We can do several things with it, such as telling the OS that we want to be traced, that we want to trace another process given a pid , … Among them, the 2 that are going to be really interesting for the implementation of a tracer or debugger are the TRACE_SYSCALL - which notifies the tracer process before and after a system call!!