afaics the wall clock time of the call is not implemented. This is effectively useless to me without that.
The second -ff is critical for following busy multiprocess stuff like a JVM.
If you aren't resolving every known struct then -x and -xx can be useful.
The FD resolution provided by -yy is not critical but can be a real time saver.
The flags I use most often are -ffttTyy -o -s
afaics the wall clock time of the call is not implemented. This is effectively useless to me without that.
The second -ff is critical for following busy multiprocess stuff like a JVM.
If you aren't resolving every known struct then -x and -xx can be useful.
The FD resolution provided by -yy is not critical but can be a real time saver.
The flags I use most often are -ffttTyy -o -s