HeadlinesBriefing favicon HeadlinesBriefing.com

Sigwire: Linux Signal Monitoring Tool

Hacker News •
×

A new tool called sigwire, developed by yeet-src/sigwire, offers a "tail -f for signals" on Linux systems. It decodes kernel tracepoints to stream live information about every signal raised by any process, including sender, receiver, signal type, and how it was raised (e.g., kill(2), kernel, POSIX timer). The tool also details whether the target process caught the signal, the duration of its handler, and if it interrupted a blocked syscall, marking it with EINTR.

sigwire bypasses the need for tools like strace or ptrace, requiring no cooperation from the processes being monitored. It visualizes signals with sender and target information, colored by severity, and aggregates bursts of identical signals. Users can pause the feed to inspect details like signal disposition, handler address, and blocked signals at the moment of delivery.

The tool provides a quick start installation via a curl command. It hooks into kernel tracepoints, allowing it to monitor all signals on the host simultaneously without processes being aware. The interface allows users to filter signals and inspect individual events, offering a comprehensive view of inter-process communication via signals.