This paper presents TORNADO, a unique input replay tool based on system call replay. It is capable of tracing program executions with an acceptable overhead of less than a factor 2. It is fully operational for the Linux operating system. The tool requires no instrumentation, recompilation or relinking of the applications. This paper also presents a new technique capable of tracing write operations performed by the OS kernel to user space.