I'm inspecting a certain make system that runs compilers. I want to track all child processes ever spawned by such a "root" process.
I'm aware there's the
sttace can provide that info. But you may have to parse the output to get just the info you are interested in.
strace -f -e trace=process <executable>
That will trace all child processes of
<executable> and will trace only the process related syscalls (essentially