       show this help message and exit
  -v, --verbose    Print verbose output
  -a, --anonimize  Enable anonymization of process and file names
  --dev            Developer mode with extra logs and checks
  --computer-id    Print this machine ID and exit
  --reward         Show your reward code (unlocked after uploading traces)

Trace Types

Internal documentation on trace types and collection methods is available in docs/TRACE_TYPES.md.

Use as a service

We provided a simple bash script that installs and enable IO Traces as a service. Feel free to tinker with it and suit it to your best needs!

Usage: sudo bash ./scripts/install_service.sh {install|uninstall|status|start|stop|restart|logs}

Options:
  install      Install and enable the service
  uninstall    Stop and remove the service
  status       Show service status
  start        Start the service now
  stop         Stop the service
  restart      Restart the service
  logs         View live service logs

Uninstall

Run the uninstaller from your local repo:

sudo bash ~/io-tracer/uninstall.sh

This will:

• Remove the iotrc binary from /usr/local/bin
• Optionally delete the cloned repo at ~/io-tracer (you'll be prompted)