TracerPid

2025-04-02

TracerPid is a field present in /proc/PID/status that indicates the PID of any debugger or tracer currently attached to the process.

If the value is 0, no process is tracing it. If non-zero, the process is likely traced using ptrace-based utilities such as gdb, strace, or malware.


Links to this note