For a software package, say, a debian .deb
file. After installing it, how do I watch it's local and network activities? For local activities I want to see how its files interact with each other and with other programs in my system. For network activities, I want to see which IP it is trying to communicate and what data it is trying to send and receive.
The ultimate goal is to see if a program modify anything; or send and receive something unexpected.
I wonder why there are not many tools for this purpose? Wireshark seems to be able to handle the network activities part in my question. But it seems to require much of work to get the information.
Am I asking the wrong question, or should I use a different approach. Or it it possible at all?
A a real example, I want to check out this application: http://terashare.net/ before using it.