diff options
| -rw-r--r-- | man/ChangeLog | 12 | ||||
| -rw-r--r-- | man/stapprobes.signal.5.in | 63 | ||||
| -rw-r--r-- | tapset/LKET/Changelog | 37 | ||||
| -rwxr-xr-x | tapset/LKET/hookid_defs.stp | 623 | ||||
| -rwxr-xr-x | tapset/LKET/iosyscall.stp | 2 | ||||
| -rwxr-xr-x | tapset/LKET/nfs.stp | 50 | ||||
| -rwxr-xr-x | tapset/LKET/nfs_proc.stp | 7 | ||||
| -rwxr-xr-x | tapset/LKET/register_event.stp | 767 | ||||
| -rwxr-xr-x | tapset/LKET/signal.stp | 25 |
9 files changed, 958 insertions, 628 deletions
diff --git a/man/ChangeLog b/man/ChangeLog new file mode 100644 index 00000000..240d2125 --- /dev/null +++ b/man/ChangeLog @@ -0,0 +1,12 @@ +2006-10-10 Li Guanglei <guanglei@cn.ibm.com> + + * stapprobes.signal.5.in: document signal syscall + +2006-09-29 Li Guanglei <guanglei@cn.ibm.com> + + * stapprobes.iosched.5.in, stapprobes.netdev.5.in, stapprobes.nfs.5.in, + stapprobes.nfsd.5.in, stapprobes.pagefault.5.in, stapprobes.process.5.in, + stapprobes.rpc.5.in, stapprobes.scsi.5.in, stapprobes.signal.5.in, + stapprobes.tcp.5.in, stapprobes.udp.5.in: Some of these man pages are from + the old stapprobes.5.in. Some are newly created(rpc, nfs, nfsd) + * man/.cvsignore: ignore the generated man page files diff --git a/man/stapprobes.signal.5.in b/man/stapprobes.signal.5.in index 7a1f16ee..15a43045 100644 --- a/man/stapprobes.signal.5.in +++ b/man/stapprobes.signal.5.in @@ -256,6 +256,69 @@ Fires when return from signal.force_segv .P .TP +.B signal.syskill + +Fires when sys_kill is called to send a signal to a process. + +.B Arguments: + +.I pid + pid of the recipient process + +.I sig + the signal to be sent + +.P +.TP +.B signal.syskill.return + +Fires when returning from sys_kill + +.P +.TP +.B signal.tgkill + +Fires when sys_tgkill is called to send a signal to one specific thread + +.B Arguments: + +.I pid + pid of the recipient thread + +.I tgid + thread group id which the target thread should have + +.I sig + the signal to be sent + +.P +.TP +.B signal.tgkill.return + +Fires when returning from sys_tgkill + +.P +.TP +.B signal.tkill + +Fires when sys_tkill is called to send a signal to a single process. + +.B Arguments: + +.I pid + pid of the recipient process + +.I sig + the signal to be sent + +.P +.TP +.B signal.tkill.return + +Fires when returning from sys_tkill + +.P +.TP .B signal.send_sig_queue Fires when queue a signal to a process diff --git a/tapset/LKET/Changelog b/tapset/LKET/Changelog index 4e45b6ca..d0098adc 100644 --- a/tapset/LKET/Changelog +++ b/tapset/LKET/Changelog @@ -1,3 +1,40 @@ +2006-10-10 Li Guanglei <guanglei@cn.ibm.com> + + * hookiddefs.stp: some changes to the hookid: + + Now the hookid of a return type event(addevent.*.return) + should be an even number and its value should be the + corresponding entry event hookid +1. + + The hookid of a non-return type event should be an odd + number. + + Add the hookid of HOOKID_REGEVTDESC + + * register_event.stp: + + add register_evt_desc() to register the description of an event. + + Change the register_sys_event() to add the an argument + representing event description + + Allow to use empty format string and empty field name when + calling register_event(). + + Change all calling to register_sys_event() to add an + argument which represents the event description. + + Change register_evt_desc() and register_event() to add an argument + representing the event description string, which could help + facilitate the error debugging. + + * iosyscall.stp: bugfix to add the variable GroupID and hookID + + * nfs.stp: bugfix to add some omitted probe definitions. + + * nfs_proc.stp: bugfix of the wrong calling to _lket_trace() for + nfs_proc.remove.entry. + 2006-09-26 David Smith <dsmith@redhat.com> * tskdispatch.stp: Changed 'stpd' reference to 'staprun'. diff --git a/tapset/LKET/hookid_defs.stp b/tapset/LKET/hookid_defs.stp index c8896a56..9fc9e6b9 100755 --- a/tapset/LKET/hookid_defs.stp +++ b/tapset/LKET/hookid_defs.stp @@ -3,6 +3,7 @@ global GROUP_REGEVT, HOOKID_REGSYSEVT, HOOKID_REGUSREVT, + HOOKID_REGEVTDESC, /* syscall */ GROUP_SYSCALL, @@ -371,77 +372,63 @@ int _GROUP_NFSD = 17; /* hookIDs defined inside each group */ int _HOOKID_REGSYSEVT = 1; -int _HOOKID_REGUSREVT = 2; +int _HOOKID_REGUSREVT = 3; +int _HOOKID_REGEVTDESC = 5; int _HOOKID_SYSCALL_ENTRY = 1; int _HOOKID_SYSCALL_RETURN = 2; int _HOOKID_PROCESS_SNAPSHOT = 1; -int _HOOKID_PROCESS_EXECVE = 2; -int _HOOKID_PROCESS_FORK = 3; +int _HOOKID_PROCESS_EXECVE = 3; +int _HOOKID_PROCESS_FORK = 5; int _HOOKID_IOSCHED_ADD_REQ = 1; -int _HOOKID_IOSCHED_NEXT_REQ = 2; -int _HOOKID_IOSCHED_COMPLETE_REQ = 3; +int _HOOKID_IOSCHED_NEXT_REQ = 3; +int _HOOKID_IOSCHED_COMPLETE_REQ = 5; int _HOOKID_TASK_CTXSWITCH = 1; -int _HOOKID_TASK_CPUIDLE = 2; +int _HOOKID_TASK_CPUIDLE = 3; int _HOOKID_SCSI_IOENTRY = 1; -int _HOOKID_SCSI_IO_TO_LLD = 2; -int _HOOKID_SCSI_IODONE_BY_LLD = 3; -int _HOOKID_SCSI_IOCOMP_BY_MIDLEVEL = 4; +int _HOOKID_SCSI_IO_TO_LLD = 3; +int _HOOKID_SCSI_IODONE_BY_LLD = 5; +int _HOOKID_SCSI_IOCOMP_BY_MIDLEVEL = 7; int _HOOKID_PAGEFAULT = 1; int _HOOKID_NETDEV_RECEIVE = 1; -int _HOOKID_NETDEV_TRANSMIT = 2; +int _HOOKID_NETDEV_TRANSMIT = 3; int _HOOKID_IOSYSCALL_OPEN_ENTRY = 1; int _HOOKID_IOSYSCALL_OPEN_RETURN = 2; - int _HOOKID_IOSYSCALL_CLOSE_ENTRY = 3; int _HOOKID_IOSYSCALL_CLOSE_RETURN = 4; - int _HOOKID_IOSYSCALL_READ_ENTRY = 5; int _HOOKID_IOSYSCALL_READ_RETURN = 6; - int _HOOKID_IOSYSCALL_WRITE_ENTRY = 7; int _HOOKID_IOSYSCALL_WRITE_RETURN = 8; - int _HOOKID_IOSYSCALL_READV_ENTRY = 9; int _HOOKID_IOSYSCALL_READV_RETURN = 10; - int _HOOKID_IOSYSCALL_WRITEV_ENTRY = 11; int _HOOKID_IOSYSCALL_WRITEV_RETURN = 12; - int _HOOKID_IOSYSCALL_PREAD64_ENTRY = 13; int _HOOKID_IOSYSCALL_PREAD64_RETURN = 14; - int _HOOKID_IOSYSCALL_PWRITE64_ENTRY = 15; int _HOOKID_IOSYSCALL_PWRITE64_RETURN = 16; - int _HOOKID_IOSYSCALL_READAHEAD_ENTRY = 17; int _HOOKID_IOSYSCALL_READAHEAD_RETURN = 18; - int _HOOKID_IOSYSCALL_SENDFILE_ENTRY = 19; int _HOOKID_IOSYSCALL_SENDFILE_RETURN = 20; - int _HOOKID_IOSYSCALL_LSEEK_ENTRY = 21; int _HOOKID_IOSYSCALL_LSEEK_RETURN = 22; - int _HOOKID_IOSYSCALL_LLSEEK_ENTRY = 23; int _HOOKID_IOSYSCALL_LLSEEK_RETURN = 24; - int _HOOKID_IOSYSCALL_SYNC_ENTRY = 25; int _HOOKID_IOSYSCALL_SYNC_RETURN = 26; - int _HOOKID_IOSYSCALL_FSYNC_ENTRY = 27; int _HOOKID_IOSYSCALL_FSYNC_RETURN = 28; - int _HOOKID_IOSYSCALL_FDATASYNC_ENTRY = 29; int _HOOKID_IOSYSCALL_FDATASYNC_RETURN = 30; - int _HOOKID_IOSYSCALL_FLOCK_ENTRY = 31; int _HOOKID_IOSYSCALL_FLOCK_RETURN = 32; @@ -515,6 +502,7 @@ int _HOOKID_SUNRPC_SCHED_DELAY_RETURN = 70; int _HOOKID_SUNRPC_SCHED_RELEASE_TASK_ENTRY = 71; int _HOOKID_SUNRPC_SCHED_RELEASE_TASK_RETURN = 72; + int _HOOKID_SWITCH_CPUFREQ = 1; int _HOOKID_NFS_FOP_LLSEEK_ENTRY= 1; @@ -543,7 +531,6 @@ int _HOOKID_NFS_FOP_SENDFILE_ENTRY= 23; int _HOOKID_NFS_FOP_SENDFILE_RETURN= 24; int _HOOKID_NFS_FOP_CHECKFLAGS_ENTRY= 25; int _HOOKID_NFS_FOP_CHECKFLAGS_RETURN= 26; - int _HOOKID_NFS_AOP_READPAGE_ENTRY= 27; int _HOOKID_NFS_AOP_READPAGE_RETURN= 28; int _HOOKID_NFS_AOP_READPAGES_ENTRY= 29; @@ -560,7 +547,6 @@ int _HOOKID_NFS_AOP_PREPAREWRITE_ENTRY= 39; int _HOOKID_NFS_AOP_PREPAREWRITE_RETURN= 40; int _HOOKID_NFS_AOP_COMMITWRITE_ENTRY= 41; int _HOOKID_NFS_AOP_COMMITWRITE_RETURN= 42; - int _HOOKID_NFS_PROC_LOOKUP_ENTRY = 43; int _HOOKID_NFS_PROC_LOOKUP_RETURN= 44; int _HOOKID_NFS_PROC_READ_ENTRY= 45; @@ -569,25 +555,27 @@ int _HOOKID_NFS_PROC_WRITE_ENTRY= 47; int _HOOKID_NFS_PROC_WRITE_RETURN= 48; int _HOOKID_NFS_PROC_COMMIT_ENTRY= 49; int _HOOKID_NFS_PROC_COMMIT_RETURN= 50; + int _HOOKID_NFS_PROC_READSETUP_ENTRY= 51; -int _HOOKID_NFS_PROC_WRITESETUP_ENTRY= 52; -int _HOOKID_NFS_PROC_COMMITSETUP_ENTRY= 53; -int _HOOKID_NFS_PROC_READDONE_ENTRY= 54; -int _HOOKID_NFS_PROC_READDONE_RETURN= 55; -int _HOOKID_NFS_PROC_WRITEDONE_ENTRY= 56; -int _HOOKID_NFS_PROC_WRITEDONE_RETURN= 57; -int _HOOKID_NFS_PROC_COMMITDONE_ENTRY= 58; -int _HOOKID_NFS_PROC_COMMITDONE_RETURN= 59; -int _HOOKID_NFS_PROC_OPEN_ENTRY= 60; -int _HOOKID_NFS_PROC_OPEN_RETURN= 61; -int _HOOKID_NFS_PROC_RELEASE_ENTRY= 62; -int _HOOKID_NFS_PROC_RELEASE_RETURN= 63; -int _HOOKID_NFS_PROC_CREATE_ENTRY= 64; -int _HOOKID_NFS_PROC_CREATE_RETURN= 65; -int _HOOKID_NFS_PROC_RENAME_ENTRY= 66; -int _HOOKID_NFS_PROC_RENAME_RETURN= 67; -int _HOOKID_NFS_PROC_REMOVE_ENTRY= 68; -int _HOOKID_NFS_PROC_REMOVE_RETURN= 69; +int _HOOKID_NFS_PROC_WRITESETUP_ENTRY= 53; +int _HOOKID_NFS_PROC_COMMITSETUP_ENTRY= 55; + +int _HOOKID_NFS_PROC_READDONE_ENTRY= 57; +int _HOOKID_NFS_PROC_READDONE_RETURN= 58; +int _HOOKID_NFS_PROC_WRITEDONE_ENTRY= 59; +int _HOOKID_NFS_PROC_WRITEDONE_RETURN= 60; +int _HOOKID_NFS_PROC_COMMITDONE_ENTRY= 61; +int _HOOKID_NFS_PROC_COMMITDONE_RETURN= 62; +int _HOOKID_NFS_PROC_OPEN_ENTRY= 63; +int _HOOKID_NFS_PROC_OPEN_RETURN= 64; +int _HOOKID_NFS_PROC_RELEASE_ENTRY= 65; +int _HOOKID_NFS_PROC_RELEASE_RETURN= 66; +int _HOOKID_NFS_PROC_CREATE_ENTRY= 67; +int _HOOKID_NFS_PROC_CREATE_RETURN= 68; +int _HOOKID_NFS_PROC_RENAME_ENTRY= 69; +int _HOOKID_NFS_PROC_RENAME_RETURN= 70; +int _HOOKID_NFS_PROC_REMOVE_ENTRY= 71; +int _HOOKID_NFS_PROC_REMOVE_RETURN= 72; int _HOOKID_NFSD_DISPATCH_ENTRY= 1; int _HOOKID_NFSD_DISPATCH_RETURN= 2; @@ -631,291 +619,268 @@ int _HOOKID_NFSD_PROC_CREATE_RETURN= 38; function hookid_init() { - GROUP_REGEVT = 1 - HOOKID_REGSYSEVT = 1 - HOOKID_REGUSREVT = 2 - - GROUP_SYSCALL = 2 - HOOKID_SYSCALL_ENTRY = 1 - HOOKID_SYSCALL_RETURN = 2 - - GROUP_PROCESS = 3 - HOOKID_PROCESS_SNAPSHOT = 1 - HOOKID_PROCESS_EXECVE = 2 - HOOKID_PROCESS_FORK = 3 - - GROUP_IOSCHED = 4 - HOOKID_IOSCHED_ADD_REQ = 1 - HOOKID_IOSCHED_NEXT_REQ = 2 - HOOKID_IOSCHED_COMPLETE_REQ = 3 - - GROUP_TASK = 5 - HOOKID_TASK_CTXSWITCH = 1 - HOOKID_TASK_CPUIDLE = 2 - - GROUP_SCSI = 6 - HOOKID_SCSI_IOENTRY = 1 - HOOKID_SCSI_IO_TO_LLD = 2 - HOOKID_SCSI_IODONE_BY_LLD = 3 - HOOKID_SCSI_IOCOMP_BY_MIDLEVEL = 4 - - GROUP_PAGEFAULT = 7 - HOOKID_PAGEFAULT = 1 - - GROUP_NETDEV = 8 - HOOKID_NETDEV_RECEIVE = 1 - HOOKID_NETDEV_TRANSMIT = 2 - - GROUP_IOSYSCALL = 9 - - HOOKID_IOSYSCALL_OPEN_ENTRY = 1 - HOOKID_IOSYSCALL_OPEN_RETURN = 2 - - HOOKID_IOSYSCALL_CLOSE_ENTRY = 3 - HOOKID_IOSYSCALL_CLOSE_RETURN = 4 - - HOOKID_IOSYSCALL_READ_ENTRY = 5 - HOOKID_IOSYSCALL_READ_RETURN = 6 +/* Group ID Definitions */ +GROUP_REGEVT = 1; +GROUP_SYSCALL = 2; +GROUP_PROCESS = 3; +GROUP_IOSCHED = 4; +GROUP_TASK = 5; +GROUP_SCSI = 6; +GROUP_PAGEFAULT = 7; +GROUP_NETDEV = 8; +GROUP_IOSYSCALL = 9; +GROUP_AIO = 10; +GROUP_SIGNAL = 11; +GROUP_SUNRPC = 12; +GROUP_CPUFREQ = 15; +GROUP_NFS = 16; +GROUP_NFSD = 17; - HOOKID_IOSYSCALL_WRITE_ENTRY = 7 - HOOKID_IOSYSCALL_WRITE_RETURN = 8 - - HOOKID_IOSYSCALL_READV_ENTRY = 9 - HOOKID_IOSYSCALL_READV_RETURN = 10 - - HOOKID_IOSYSCALL_WRITEV_ENTRY = 11 - HOOKID_IOSYSCALL_WRITEV_RETURN = 12 - - HOOKID_IOSYSCALL_PREAD64_ENTRY = 13 - HOOKID_IOSYSCALL_PREAD64_RETURN = 14 - - HOOKID_IOSYSCALL_PWRITE64_ENTRY = 15 - HOOKID_IOSYSCALL_PWRITE64_RETURN = 16 - - HOOKID_IOSYSCALL_READAHEAD_ENTRY = 17 - HOOKID_IOSYSCALL_READAHEAD_RETURN = 18 - - HOOKID_IOSYSCALL_SENDFILE_ENTRY = 19 - HOOKID_IOSYSCALL_SENDFILE_RETURN = 20 - - HOOKID_IOSYSCALL_LSEEK_ENTRY = 21 - HOOKID_IOSYSCALL_LSEEK_RETURN = 22 - - HOOKID_IOSYSCALL_LLSEEK_ENTRY = 23 - HOOKID_IOSYSCALL_LLSEEK_RETURN = 24 - - HOOKID_IOSYSCALL_SYNC_ENTRY = 25 - HOOKID_IOSYSCALL_SYNC_RETURN = 26 - - HOOKID_IOSYSCALL_FSYNC_ENTRY = 27 - HOOKID_IOSYSCALL_FSYNC_RETURN = 28 - - HOOKID_IOSYSCALL_FDATASYNC_ENTRY = 29 - HOOKID_IOSYSCALL_FDATASYNC_RETURN = 30 - - HOOKID_IOSYSCALL_FLOCK_ENTRY = 31 - HOOKID_IOSYSCALL_FLOCK_RETURN = 32 - - GROUP_AIO = 10 - - HOOKID_AIO_IO_SETUP_ENTRY = 1 - HOOKID_AIO_IO_SETUP_RETURN = 2 - - HOOKID_AIO_IO_SUBMIT_ENTRY = 3 - HOOKID_AIO_IO_SUBMIT_RETURN = 4 - - HOOKID_AIO_IO_SUBMIT_ONE_ENTRY = 5 - HOOKID_AIO_IO_SUBMIT_ONE_RETURN = 6 - - HOOKID_AIO_IO_GETEVENTS_ENTRY = 7 - HOOKID_AIO_IO_GETEVENTS_RETURN = 8 - - HOOKID_AIO_IO_DESTROY_ENTRY = 9 - HOOKID_AIO_IO_DESTROY_RETURN = 10 - - HOOKID_AIO_IO_CANCEL_ENTRY = 11 - HOOKID_AIO_IO_CANCEL_RETURN = 12 - - GROUP_SIGNAL = 11 - - HOOKID_SIGNAL_SEND_ENTRY = 1 - HOOKID_SIGNAL_SEND_RETURN = 2 - HOOKID_SIGNAL_SYSKILL_ENTRY = 3 - HOOKID_SIGNAL_SYSKILL_RETURN = 4 - HOOKID_SIGNAL_SYSTGKILL_ENTRY = 5 - HOOKID_SIGNAL_SYSTGKILL_RETURN = 6 - HOOKID_SIGNAL_SYSTKILL_ENTRY = 7 - HOOKID_SIGNAL_SYSTKILL_RETURN = 8 - HOOKID_SIGNAL_PENDING_ENTRY = 9 - HOOKID_SIGNAL_PENDING_RETURN = 10 - HOOKID_SIGNAL_DOACTION_ENTRY = 11 - HOOKID_SIGNAL_DOACTION_RETURN = 12 - HOOKID_SIGNAL_PROC_MASK_ENTRY = 13 - HOOKID_SIGNAL_PROC_MASK_RETURN = 14 - HOOKID_SIGNAL_FLUSH_ENTRY = 15 - - GROUP_SUNRPC = 12 - - HOOKID_SUNRPC_CLNT_CREATE_CLIENT_ENTRY = 1 - HOOKID_SUNRPC_CLNT_CREATE_CLIENT_RETURN = 2 - HOOKID_SUNRPC_CLNT_CLONE_CLIENT_ENTRY = 3 - HOOKID_SUNRPC_CLNT_CLONE_CLIENT_RETURN = 4 - HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_ENTRY = 5 - HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_RETURN = 6 - HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_ENTRY = 7 - HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_RETURN = 8 - HOOKID_SUNRPC_CLNT_CALL_SYNC_ENTRY = 9 - HOOKID_SUNRPC_CLNT_CALL_SYNC_RETURN = 10 - HOOKID_SUNRPC_CLNT_CALL_ASYNC_ENTRY = 11 - HOOKID_SUNRPC_CLNT_CALL_ASYNC_RETURN = 12 - HOOKID_SUNRPC_CLNT_RESTART_CALL_ENTRY = 13 - HOOKID_SUNRPC_CLNT_RESTART_CALL_RETURN = 14 - - HOOKID_SUNRPC_SVC_REGISTER_ENTRY = 33 - HOOKID_SUNRPC_SVC_REGISTER_RETURN = 34 - HOOKID_SUNRPC_SVC_CREATE_ENTRY = 35 - HOOKID_SUNRPC_SVC_CREATE_RETURN = 36 - HOOKID_SUNRPC_SVC_DESTROY_ENTRY = 37 - HOOKID_SUNRPC_SVC_DESTROY_RETURN = 38 - HOOKID_SUNRPC_SVC_PROCESS_ENTRY = 39 - HOOKID_SUNRPC_SVC_PROCESS_RETURN = 40 - HOOKID_SUNRPC_SVC_AUTHORISE_ENTRY = 41 - HOOKID_SUNRPC_SVC_AUTHORISE_RETURN = 42 - HOOKID_SUNRPC_SVC_RECV_ENTRY = 43 - HOOKID_SUNRPC_SVC_RECV_RETURN = 44 - HOOKID_SUNRPC_SVC_SEND_ENTRY = 45 - HOOKID_SUNRPC_SVC_SEND_RETURN = 46 - HOOKID_SUNRPC_SVC_DROP_ENTRY = 47 - HOOKID_SUNRPC_SVC_DROP_RETURN = 48 - - HOOKID_SUNRPC_SCHED_NEW_TASK_ENTRY = 65 - HOOKID_SUNRPC_SCHED_NEW_TASK_RETURN = 66 - HOOKID_SUNRPC_SCHED_EXECUTE_ENTRY = 67 - HOOKID_SUNRPC_SCHED_EXECUTE_RETURN = 68 - HOOKID_SUNRPC_SCHED_DELAY_ENTRY = 69 - HOOKID_SUNRPC_SCHED_DELAY_RETURN = 70 - HOOKID_SUNRPC_SCHED_RELEASE_TASK_ENTRY = 71 - HOOKID_SUNRPC_SCHED_RELEASE_TASK_RETURN = 72 - - GROUP_CPUFREQ = 15 - - HOOKID_SWITCH_CPUFREQ = 2 - - GROUP_NFS = 16 - - HOOKID_NFS_FOP_LLSEEK_ENTRY= 1 - HOOKID_NFS_FOP_LLSEEK_RETURN= 2 - HOOKID_NFS_FOP_READ_ENTRY= 3 - HOOKID_NFS_FOP_READ_RETURN= 4 - HOOKID_NFS_FOP_WRITE_ENTRY= 5 - HOOKID_NFS_FOP_WRITE_RETURN= 6 - HOOKID_NFS_FOP_AIOREAD_ENTRY= 7 - HOOKID_NFS_FOP_AIOREAD_RETURN= 8 - HOOKID_NFS_FOP_AIOWRITE_ENTRY= 9 - HOOKID_NFS_FOP_AIOWRITE_RETURN= 10 - HOOKID_NFS_FOP_MMAP_ENTRY= 11 - HOOKID_NFS_FOP_MMAP_RETURN= 12 - HOOKID_NFS_FOP_OPEN_ENTRY= 13 - HOOKID_NFS_FOP_OPEN_RETURN= 14 - HOOKID_NFS_FOP_FLUSH_ENTRY= 15 - HOOKID_NFS_FOP_FLUSH_RETURN= 16 - HOOKID_NFS_FOP_RELEASE_ENTRY= 17 - HOOKID_NFS_FOP_RELEASE_RETURN= 18 - HOOKID_NFS_FOP_FSYNC_ENTRY= 19 - HOOKID_NFS_FOP_FSYNC_RETURN= 20 - HOOKID_NFS_FOP_LOCK_ENTRY= 21 - HOOKID_NFS_FOP_LOCK_RETURN= 22 - HOOKID_NFS_FOP_SENDFILE_ENTRY= 23 - HOOKID_NFS_FOP_SENDFILE_RETURN= 24 - HOOKID_NFS_FOP_CHECKFLAGS_ENTRY= 25 - HOOKID_NFS_FOP_CHECKFLAGS_RETURN= 26 - - HOOKID_NFS_AOP_READPAGE_ENTRY= 27 - HOOKID_NFS_AOP_READPAGE_RETURN= 28 - HOOKID_NFS_AOP_READPAGES_ENTRY= 29 - HOOKID_NFS_AOP_READPAGES_RETURN= 30 - HOOKID_NFS_AOP_WRITEPAGE_ENTRY= 31 - HOOKID_NFS_AOP_WRITEPAGE_RETURN= 32 - HOOKID_NFS_AOP_WRITEPAGES_ENTRY= 33 - HOOKID_NFS_AOP_WRITEPAGES_RETURN= 34 - HOOKID_NFS_AOP_RELEASEPAGE_ENTRY= 35 - HOOKID_NFS_AOP_RELEASEPAGE_RETURN= 36 - HOOKID_NFS_AOP_SETPAGEDIRTY_ENTRY= 37 - HOOKID_NFS_AOP_SETPAGEDIRTY_RETURN= 38 - HOOKID_NFS_AOP_PREPAREWRITE_ENTRY= 39 - HOOKID_NFS_AOP_PREPAREWRITE_RETURN= 40 - HOOKID_NFS_AOP_COMMITWRITE_ENTRY= 41 - HOOKID_NFS_AOP_COMMITWRITE_RETURN= 42 - - HOOKID_NFS_PROC_LOOKUP_ENTRY = 43 - HOOKID_NFS_PROC_LOOKUP_RETURN= 44 - HOOKID_NFS_PROC_READ_ENTRY= 45 - HOOKID_NFS_PROC_READ_RETURN= 46 - HOOKID_NFS_PROC_WRITE_ENTRY= 47 - HOOKID_NFS_PROC_WRITE_RETURN= 48 - HOOKID_NFS_PROC_COMMIT_ENTRY= 49 - HOOKID_NFS_PROC_COMMIT_RETURN= 50 - HOOKID_NFS_PROC_READSETUP_ENTRY= 51 - HOOKID_NFS_PROC_WRITESETUP_ENTRY= 52 - HOOKID_NFS_PROC_COMMITSETUP_ENTRY= 53 - HOOKID_NFS_PROC_READDONE_ENTRY= 54 - HOOKID_NFS_PROC_READDONE_RETURN= 55 - HOOKID_NFS_PROC_WRITEDONE_ENTRY= 56 - HOOKID_NFS_PROC_WRITEDONE_RETURN= 57 - HOOKID_NFS_PROC_COMMITDONE_ENTRY= 58 - HOOKID_NFS_PROC_COMMITDONE_RETURN= 59 - HOOKID_NFS_PROC_OPEN_ENTRY= 60 - HOOKID_NFS_PROC_OPEN_RETURN= 61 - HOOKID_NFS_PROC_RELEASE_ENTRY= 62 - HOOKID_NFS_PROC_RELEASE_RETURN= 63 - HOOKID_NFS_PROC_CREATE_ENTRY= 64 - HOOKID_NFS_PROC_CREATE_RETURN= 65 - HOOKID_NFS_PROC_RENAME_ENTRY= 66 - HOOKID_NFS_PROC_RENAME_RETURN= 67 - HOOKID_NFS_PROC_REMOVE_ENTRY= 68 - HOOKID_NFS_PROC_REMOVE_RETURN= 69 - - GROUP_NFSD = 17 - - HOOKID_NFSD_DISPATCH_ENTRY= 1 - HOOKID_NFSD_DISPATCH_RETURN= 2 - HOOKID_NFSD_OPEN_ENTRY= 3 - HOOKID_NFSD_OPEN_RETURN= 4 - HOOKID_NFSD_READ_ENTRY= 5 - HOOKID_NFSD_READ_RETURN= 6 - HOOKID_NFSD_WRITE_ENTRY= 7 - HOOKID_NFSD_WRITE_RETURN= 8 - HOOKID_NFSD_LOOKUP_ENTRY= 9 - HOOKID_NFSD_LOOKUP_RETURN= 10 - HOOKID_NFSD_COMMIT_ENTRY= 11 - HOOKID_NFSD_COMMIT_RETURN= 12 - HOOKID_NFSD_CREATE_ENTRY= 13 - HOOKID_NFSD_CREATE_RETURN= 14 - HOOKID_NFSD_CREATEV3_ENTRY= 15 - HOOKID_NFSD_CREATEV3_RETURN= 16 - HOOKID_NFSD_UNLINK_ENTRY= 17 - HOOKID_NFSD_UNLINK_RETURN= 18 - HOOKID_NFSD_RENAME_ENTRY= 19 - HOOKID_NFSD_RENAME_RETURN= 20 - HOOKID_NFSD_CLOSE_ENTRY= 21 - HOOKID_NFSD_CLOSE_RETURN = 22 - - HOOKID_NFSD_PROC_LOOKUP_ENTRY = 23 - HOOKID_NFSD_PROC_LOOKUP_RETURN= 24 - HOOKID_NFSD_PROC_READ_ENTRY= 25 - HOOKID_NFSD_PROC_READ_RETURN= 26 - HOOKID_NFSD_PROC_WRITE_ENTRY= 27 - HOOKID_NFSD_PROC_WRITE_RETURN= 28 - HOOKID_NFSD_PROC_COMMIT_ENTRY= 29 - HOOKID_NFSD_PROC_COMMIT_RETURN= 30 - HOOKID_NFSD_PROC_COMPOUND_ENTRY= 31 - HOOKID_NFSD_PROC_COMPOUND_RETURN= 32 - HOOKID_NFSD_PROC_REMOVE_ENTRY= 33 - HOOKID_NFSD_PROC_REMOVE_RETURN= 34 - HOOKID_NFSD_PROC_RENAME_ENTRY= 35 - HOOKID_NFSD_PROC_RENAME_RETURN= 36 - HOOKID_NFSD_PROC_CREATE_ENTRY= 37 - HOOKID_NFSD_PROC_CREATE_RETURN= 38 +/* hookIDs defined inside each group */ +HOOKID_REGSYSEVT = 1; +HOOKID_REGUSREVT = 3; +HOOKID_REGEVTDESC = 5; + +HOOKID_SYSCALL_ENTRY = 1; +HOOKID_SYSCALL_RETURN = 2; + +HOOKID_PROCESS_SNAPSHOT = 1; +HOOKID_PROCESS_EXECVE = 3; +HOOKID_PROCESS_FORK = 5; + +HOOKID_IOSCHED_ADD_REQ = 1; +HOOKID_IOSCHED_NEXT_REQ = 3; +HOOKID_IOSCHED_COMPLETE_REQ = 5; + +HOOKID_TASK_CTXSWITCH = 1; +HOOKID_TASK_CPUIDLE = 3; + +HOOKID_SCSI_IOENTRY = 1; +HOOKID_SCSI_IO_TO_LLD = 3; +HOOKID_SCSI_IODONE_BY_LLD = 5; +HOOKID_SCSI_IOCOMP_BY_MIDLEVEL = 7; + +HOOKID_PAGEFAULT = 1; + +HOOKID_NETDEV_RECEIVE = 1; +HOOKID_NETDEV_TRANSMIT = 3; + +HOOKID_IOSYSCALL_OPEN_ENTRY = 1; +HOOKID_IOSYSCALL_OPEN_RETURN = 2; +HOOKID_IOSYSCALL_CLOSE_ENTRY = 3; +HOOKID_IOSYSCALL_CLOSE_RETURN = 4; +HOOKID_IOSYSCALL_READ_ENTRY = 5; +HOOKID_IOSYSCALL_READ_RETURN = 6; +HOOKID_IOSYSCALL_WRITE_ENTRY = 7; +HOOKID_IOSYSCALL_WRITE_RETURN = 8; +HOOKID_IOSYSCALL_READV_ENTRY = 9; +HOOKID_IOSYSCALL_READV_RETURN = 10; +HOOKID_IOSYSCALL_WRITEV_ENTRY = 11; +HOOKID_IOSYSCALL_WRITEV_RETURN = 12; +HOOKID_IOSYSCALL_PREAD64_ENTRY = 13; +HOOKID_IOSYSCALL_PREAD64_RETURN = 14; +HOOKID_IOSYSCALL_PWRITE64_ENTRY = 15; +HOOKID_IOSYSCALL_PWRITE64_RETURN = 16; +HOOKID_IOSYSCALL_READAHEAD_ENTRY = 17; +HOOKID_IOSYSCALL_READAHEAD_RETURN = 18; +HOOKID_IOSYSCALL_SENDFILE_ENTRY = 19; +HOOKID_IOSYSCALL_SENDFILE_RETURN = 20; +HOOKID_IOSYSCALL_LSEEK_ENTRY = 21; +HOOKID_IOSYSCALL_LSEEK_RETURN = 22; +HOOKID_IOSYSCALL_LLSEEK_ENTRY = 23; +HOOKID_IOSYSCALL_LLSEEK_RETURN = 24; +HOOKID_IOSYSCALL_SYNC_ENTRY = 25; +HOOKID_IOSYSCALL_SYNC_RETURN = 26; +HOOKID_IOSYSCALL_FSYNC_ENTRY = 27; +HOOKID_IOSYSCALL_FSYNC_RETURN = 28; +HOOKID_IOSYSCALL_FDATASYNC_ENTRY = 29; +HOOKID_IOSYSCALL_FDATASYNC_RETURN = 30; +HOOKID_IOSYSCALL_FLOCK_ENTRY = 31; +HOOKID_IOSYSCALL_FLOCK_RETURN = 32; + +HOOKID_AIO_IO_SETUP_ENTRY = 1; +HOOKID_AIO_IO_SETUP_RETURN = 2; +HOOKID_AIO_IO_SUBMIT_ENTRY = 3; +HOOKID_AIO_IO_SUBMIT_RETURN = 4; +HOOKID_AIO_IO_SUBMIT_ONE_ENTRY = 5; +HOOKID_AIO_IO_SUBMIT_ONE_RETURN = 6; +HOOKID_AIO_IO_GETEVENTS_ENTRY = 7; +HOOKID_AIO_IO_GETEVENTS_RETURN = 8; +HOOKID_AIO_IO_DESTROY_ENTRY = 9; +HOOKID_AIO_IO_DESTROY_RETURN = 10; +HOOKID_AIO_IO_CANCEL_ENTRY = 11; +HOOKID_AIO_IO_CANCEL_RETURN = 12; + +HOOKID_SIGNAL_SEND_ENTRY = 1; +HOOKID_SIGNAL_SEND_RETURN = 2; +HOOKID_SIGNAL_SYSKILL_ENTRY = 3; +HOOKID_SIGNAL_SYSKILL_RETURN = 4; +HOOKID_SIGNAL_SYSTGKILL_ENTRY= 5; +HOOKID_SIGNAL_SYSTGKILL_RETURN = 6; +HOOKID_SIGNAL_SYSTKILL_ENTRY = 7; +HOOKID_SIGNAL_SYSTKILL_RETURN = 8; +HOOKID_SIGNAL_PENDING_ENTRY = 9; +HOOKID_SIGNAL_PENDING_RETURN = 10; +HOOKID_SIGNAL_DOACTION_ENTRY = 11; +HOOKID_SIGNAL_DOACTION_RETURN = 12; +HOOKID_SIGNAL_PROC_MASK_ENTRY = 13; +HOOKID_SIGNAL_PROC_MASK_RETURN = 14; +HOOKID_SIGNAL_FLUSH_ENTRY = 15; + +HOOKID_SUNRPC_CLNT_CREATE_CLIENT_ENTRY = 1; +HOOKID_SUNRPC_CLNT_CREATE_CLIENT_RETURN = 2; +HOOKID_SUNRPC_CLNT_CLONE_CLIENT_ENTRY = 3; +HOOKID_SUNRPC_CLNT_CLONE_CLIENT_RETURN = 4; +HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_ENTRY = 5; +HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_RETURN = 6; +HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_ENTRY = 7; +HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_RETURN = 8; +HOOKID_SUNRPC_CLNT_CALL_SYNC_ENTRY = 9; +HOOKID_SUNRPC_CLNT_CALL_SYNC_RETURN = 10; +HOOKID_SUNRPC_CLNT_CALL_ASYNC_ENTRY = 11; +HOOKID_SUNRPC_CLNT_CALL_ASYNC_RETURN = 12; +HOOKID_SUNRPC_CLNT_RESTART_CALL_ENTRY = 13; +HOOKID_SUNRPC_CLNT_RESTART_CALL_RETURN = 14; + +HOOKID_SUNRPC_SVC_REGISTER_ENTRY = 33; +HOOKID_SUNRPC_SVC_REGISTER_RETURN = 34; +HOOKID_SUNRPC_SVC_CREATE_ENTRY = 35; +HOOKID_SUNRPC_SVC_CREATE_RETURN = 36; +HOOKID_SUNRPC_SVC_DESTROY_ENTRY = 37; +HOOKID_SUNRPC_SVC_DESTROY_RETURN = 38; +HOOKID_SUNRPC_SVC_PROCESS_ENTRY = 39; +HOOKID_SUNRPC_SVC_PROCESS_RETURN = 40; +HOOKID_SUNRPC_SVC_AUTHORISE_ENTRY = 41; +HOOKID_SUNRPC_SVC_AUTHORISE_RETURN = 42; +HOOKID_SUNRPC_SVC_RECV_ENTRY = 43; +HOOKID_SUNRPC_SVC_RECV_RETURN = 44; +HOOKID_SUNRPC_SVC_SEND_ENTRY = 45; +HOOKID_SUNRPC_SVC_SEND_RETURN = 46; +HOOKID_SUNRPC_SVC_DROP_ENTRY = 47; +HOOKID_SUNRPC_SVC_DROP_RETURN = 48; + +HOOKID_SUNRPC_SCHED_NEW_TASK_ENTRY = 65; +HOOKID_SUNRPC_SCHED_NEW_TASK_RETURN = 66; +HOOKID_SUNRPC_SCHED_EXECUTE_ENTRY = 67; +HOOKID_SUNRPC_SCHED_EXECUTE_RETURN = 68; +HOOKID_SUNRPC_SCHED_DELAY_ENTRY = 69; +HOOKID_SUNRPC_SCHED_DELAY_RETURN = 70; +HOOKID_SUNRPC_SCHED_RELEASE_TASK_ENTRY = 71; +HOOKID_SUNRPC_SCHED_RELEASE_TASK_RETURN = 72; + + +HOOKID_SWITCH_CPUFREQ = 1; + +HOOKID_NFS_FOP_LLSEEK_ENTRY= 1; +HOOKID_NFS_FOP_LLSEEK_RETURN= 2; +HOOKID_NFS_FOP_READ_ENTRY= 3; +HOOKID_NFS_FOP_READ_RETURN= 4; +HOOKID_NFS_FOP_WRITE_ENTRY= 5; +HOOKID_NFS_FOP_WRITE_RETURN= 6; +HOOKID_NFS_FOP_AIOREAD_ENTRY= 7; +HOOKID_NFS_FOP_AIOREAD_RETURN= 8; +HOOKID_NFS_FOP_AIOWRITE_ENTRY= 9; +HOOKID_NFS_FOP_AIOWRITE_RETURN= 10; +HOOKID_NFS_FOP_MMAP_ENTRY= 11; +HOOKID_NFS_FOP_MMAP_RETURN= 12; +HOOKID_NFS_FOP_OPEN_ENTRY= 13; +HOOKID_NFS_FOP_OPEN_RETURN= 14; +HOOKID_NFS_FOP_FLUSH_ENTRY= 15; +HOOKID_NFS_FOP_FLUSH_RETURN= 16; +HOOKID_NFS_FOP_RELEASE_ENTRY= 17; +HOOKID_NFS_FOP_RELEASE_RETURN= 18; +HOOKID_NFS_FOP_FSYNC_ENTRY= 19; +HOOKID_NFS_FOP_FSYNC_RETURN= 20; +HOOKID_NFS_FOP_LOCK_ENTRY= 21; +HOOKID_NFS_FOP_LOCK_RETURN= 22; +HOOKID_NFS_FOP_SENDFILE_ENTRY= 23; +HOOKID_NFS_FOP_SENDFILE_RETURN= 24; +HOOKID_NFS_FOP_CHECKFLAGS_ENTRY= 25; +HOOKID_NFS_FOP_CHECKFLAGS_RETURN= 26; +HOOKID_NFS_AOP_READPAGE_ENTRY= 27; +HOOKID_NFS_AOP_READPAGE_RETURN= 28; +HOOKID_NFS_AOP_READPAGES_ENTRY= 29; +HOOKID_NFS_AOP_READPAGES_RETURN= 30; +HOOKID_NFS_AOP_WRITEPAGE_ENTRY= 31; +HOOKID_NFS_AOP_WRITEPAGE_RETURN= 32; +HOOKID_NFS_AOP_WRITEPAGES_ENTRY= 33; +HOOKID_NFS_AOP_WRITEPAGES_RETURN= 34; +HOOKID_NFS_AOP_RELEASEPAGE_ENTRY= 35; +HOOKID_NFS_AOP_RELEASEPAGE_RETURN= 36; +HOOKID_NFS_AOP_SETPAGEDIRTY_ENTRY= 37; +HOOKID_NFS_AOP_SETPAGEDIRTY_RETURN= 38; +HOOKID_NFS_AOP_PREPAREWRITE_ENTRY= 39; +HOOKID_NFS_AOP_PREPAREWRITE_RETURN= 40; +HOOKID_NFS_AOP_COMMITWRITE_ENTRY= 41; +HOOKID_NFS_AOP_COMMITWRITE_RETURN= 42; +HOOKID_NFS_PROC_LOOKUP_ENTRY = 43; +HOOKID_NFS_PROC_LOOKUP_RETURN= 44; +HOOKID_NFS_PROC_READ_ENTRY= 45; +HOOKID_NFS_PROC_READ_RETURN= 46; +HOOKID_NFS_PROC_WRITE_ENTRY= 47; +HOOKID_NFS_PROC_WRITE_RETURN= 48; +HOOKID_NFS_PROC_COMMIT_ENTRY= 49; +HOOKID_NFS_PROC_COMMIT_RETURN= 50; + +HOOKID_NFS_PROC_READSETUP_ENTRY= 51; +HOOKID_NFS_PROC_WRITESETUP_ENTRY= 53; +HOOKID_NFS_PROC_COMMITSETUP_ENTRY= 55; + +HOOKID_NFS_PROC_READDONE_ENTRY= 57; +HOOKID_NFS_PROC_READDONE_RETURN= 58; +HOOKID_NFS_PROC_WRITEDONE_ENTRY= 59; +HOOKID_NFS_PROC_WRITEDONE_RETURN= 60; +HOOKID_NFS_PROC_COMMITDONE_ENTRY= 61; +HOOKID_NFS_PROC_COMMITDONE_RETURN= 62; +HOOKID_NFS_PROC_OPEN_ENTRY= 63; +HOOKID_NFS_PROC_OPEN_RETURN= 64; +HOOKID_NFS_PROC_RELEASE_ENTRY= 65; +HOOKID_NFS_PROC_RELEASE_RETURN= 66; +HOOKID_NFS_PROC_CREATE_ENTRY= 67; +HOOKID_NFS_PROC_CREATE_RETURN= 68; +HOOKID_NFS_PROC_RENAME_ENTRY= 69; +HOOKID_NFS_PROC_RENAME_RETURN= 70; +HOOKID_NFS_PROC_REMOVE_ENTRY= 71; +HOOKID_NFS_PROC_REMOVE_RETURN= 72; + +HOOKID_NFSD_DISPATCH_ENTRY= 1; +HOOKID_NFSD_DISPATCH_RETURN= 2; +HOOKID_NFSD_OPEN_ENTRY= 3; +HOOKID_NFSD_OPEN_RETURN= 4; +HOOKID_NFSD_READ_ENTRY= 5; +HOOKID_NFSD_READ_RETURN= 6; +HOOKID_NFSD_WRITE_ENTRY= 7; +HOOKID_NFSD_WRITE_RETURN= 8; +HOOKID_NFSD_LOOKUP_ENTRY= 9; +HOOKID_NFSD_LOOKUP_RETURN= 10; +HOOKID_NFSD_COMMIT_ENTRY= 11; +HOOKID_NFSD_COMMIT_RETURN= 12; +HOOKID_NFSD_CREATE_ENTRY= 13; +HOOKID_NFSD_CREATE_RETURN= 14; +HOOKID_NFSD_CREATEV3_ENTRY= 15; +HOOKID_NFSD_CREATEV3_RETURN= 16; +HOOKID_NFSD_UNLINK_ENTRY= 17; +HOOKID_NFSD_UNLINK_RETURN= 18; +HOOKID_NFSD_RENAME_ENTRY= 19; +HOOKID_NFSD_RENAME_RETURN= 20; +HOOKID_NFSD_CLOSE_ENTRY= 21; +HOOKID_NFSD_CLOSE_RETURN = 22; +HOOKID_NFSD_PROC_LOOKUP_ENTRY = 23; +HOOKID_NFSD_PROC_LOOKUP_RETURN= 24; +HOOKID_NFSD_PROC_READ_ENTRY= 25; +HOOKID_NFSD_PROC_READ_RETURN= 26; +HOOKID_NFSD_PROC_WRITE_ENTRY= 27; +HOOKID_NFSD_PROC_WRITE_RETURN= 28; +HOOKID_NFSD_PROC_COMMIT_ENTRY= 29; +HOOKID_NFSD_PROC_COMMIT_RETURN= 30; +HOOKID_NFSD_PROC_COMPOUND_ENTRY= 31; +HOOKID_NFSD_PROC_COMPOUND_RETURN= 32; +HOOKID_NFSD_PROC_REMOVE_ENTRY= 33; +HOOKID_NFSD_PROC_REMOVE_RETURN= 34; +HOOKID_NFSD_PROC_RENAME_ENTRY= 35; +HOOKID_NFSD_PROC_RENAME_RETURN= 36; +HOOKID_NFSD_PROC_CREATE_ENTRY= 37; +HOOKID_NFSD_PROC_CREATE_RETURN= 38; } diff --git a/tapset/LKET/iosyscall.stp b/tapset/LKET/iosyscall.stp index bfc61131..4650cde7 100755 --- a/tapset/LKET/iosyscall.stp +++ b/tapset/LKET/iosyscall.stp @@ -482,6 +482,8 @@ probe _addevent.iosyscall.sync.return function log_iosyscall_sync(hookid:long) %{ + int GroupID = _GROUP_IOSYSCALL; + int hookID = _HOOKID_IOSYSCALL_SYNC_ENTRY; struct timeval tv; do_gettimeofday(&tv); #if defined(ASCII_TRACE) diff --git a/tapset/LKET/nfs.stp b/tapset/LKET/nfs.stp index 2aabbd95..2d768acb 100755 --- a/tapset/LKET/nfs.stp +++ b/tapset/LKET/nfs.stp @@ -26,34 +26,36 @@ probe addevent.nfs.fop probe addevent.nfs.fop.entry = - addevent.nfs.fop.llseek.entry, - addevent.nfs.fop.read.entry, - addevent.nfs.fop.write.entry, - addevent.nfs.fop.aio_read.entry, - addevent.nfs.fop.aio_write.entry, - addevent.nfs.fop.mmap.entry, - addevent.nfs.fop.open.entry, - addevent.nfs.fop.flush.entry, - addevent.nfs.fop.release.entry, - addevent.nfs.fop.fsync.entry, - addevent.nfs.fop.lock.entry, - addevent.nfs.fop.sendfile.entry + addevent.nfs.fop.llseek.entry, + addevent.nfs.fop.read.entry, + addevent.nfs.fop.write.entry, + addevent.nfs.fop.aio_read.entry, + addevent.nfs.fop.aio_write.entry, + addevent.nfs.fop.mmap.entry, + addevent.nfs.fop.open.entry, + addevent.nfs.fop.flush.entry, + addevent.nfs.fop.release.entry, + addevent.nfs.fop.fsync.entry, + addevent.nfs.fop.lock.entry, + addevent.nfs.fop.sendfile.entry, + addevent.nfs.fop.check_flags.entry {} probe addevent.nfs.fop.return = - addevent.nfs.fop.llseek.return, - addevent.nfs.fop.read.return, - addevent.nfs.fop.write.return, - addevent.nfs.fop.aio_read.return, - addevent.nfs.fop.aio_write.return, - addevent.nfs.fop.mmap.return, - addevent.nfs.fop.open.return, - addevent.nfs.fop.flush.return, - addevent.nfs.fop.release.return, - addevent.nfs.fop.fsync.return, - addevent.nfs.fop.lock.return, - addevent.nfs.fop.sendfile.return + addevent.nfs.fop.llseek.return, + addevent.nfs.fop.read.return, + addevent.nfs.fop.write.return, + addevent.nfs.fop.aio_read.return, + addevent.nfs.fop.aio_write.return, + addevent.nfs.fop.mmap.return, + addevent.nfs.fop.open.return, + addevent.nfs.fop.flush.return, + addevent.nfs.fop.release.return, + addevent.nfs.fop.fsync.return, + addevent.nfs.fop.lock.return, + addevent.nfs.fop.sendfile.return, + addevent.nfs.fop.check_flags.return {} %{ diff --git a/tapset/LKET/nfs_proc.stp b/tapset/LKET/nfs_proc.stp index 75d8e6ff..6f969153 100755 --- a/tapset/LKET/nfs_proc.stp +++ b/tapset/LKET/nfs_proc.stp @@ -6,9 +6,8 @@ // Public License (GPL); either version 2, or (at your option) any // later version. %{ - #include <linux/nfs_fs.h> -%} -%{ +#include <linux/nfs_fs.h> + void getdevice(char *sid,int * major,int* min) { char c; @@ -565,7 +564,7 @@ function log_proc_remove(version:long,inode:long, int major_device,minor_device; getdevice(sb->s_id,&major_device,&minor_device); - _lket_trace(_GROUP_NFS,_HOOKID_NFS_PROC_REMOVE_ENTRY,"%1b%1b%8b%1b%0s%4b", + _lket_trace(_GROUP_NFS,_HOOKID_NFS_PROC_REMOVE_ENTRY,"%1b%1b%8b%1b%0s", (_FMT_)major_device,(_FMT_)minor_device, NFS_FILEID(inode),THIS->version,THIS->filename); %} diff --git a/tapset/LKET/register_event.stp b/tapset/LKET/register_event.stp index d1aaec17..f78514dd 100755 --- a/tapset/LKET/register_event.stp +++ b/tapset/LKET/register_event.stp @@ -5,8 +5,8 @@ // Public License (GPL); either version 2, or (at your option) any // later version. -global evt_name, evt_fmt -global usr_evt_name, usr_evt_fmt +global field_name, evt_fmt, event_desc +global usr_field_name, usr_evt_fmt %{ @@ -31,41 +31,79 @@ function dummy_c_function() %{ %} -function register_user_event(grpid:long, hookid:long,fmt:string, name:string) +function register_user_event(grpid:long, hookid:long,fmt:string, field_name:string) { usr_evt_fmt[grpid, hookid] = fmt - usr_evt_name[grpid, hookid] = name + usr_field_name[grpid, hookid] = field_name dummy_c_function() /* ensure register_user_event won't be compiled away */ } -function register_sys_event(grpid:long, hookid:long,fmt:string, name:string) +function register_sys_event(event_desc:string, grpid:long, hookid:long,fmt:string, + field_name:string) { + event_desc[grpid, hookid] = event_desc; evt_fmt[grpid, hookid] = fmt - evt_name[grpid, hookid] = name + field_name[grpid, hookid] = field_name dummy_c_function() /* ensure register_user_event won't be compiled away */ } function write_events_desc() { - foreach([grpid, hookid] in evt_fmt) + foreach([grpid, hookid] in event_desc) { + register_evt_desc(grpid, hookid, HOOKID_REGEVTDESC, + event_desc[grpid, hookid]) register_event(grpid, hookid, HOOKID_REGSYSEVT, - evt_fmt[grpid, hookid], evt_name[grpid, hookid]) + event_desc[grpid,hookid], evt_fmt[grpid, hookid], + field_name[grpid, hookid]) } foreach([grpid, hookid] in usr_evt_fmt) { register_event(grpid, hookid, HOOKID_REGUSREVT, - usr_evt_fmt[grpid, hookid], usr_evt_name[grpid, hookid]) + event_desc[grpid,hookid], usr_evt_fmt[grpid, hookid], + usr_field_name[grpid, hookid]) } - delete evt_name + delete field_name delete evt_fmt - delete usr_evt_name + delete usr_field_name delete usr_evt_fmt + delete event_desc } -function register_event(grpid:long, hookid:long, evt_type:long, fmt:string, names:string) +function register_evt_desc(grpid:long, hookid:long, evt_type:long, desc:string) +%{ + _stp_pbuf * pb; + char *total_length; + int cpu = smp_processor_id(); + + if(!strncmp(THIS->desc,"",1)) { + _stp_warn("empty event description for grpid:%d, hookid:%d\n", + THIS->grpid, THIS->hookid); + _stp_exit(); + } + + if( THIS->grpid <= 0 || THIS->grpid > _MAXGROUPID || + THIS->hookid <= 0 || THIS->hookid > _MAXHOOKID) { + _stp_warn("register_evt_desc: wrong range in groupid/hookid, type: %d, event: %s, grp:%d, hkid:%d\n", THIS->evt_type, THIS->desc, THIS->grpid, THIS->hookid); + _stp_exit(); + _stp_exit(); + } + + _lket_trace(_GROUP_REGEVT, THIS->evt_type, "%1b%1b%0s", THIS->grpid, + THIS->hookid, THIS->desc); + +#if !defined(ASCII_TRACE) + pb = per_cpu_ptr(Stp_pbuf, smp_processor_id()); + total_length = &(pb->buf[0]); + *(int16_t *)total_length = pb->len - 4; +#endif + _stp_print_flush(); +%} + +function register_event(grpid:long, hookid:long, evt_type:long, desc:string, + fmt:string, names:string) %{ char in_fmt[512], in_name[512]; char *p_in_fmt, *p_in_name; @@ -76,15 +114,14 @@ function register_event(grpid:long, hookid:long, evt_type:long, fmt:string, name p_in_fmt = in_fmt; p_in_name = in_name; - if(THIS->fmt==NULL || THIS->names==NULL) { - _stp_warn("error fmt/names in register_user_event\n"); - _stp_exit(); + if(!strncmp(THIS->fmt,"",1) && !strncmp(THIS->names,"",1)) { + _lket_trace(_GROUP_REGEVT,THIS->evt_type,"%1b%1b",THIS->grpid,THIS->hookid); + goto reg_epilogue; } if( THIS->grpid <= 0 || THIS->grpid > _MAXGROUPID || THIS->hookid <= 0 || THIS->hookid > _MAXHOOKID) { - _stp_warn("wrong range in groupid/hookid, grp:%d, hkid:%d\n", - THIS->grpid, THIS->hookid); + _stp_warn("register_event: wrong range in groupid/hookid, type: %d, event: %s, grp:%d, hkid:%d\n", THIS->evt_type, THIS->desc, THIS->grpid, THIS->hookid); _stp_exit(); } @@ -112,6 +149,8 @@ function register_event(grpid:long, hookid:long, evt_type:long, fmt:string, name _lket_trace(_GROUP_REGEVT, THIS->evt_type, "%1b%1b%0s%0s", THIS->grpid, THIS->hookid, THIS->fmt, THIS->names); +reg_epilogue: + #if !defined(ASCII_TRACE) pb = per_cpu_ptr(Stp_pbuf, smp_processor_id()); total_length = &(pb->buf[0]); @@ -124,663 +163,865 @@ function register_event(grpid:long, hookid:long, evt_type:long, fmt:string, name function register_sys_events() { reset_maxaction() - register_sys_event(GROUP_SYSCALL, HOOKID_SYSCALL_ENTRY, "STRING", "syscall") - register_sys_event(GROUP_SYSCALL, HOOKID_SYSCALL_RETURN, "STRING", "syscall") + + register_sys_event("addevent.syscall.entry", GROUP_SYSCALL, HOOKID_SYSCALL_ENTRY, + "STRING", "syscall") + register_sys_event("addevent.syscall.return", GROUP_SYSCALL, HOOKID_SYSCALL_RETURN, + "STRING", "syscall") - register_sys_event(GROUP_PROCESS, HOOKID_PROCESS_SNAPSHOT, + register_sys_event("process_snapshot", GROUP_PROCESS, HOOKID_PROCESS_SNAPSHOT, "INT32:INT32:INT32:STRING", "tid:pid:ppid:pname") - register_sys_event(GROUP_PROCESS, HOOKID_PROCESS_EXECVE, + register_sys_event("addevent.process.execve", GROUP_PROCESS, HOOKID_PROCESS_EXECVE, "INT32:STRING", "pid:pname") - register_sys_event(GROUP_PROCESS, HOOKID_PROCESS_FORK, + register_sys_event("addevent.process.fork", GROUP_PROCESS, HOOKID_PROCESS_FORK, "INT32:INT32:INT32", "tid:pid:ppid") - register_sys_event(GROUP_IOSCHED, HOOKID_IOSCHED_NEXT_REQ, + register_sys_event("addevent.ioscheduler.elv_next_request", + GROUP_IOSCHED, HOOKID_IOSCHED_NEXT_REQ, "STRING:INT8:INT8:INT64:INT64", "elv_name:major:minor:request:req_flags") - - register_sys_event(GROUP_IOSCHED, HOOKID_IOSCHED_ADD_REQ, + register_sys_event("addevent.ioscheduler.elv_add_request", + GROUP_IOSCHED, HOOKID_IOSCHED_ADD_REQ, "STRING:INT8:INT8:INT64:INT64", "elv_name:major:minor:request:req_flags") - - register_sys_event(GROUP_IOSCHED, HOOKID_IOSCHED_COMPLETE_REQ, + register_sys_event("addevent.ioscheduler.elv_completed_request", + GROUP_IOSCHED, HOOKID_IOSCHED_COMPLETE_REQ, "STRING:INT8:INT8:INT64:INT64", "elv_name:major:minor:request:req_flags") - register_sys_event(GROUP_TASK, HOOKID_TASK_CTXSWITCH, + register_sys_event("addevent.tskdispatch.ctxswitch", + GROUP_TASK, HOOKID_TASK_CTXSWITCH, "INT32:INT32:INT8", "prev_pid:next_pid:prev_state") - - register_sys_event(GROUP_TASK, HOOKID_TASK_CPUIDLE, + register_sys_event("addevent.tskdispatch.cpuidle", GROUP_TASK, HOOKID_TASK_CPUIDLE, "INT32", "cur_pid") - register_sys_event(GROUP_SCSI, HOOKID_SCSI_IOENTRY, + register_sys_event("addevent.scsi.ioentry", GROUP_SCSI, HOOKID_SCSI_IOENTRY, "INT8:INT8:INT8:INT64", "major:minor:sdev_state:request") - register_sys_event(GROUP_SCSI, HOOKID_SCSI_IO_TO_LLD, + register_sys_event("addevent.scsi.iodispatching", GROUP_SCSI, HOOKID_SCSI_IO_TO_LLD, "INT8:INT32:INT8:INT64:INT32:INT64:INT64", "sdev_state:scsi_info:data_dir:req_buff:buf_len:cmd_id:request") - register_sys_event(GROUP_SCSI, HOOKID_SCSI_IODONE_BY_LLD, + register_sys_event("addevent.scsi.iodone", GROUP_SCSI, HOOKID_SCSI_IODONE_BY_LLD, "INT32:INT8:INT64:INT64", "scsi_info:data_dir:cmd_id:request") - register_sys_event(GROUP_SCSI, HOOKID_SCSI_IOCOMP_BY_MIDLEVEL, + register_sys_event("addevent.scsi.iocompleted", + GROUP_SCSI, HOOKID_SCSI_IOCOMP_BY_MIDLEVEL, "INT32:INT8:INT64:INT32:INT64", "scsi_info:data_dir:cmd_id:bytes:request"); - register_sys_event(GROUP_PAGEFAULT, HOOKID_PAGEFAULT, + register_sys_event("addevent.pagefault", GROUP_PAGEFAULT, HOOKID_PAGEFAULT, "INT64:INT8", "addr:write") - register_sys_event(GROUP_NETDEV, HOOKID_NETDEV_RECEIVE, + register_sys_event("addevent.netdev.receive", GROUP_NETDEV, HOOKID_NETDEV_RECEIVE, "STRING:INT32:INT16:INT32", "dev_name:data_len:protocol:buff_size") - register_sys_event(GROUP_NETDEV, HOOKID_NETDEV_TRANSMIT, + register_sys_event("addevent.netdev.transmit", GROUP_NETDEV, HOOKID_NETDEV_TRANSMIT, "STRING:INT32:INT16:INT32", "dev_name:data_len:protocol:buff_size") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_OPEN_ENTRY, + register_sys_event("addevent.iosyscall.open.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_OPEN_ENTRY, "STRING:INT32:INT32", "filename:flags:mode") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_OPEN_RETURN, + register_sys_event("addevent.iosyscall.open.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_OPEN_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_CLOSE_ENTRY, + register_sys_event("addevent.iosyscall.close.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_CLOSE_ENTRY, "INT64", "fd") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_CLOSE_RETURN, + register_sys_event("addevent.iosyscall.close.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_CLOSE_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READ_ENTRY, + register_sys_event("addevent.iosyscall.read.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READ_ENTRY, "INT64:INT64:INT64", "fd:buff_addr:count") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READ_RETURN, + register_sys_event("addevent.iosyscall.read.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READ_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITE_ENTRY, + register_sys_event("addevent.iosyscall.write.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITE_ENTRY, "INT64:INT64:INT64", "fd:buff_addr:count") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITE_RETURN, + register_sys_event("addevent.iosyscall.write.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITE_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READV_ENTRY, + register_sys_event("addevent.iosyscall.readv.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READV_ENTRY, "INT64:INT64:INT64", "fd:vector_uaddr:count") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READV_RETURN, + register_sys_event("addevent.iosyscall.readv.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READV_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITEV_ENTRY, + register_sys_event("addevent.iosyscall.writev.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITEV_ENTRY, "INT64:INT64:INT64", "fd:vector_uaddr:count") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITEV_RETURN, + register_sys_event("addevent.iosyscall.writev.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITEV_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PREAD64_ENTRY, + register_sys_event("addevent.iosyscall.pread64.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PREAD64_ENTRY, "INT64:INT64:INT64:INT64", "fd:buff_uaddr:count:offset") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PREAD64_RETURN, + register_sys_event("addevent.iosyscall.pread64.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PREAD64_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PWRITE64_ENTRY, + register_sys_event("addevent.iosyscall.pwrite64.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PWRITE64_ENTRY, "INT64:INT64:INT64:INT64", "fd:buff_uaddr:count:offset") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PWRITE64_RETURN, + register_sys_event("addevent.iosyscall.pwrite64.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PWRITE64_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READAHEAD_ENTRY, + register_sys_event("addevent.iosyscall.readahead.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READAHEAD_ENTRY, "INT64:INT64:INT64", "fd:offset:count") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READAHEAD_RETURN, + register_sys_event("addevent.iosyscall.readahead.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READAHEAD_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SENDFILE_ENTRY, + register_sys_event("addevent.iosyscall.sendfile.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SENDFILE_ENTRY, "INT64:INT64:INT64:INT64", "out_fd:in_fd:offset_uaddr:count") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SENDFILE_RETURN, + register_sys_event("addevent.iosyscall.sendfile.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SENDFILE_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LSEEK_ENTRY, + register_sys_event("addevent.iosyscall.lseek.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LSEEK_ENTRY, "INT64:INT64:INT8", "fd:offset:whence") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LSEEK_RETURN, + register_sys_event("addevent.iosyscall.lseek.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LSEEK_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LLSEEK_ENTRY, + register_sys_event("addevent.iosyscall.llseek.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LLSEEK_ENTRY, "INT64:INT64:INT64:INT64:INT8b", "fd:offset_high:offset_low:result_uaddr:whence") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LLSEEK_RETURN, + register_sys_event("addevent.iosyscall.llseek.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LLSEEK_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SYNC_RETURN, + register_sys_event("addevent.iosyscall.sync.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SYNC_ENTRY, + "", "") + + register_sys_event("addevent.iosyscall.sync.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SYNC_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FSYNC_ENTRY, + register_sys_event("addevent.iosyscall.fsync.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FSYNC_ENTRY, "INT64", "fd") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FSYNC_RETURN, + register_sys_event("addevent.iosyscall.fsync.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FSYNC_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FDATASYNC_ENTRY, + register_sys_event("addevent.iosyscall.fdatasync.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FDATASYNC_ENTRY, "INT64", "fd") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FDATASYNC_RETURN, + register_sys_event("addevent.iosyscall.fdatasync.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FDATASYNC_RETURN, "INT64", "return") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FLOCK_ENTRY, + register_sys_event("addevent.iosyscall.flock.entry", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FLOCK_ENTRY, "INT64:INT32", "fd:operation") - register_sys_event(GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FLOCK_RETURN, + register_sys_event("addevent.iosyscall.flock.return", + GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FLOCK_RETURN, "INT64", "return") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_SETUP_ENTRY, + register_sys_event("addevent.aio.io_setup.entry", + GROUP_AIO, HOOKID_AIO_IO_SETUP_ENTRY, "INT32:INT64", "nr_events:ctxp_uaddr") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_SETUP_RETURN, + register_sys_event("addevent.aio.io_setup.return", + GROUP_AIO, HOOKID_AIO_IO_SETUP_RETURN, "INT64", "return") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ENTRY, + register_sys_event("addevent.aio.io_submit.entry", + GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ENTRY, "INT64:INT32:INT64", "ctx_id:nr:iocbpp_uaddr") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_SUBMIT_RETURN, + register_sys_event("addevent.aio.io_submit.return", + GROUP_AIO, HOOKID_AIO_IO_SUBMIT_RETURN, "INT64", "return") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ONE_ENTRY, + register_sys_event("addevent.aio.io_submit_one.entry", + GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ONE_ENTRY, "INT64:INT64:INT16:INT16:INT32:INT64:INT64:INT64", "ctx:user_iocb_uaddr:aio_lio_opcode:aio_reqprio:aio_fildes:aio_buf:aio_nbytes:aio_offset") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ONE_RETURN, + register_sys_event("addevent.aio.io_submit_one.return", + GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ONE_RETURN, "INT64", "return") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_DESTROY_ENTRY, + register_sys_event("addevent.aio.io_destroy.entry", + GROUP_AIO, HOOKID_AIO_IO_DESTROY_ENTRY, "INT64", "ctx") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_DESTROY_RETURN, + register_sys_event("addevent.aio.io_destroy.return", + GROUP_AIO, HOOKID_AIO_IO_DESTROY_RETURN, "INT64", "return") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_GETEVENTS_ENTRY, + register_sys_event("addevent.aio.io_getevents.entry", + GROUP_AIO, HOOKID_AIO_IO_GETEVENTS_ENTRY, "INT64:INT32:INT32:INT64:INT32:INT32", "ctx_id:min_nr:nr:events_uaddr:tv_sec:tv_nsec") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_GETEVENTS_RETURN, + register_sys_event("addevent.aio.io_getevents.return", + GROUP_AIO, HOOKID_AIO_IO_GETEVENTS_RETURN, "INT64", "return") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_CANCEL_ENTRY, + register_sys_event("addevent.aio.io_cancel.entry", + GROUP_AIO, HOOKID_AIO_IO_CANCEL_ENTRY, "INT64:INT64:INT64", "ctx_id:iocb_uaddr:result_uaddr") - register_sys_event(GROUP_AIO, HOOKID_AIO_IO_CANCEL_RETURN, + register_sys_event("addevent.aio.io_cancel.return", + GROUP_AIO, HOOKID_AIO_IO_CANCEL_RETURN, "INT64", "return") reset_maxaction() - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_SEND_ENTRY, + register_sys_event("addevent.signal.send.entry", + GROUP_SIGNAL, HOOKID_SIGNAL_SEND_ENTRY, "INT8:INT8:INT8:INT32", "sig:shared:send2queue:pid") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_SEND_RETURN, + register_sys_event("addevent.signal.send.return", + GROUP_SIGNAL, HOOKID_SIGNAL_SEND_RETURN, "INT8", "return") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_SYSKILL_ENTRY, + register_sys_event("addevent.signal.syskill.entry", + GROUP_SIGNAL, HOOKID_SIGNAL_SYSKILL_ENTRY, "INT32:INT8", "pid:sig") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_SYSKILL_RETURN, + register_sys_event("addevent.signal.syskill.return", + GROUP_SIGNAL, HOOKID_SIGNAL_SYSKILL_RETURN, "INT8", "return") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_SYSTGKILL_ENTRY, + register_sys_event("addevent.signal.systgkill.entry", + GROUP_SIGNAL, HOOKID_SIGNAL_SYSTGKILL_ENTRY, "INT32:INT32:INT8", "tid:pid:sig") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_SYSTGKILL_RETURN, + register_sys_event("addevent.signal.systgkill.return", + GROUP_SIGNAL, HOOKID_SIGNAL_SYSTGKILL_RETURN, "INT8", "return") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_SYSTKILL_ENTRY, + register_sys_event("addevent.signal.systkill.entry", + GROUP_SIGNAL, HOOKID_SIGNAL_SYSTKILL_ENTRY, "INT32:INT8", "pid:sig") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_SYSTKILL_RETURN, + register_sys_event("addevent.signal.systkill.return", + GROUP_SIGNAL, HOOKID_SIGNAL_SYSTKILL_RETURN, "INT8", "return") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_PENDING_ENTRY, + register_sys_event("addevent.signal.pending.entry", + GROUP_SIGNAL, HOOKID_SIGNAL_PENDING_ENTRY, "INT32:INT32", "sigset_addr:setsize"); - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_PENDING_RETURN, + register_sys_event("addevent.signal.pending.return", + GROUP_SIGNAL, HOOKID_SIGNAL_PENDING_RETURN, "INT8", "return") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_DOACTION_ENTRY, + register_sys_event("addevent.signal.do_action.entry", + GROUP_SIGNAL, HOOKID_SIGNAL_DOACTION_ENTRY, "INT8:INT64", "sig:handler") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_DOACTION_RETURN, + register_sys_event("addevent.signal.do_action.return", + GROUP_SIGNAL, HOOKID_SIGNAL_DOACTION_RETURN, "INT16", "return") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_PROC_MASK_ENTRY, + register_sys_event("addevent.signal.procmask.entry", + GROUP_SIGNAL, HOOKID_SIGNAL_PROC_MASK_ENTRY, "INT8:INT64", "how:sigset") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_PROC_MASK_RETURN, + register_sys_event("addevent.signal.procmask.return", + GROUP_SIGNAL, HOOKID_SIGNAL_PROC_MASK_RETURN, "INT8", "return") - register_sys_event(GROUP_SIGNAL, HOOKID_SIGNAL_FLUSH_ENTRY, + register_sys_event("addevent.signal.flush.entry", + GROUP_SIGNAL, HOOKID_SIGNAL_FLUSH_ENTRY, "INT32", "pid") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CREATE_CLIENT_ENTRY, + register_sys_event("addevent.sunrpc.clnt.create_client.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CREATE_CLIENT_ENTRY, "STRING:INT64:INT8:INT16:INT16:INT8", "server:prog:vers:prot:port:authflavor") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CREATE_CLIENT_RETURN, + register_sys_event("addevent.sunrpc.clnt.create_client.return", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CREATE_CLIENT_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CLONE_CLIENT_ENTRY, + register_sys_event("addevent.sunrpc.clnt.clone_client.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CLONE_CLIENT_ENTRY, "STRING:INT64:INT16:INT16:INT32", "server:prog:tasks:clones:rpccount") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CLONE_CLIENT_RETURN, + register_sys_event("addevent.sunrpc.clnt.clone_client.return", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CLONE_CLIENT_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_ENTRY, + register_sys_event("addevent.sunrpc.clnt.shutdown_client.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_ENTRY, "STRING:INT64:INT16:INT16:INT32", "server:prog:clones:tasks:rpccount") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_RETURN, + register_sys_event("addevent.sunrpc.clnt.shutdown_client.return", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_RETURN, "INT8", "void") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_ENTRY, + register_sys_event("addevent.sunrpc.clnt.bind_new_program.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_ENTRY, "STRING:INT64:INT8:INT64:INT8", "server:old_prog:old_vers:new_prog:new_vers") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_RETURN, + register_sys_event("addevent.sunrpc.clnt.bind_new_program.return", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_SYNC_ENTRY, + register_sys_event("addevent.sunrpc.clnt.call_sync.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_SYNC_ENTRY, "STRING:INT64:INT8:INT64:INT64", "server:prog:vers:proc:flags") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_SYNC_RETURN, + register_sys_event("addevent.sunrpc.clnt.call_sync.return", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_SYNC_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_ASYNC_ENTRY, + register_sys_event("addevent.sunrpc.clnt.call_async.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_ASYNC_ENTRY, "STRING:INT64:INT8:INT64:INT64", "server:prog:vers:proc:flags") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_ASYNC_RETURN, + register_sys_event("addevent.sunrpc.clnt.call_async.return", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_ASYNC_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_RESTART_CALL_ENTRY, - "INT64:INT64", - "tk_pid:tk_flags") + register_sys_event("addevent.sunrpc.clnt.restart_call.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_RESTART_CALL_ENTRY, + "INT64:INT64", "tk_pid:tk_flags") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_RESTART_CALL_RETURN, + register_sys_event("addevent.sunrpc.clnt.restart_call.return", + GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_RESTART_CALL_RETURN, "INT8", "void") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_REGISTER_ENTRY, + register_sys_event("addevent.sunrpc.svc.register.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_REGISTER_ENTRY, "STRING:INT64:INT16:INT32", "service:program:protocol:prot") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_REGISTER_RETURN, + register_sys_event("addevent.sunrpc.svc.register.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_REGISTER_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_CREATE_ENTRY, + register_sys_event("addevent.sunrpc.svc.create.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_CREATE_ENTRY, "INT64:INT8:INT8", "program:high_version:num_versions") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_CREATE_RETURN, + register_sys_event("addevent.sunrpc.svc.create.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_CREATE_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DESTROY_ENTRY, + register_sys_event("addevent.sunrpc.svc.destroy.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DESTROY_ENTRY, "STRING:INT64:INT32", "service:program:num_threads") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DESTROY_RETURN, + register_sys_event("addevent.sunrpc.svc.destroy.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DESTROY_RETURN, "INT8", "void") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_PROCESS_ENTRY, + register_sys_event("addevent.sunrpc.svc.process.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_PROCESS_ENTRY, "STRING:INT64:INT64:INT64:INT64:INT8:INT8", "service:sv_prog:peer_ip:rq_xid:rq_prog:rq_vers:rq_proc") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_PROCESS_RETURN, + register_sys_event("addevent.sunrpc.svc.process.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_PROCESS_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_AUTHORISE_ENTRY, + register_sys_event("addevent.sunrpc.svc.authorise.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_AUTHORISE_ENTRY, "INT64:INT64:INT64:INT8:INT64", "peer_ip:xid:prog:vers:proc") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_AUTHORISE_RETURN, + register_sys_event("addevent.sunrpc.svc.authorise.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_AUTHORISE_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_SEND_ENTRY, + register_sys_event("addevent.sunrpc.svc.send.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_SEND_ENTRY, "STRING:INT64:INT64:INT64:INT64:INT8:INT64", "sv_name:peer_ip:sv_prog:xid:prog:vers:proc") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_SEND_RETURN, + register_sys_event("addevent.sunrpc.svc.send.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_SEND_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_RECV_ENTRY, - "STRING:INT64", - "sv_name:timeout") + register_sys_event("addevent.sunrpc.svc.recv.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_RECV_ENTRY, + "STRING:INT64", "sv_name:timeout") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_RECV_RETURN, + register_sys_event("addevent.sunrpc.svc.recv.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_RECV_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DROP_ENTRY, + register_sys_event("addevent.sunrpc.svc.drop.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DROP_ENTRY, "STRING:INT64:INT64:INT64:INT8:INT64", "sv_name:peer_ip:xid:prog:vers:proc") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DROP_RETURN, + register_sys_event("addevent.sunrpc.svc.drop.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DROP_RETURN, "INT8", "void") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_NEW_TASK_ENTRY, + register_sys_event("addevent.sunrpc.sched.new_task.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_NEW_TASK_ENTRY, "INT64:INT64:INT8:INT64:INT64", "xid:prog:vers:prot:flags") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_NEW_TASK_RETURN, + register_sys_event("addevent.sunrpc.sched.new_task.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_NEW_TASK_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_RELEASE_TASK_ENTRY, + register_sys_event("addevent.sunrpc.sched.release_task.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_RELEASE_TASK_ENTRY, "INT64:INT64:INT8:INT64:INT64", "xid:prog:vers:prot:flags") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_RELEASE_TASK_RETURN, + register_sys_event("addevent.sunrpc.sched.release_task.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_RELEASE_TASK_RETURN, "INT8", "void") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_EXECUTE_ENTRY, + register_sys_event("addevent.sunrpc.sched.execute.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_EXECUTE_ENTRY, "INT64:INT64:INT8:INT64:INT64:INT64", "xid:prog:vers:prot:tk_pid:tk_flags") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_EXECUTE_RETURN, + register_sys_event("addevent.sunrpc.sched.execute.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_EXECUTE_RETURN, "INT64", "return") - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_DELAY_ENTRY, + register_sys_event("addevent.sunrpc.sched.delay.entry", + GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_DELAY_ENTRY, "INT64:INT64:INT64:INT64:INT64", "xid:prog:tk_pid:tk_flags:delay") - - register_sys_event(GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_DELAY_RETURN, + register_sys_event("addevent.sunrpc.sched.delay.return", + GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_DELAY_RETURN, "INT8", "void") - register_sys_event(GROUP_CPUFREQ, HOOKID_SWITCH_CPUFREQ, + register_sys_event("cpu_freq", + GROUP_CPUFREQ, HOOKID_SWITCH_CPUFREQ, "INT64", "cpufreq") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_LLSEEK_ENTRY, + register_sys_event("addevent.nfs.fop.llseek.entry", + GROUP_NFS, HOOKID_NFS_FOP_LLSEEK_ENTRY, "INT8:INT8:INT64:INT64:INT8", "major:minor:ino:offset:origin") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_LLSEEK_RETURN, + register_sys_event("addevent.nfs.fop.llseek.return", + GROUP_NFS, HOOKID_NFS_FOP_LLSEEK_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_READ_ENTRY, + register_sys_event("addevent.nfs.fop.read.entry", + GROUP_NFS, HOOKID_NFS_FOP_READ_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT64", "major:minor:ino:buf:len:pos") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_READ_RETURN, + register_sys_event("addevent.nfs.fop.read.return", + GROUP_NFS, HOOKID_NFS_FOP_READ_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_WRITE_ENTRY, + register_sys_event("addevent.nfs.fop.write.entry", + GROUP_NFS, HOOKID_NFS_FOP_WRITE_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT64", "major:minor:ino:buf:len:pos") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_WRITE_RETURN, + register_sys_event("addevent.nfs.fop.write.return", + GROUP_NFS, HOOKID_NFS_FOP_WRITE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_AIOREAD_ENTRY, + register_sys_event("addevent.nfs.fop.aio_read.entry", + GROUP_NFS, HOOKID_NFS_FOP_AIOREAD_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT64", "major:minor:ino:buf:len:pos") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_AIOREAD_RETURN, + register_sys_event("addevent.nfs.fop.aio_read.return", + GROUP_NFS, HOOKID_NFS_FOP_AIOREAD_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_AIOWRITE_ENTRY, + register_sys_event("addevent.nfs.fop.aio_write.entry", + GROUP_NFS, HOOKID_NFS_FOP_AIOWRITE_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT64", "major:minor:ino:buf:len:pos") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_AIOWRITE_RETURN, + register_sys_event("addevent.nfs.fop.aio_write.return", + GROUP_NFS, HOOKID_NFS_FOP_AIOWRITE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_MMAP_ENTRY, + register_sys_event("addevent.nfs.fop.mmap.entry", + GROUP_NFS, HOOKID_NFS_FOP_MMAP_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT32", "major:minor:ino:vm_start:vm_end:vm_flags") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_MMAP_RETURN, + register_sys_event("addevent.nfs.fop.mmap.return", + GROUP_NFS, HOOKID_NFS_FOP_MMAP_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_OPEN_ENTRY, + register_sys_event("addevent.nfs.fop.open.entry", + GROUP_NFS, HOOKID_NFS_FOP_OPEN_ENTRY, "INT8:INT8:INT64:INT32:STRING", "major:minor:ino:flag:filename") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_OPEN_RETURN, + register_sys_event("addevent.nfs.fop.open.return", + GROUP_NFS, HOOKID_NFS_FOP_OPEN_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_FLUSH_ENTRY, + register_sys_event("addevent.nfs.fop.flush.entry", + GROUP_NFS, HOOKID_NFS_FOP_FLUSH_ENTRY, "INT8:INT8:INT64:INT32", "major:minor:ino:ndirty") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_FLUSH_RETURN, + register_sys_event("addevent.nfs.fop.flush.return", + GROUP_NFS, HOOKID_NFS_FOP_FLUSH_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_RELEASE_ENTRY, + register_sys_event("addevent.nfs.fop.release.entry", + GROUP_NFS, HOOKID_NFS_FOP_RELEASE_ENTRY, "INT8:INT8:INT64:INT16", "major:minor:ino:mode") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_RELEASE_RETURN, + register_sys_event("addevent.nfs.fop.release.return", + GROUP_NFS, HOOKID_NFS_FOP_RELEASE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_FSYNC_ENTRY, + register_sys_event("addevent.nfs.fop.fsync.entry", + GROUP_NFS, HOOKID_NFS_FOP_FSYNC_ENTRY, "INT8:INT8:INT64:INT32", "major:minor:ino:ndirty") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_FSYNC_RETURN, + register_sys_event("addevent.nfs.fop.fsync.return", + GROUP_NFS, HOOKID_NFS_FOP_FSYNC_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_LOCK_ENTRY, + register_sys_event("addevent.nfs.fop.lock.entry", + GROUP_NFS, HOOKID_NFS_FOP_LOCK_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT8:INT8:INT32", "major:minor:ino:fl_start:fl_end:fl_type:fl_flag:cmd") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_LOCK_RETURN, + register_sys_event("addevent.nfs.fop.lock.return", + GROUP_NFS, HOOKID_NFS_FOP_LOCK_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_SENDFILE_ENTRY, + register_sys_event("addevent.nfs.fop.sendfile.entry", + GROUP_NFS, HOOKID_NFS_FOP_SENDFILE_ENTRY, "INT8:INT8:INT64:INT64:INT64", "major:minor:ino:count:pos") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_SENDFILE_RETURN, + register_sys_event("addevent.nfs.fop.sendfile.return", + GROUP_NFS, HOOKID_NFS_FOP_SENDFILE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_CHECKFLAGS_ENTRY, + register_sys_event("addevent.nfs.fop.check_flags.entry", + GROUP_NFS, HOOKID_NFS_FOP_CHECKFLAGS_ENTRY, "INT32","flag") - register_sys_event(GROUP_NFS, HOOKID_NFS_FOP_CHECKFLAGS_RETURN, + register_sys_event("addevent.nfs.fop.check_flags.return", + GROUP_NFS, HOOKID_NFS_FOP_CHECKFLAGS_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_READPAGE_ENTRY, + register_sys_event("addevent.nfs.aop.readpage.entry", + GROUP_NFS, HOOKID_NFS_AOP_READPAGE_ENTRY, "INT64:INT32:INT64:INT64", "ino:rsize:__page:page_index") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_READPAGE_RETURN, + register_sys_event("addevent.nfs.aop.readpage.return", + GROUP_NFS, HOOKID_NFS_AOP_READPAGE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_READPAGES_ENTRY, + register_sys_event("addevent.nfs.aop.readpages.entry", + GROUP_NFS, HOOKID_NFS_AOP_READPAGES_ENTRY, "INT64:INT32:INT32", "ino:rpages:nr_pages") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_READPAGES_RETURN, + register_sys_event("addevent.nfs.aop.readpages.return", + GROUP_NFS, HOOKID_NFS_AOP_READPAGES_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGE_ENTRY, + register_sys_event("addevent.nfs.aop.writepage.entry", + GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGE_ENTRY, "INT64:INT32:INT64:INT64", "ino:wsize:__page:page_index") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGE_RETURN, + register_sys_event("addevent.nfs.aop.writepage.return", + GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGES_ENTRY, + register_sys_event("addevent.nfs.aop.writepages.entry", + GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGES_ENTRY, "INT64:INT32:INT64", "ino:wpages:nr_to_write") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGES_RETURN, + register_sys_event("addevent.nfs.aop.writepages.return", + GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGES_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_PREPAREWRITE_ENTRY, + register_sys_event("addevent.nfs.aop.prepare_write.entry", + GROUP_NFS, HOOKID_NFS_AOP_PREPAREWRITE_ENTRY, "INT64:INT64:INT64", "ino:__page:page_index") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_PREPAREWRITE_RETURN, + register_sys_event("addevent.nfs.aop.prepare_write.return", + GROUP_NFS, HOOKID_NFS_AOP_PREPAREWRITE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_COMMITWRITE_ENTRY, + register_sys_event("addevent.nfs.aop.commit_write.entry", + GROUP_NFS, HOOKID_NFS_AOP_COMMITWRITE_ENTRY, "INT64:INT64:INT64:INT32:INT32", "ino:__page:page_index:offset:count") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_COMMITWRITE_RETURN, + register_sys_event("addevent.nfs.aop.commit_write.return", + GROUP_NFS, HOOKID_NFS_AOP_COMMITWRITE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_SETPAGEDIRTY_ENTRY, + register_sys_event("addevent.nfs.aop.set_page_dirty.entry", + GROUP_NFS, HOOKID_NFS_AOP_SETPAGEDIRTY_ENTRY, "INT64:INT8", "__page:page_flag") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_SETPAGEDIRTY_RETURN, + register_sys_event("addevent.nfs.aop.set_page_dirty.return", + GROUP_NFS, HOOKID_NFS_AOP_SETPAGEDIRTY_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_RELEASEPAGE_ENTRY, + register_sys_event("addevent.nfs.aop.release_page.entry", + GROUP_NFS, HOOKID_NFS_AOP_RELEASEPAGE_ENTRY, "INT64:INT64", "__page:page_index") - register_sys_event(GROUP_NFS, HOOKID_NFS_AOP_RELEASEPAGE_RETURN, + register_sys_event("addevent.nfs.aop.release_page.return", + GROUP_NFS, HOOKID_NFS_AOP_RELEASEPAGE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_LOOKUP_ENTRY, + register_sys_event("addevent.nfs.proc.lookup.entry", + GROUP_NFS, HOOKID_NFS_PROC_LOOKUP_ENTRY, "INT8:INT8:INT64:INT8:STRING", "major_device:minor_device:fileid:version:filename") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_LOOKUP_RETURN, + register_sys_event("addevent.nfs.proc.lookup.return", + GROUP_NFS, HOOKID_NFS_PROC_LOOKUP_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_READ_ENTRY, + register_sys_event("addevent.nfs.proc.read.entry", + GROUP_NFS, HOOKID_NFS_PROC_READ_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT64", "major_device:minor_device:fileid:version:count:offset") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_READ_RETURN, + register_sys_event("addevent.nfs.proc.read.return", + GROUP_NFS, HOOKID_NFS_PROC_READ_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_WRITE_ENTRY, + register_sys_event("addevent.nfs.proc.write.entry", + GROUP_NFS, HOOKID_NFS_PROC_WRITE_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT64", "major_device:minor_device:fileid:version:count:offset") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_WRITE_RETURN, + register_sys_event("addevent.nfs.proc.write.return", + GROUP_NFS, HOOKID_NFS_PROC_WRITE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_COMMIT_ENTRY, + register_sys_event("addevent.nfs.proc.commit.entry", + GROUP_NFS, HOOKID_NFS_PROC_COMMIT_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT64", "major_device:minor_device:fileid:version:count:offset") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_COMMIT_RETURN, + register_sys_event("addevent.nfs.proc.commit.return", + GROUP_NFS, HOOKID_NFS_PROC_COMMIT_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_READSETUP_ENTRY, + register_sys_event("addevent.nfs.proc.read_setup.entry", + GROUP_NFS, HOOKID_NFS_PROC_READSETUP_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT64", "major_device:minor_device:fileid:version:count:offset") - - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_WRITESETUP_ENTRY, + register_sys_event("addevent.nfs.proc.write_setup.entry", + GROUP_NFS, HOOKID_NFS_PROC_WRITESETUP_ENTRY, "INT8:INT8:INT64:INT8:INT8:INT32:INT64", "major_device:minor_device:fileid:version:how:count:offset") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_COMMITSETUP_ENTRY, + register_sys_event("addevent.nfs.proc.commit_setup.entry", + GROUP_NFS, HOOKID_NFS_PROC_COMMITSETUP_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT64", "major_device:minor_device:fileid:version:count:offset") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_READDONE_ENTRY, + register_sys_event("addevent.nfs.proc.read_done.entry", + GROUP_NFS, HOOKID_NFS_PROC_READDONE_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT32", "major_device:minor_device:fileid:version:status:count") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_READDONE_RETURN, + register_sys_event("addevent.nfs.proc.read_done.return", + GROUP_NFS, HOOKID_NFS_PROC_READDONE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_WRITEDONE_ENTRY, + register_sys_event("addevent.nfs.proc.write_done.entry", + GROUP_NFS, HOOKID_NFS_PROC_WRITEDONE_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT32", "major_device:minor_device:fileid:version:status:count") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_WRITEDONE_RETURN, + register_sys_event("addevent.nfs.proc.write_done.return", + GROUP_NFS, HOOKID_NFS_PROC_WRITEDONE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_COMMITDONE_ENTRY, + register_sys_event("addevent.nfs.proc.commit_done.entry", + GROUP_NFS, HOOKID_NFS_PROC_COMMITDONE_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT32", "major_device:minor_device:fileid:version:status:count") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_COMMITDONE_RETURN, + register_sys_event("addevent.nfs.proc.commit_done.return", + GROUP_NFS, HOOKID_NFS_PROC_COMMITDONE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_OPEN_ENTRY, + register_sys_event("addevent.nfs.proc.open.entry", + GROUP_NFS, HOOKID_NFS_PROC_OPEN_ENTRY, "INT8:INT8:INT64:INT8:STRING:INT32:INT32", "major_device:minor_device:fileid:version:filename:flag:mode") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_OPEN_RETURN, + register_sys_event("addevent.nfs.proc.open.return", + GROUP_NFS, HOOKID_NFS_PROC_OPEN_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_RELEASE_ENTRY, + register_sys_event("addevent.nfs.proc.release.entry", + GROUP_NFS, HOOKID_NFS_PROC_RELEASE_ENTRY, "INT8:INT8:INT64:INT8:STRING:INT32:INT32", "major_device:minor_device:fileid:version:filename:flag:mode") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_RELEASE_RETURN, + register_sys_event("addevent.nfs.proc.release.return", + GROUP_NFS, HOOKID_NFS_PROC_RELEASE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_CREATE_ENTRY, + register_sys_event("addevent.nfs.proc.create.entry", + GROUP_NFS, HOOKID_NFS_PROC_CREATE_ENTRY, "INT8:INT8:INT64:INT8:STRING:INT32", "major_device:minor_device:fileid:version:filename:mode") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_CREATE_RETURN, + register_sys_event("addevent.nfs.proc.create.return", + GROUP_NFS, HOOKID_NFS_PROC_CREATE_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_RENAME_ENTRY, + register_sys_event("addevent.nfs.proc.rename.entry", + GROUP_NFS, HOOKID_NFS_PROC_RENAME_ENTRY, "INT8:INT8:INT8:INT64:STRING:INT8:INT8:INT64:STRING", "version:major_old:minor_old:fileid_old:filename_old:major_new:minor_new:fileid_new:filename_new") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_RENAME_RETURN, + register_sys_event("addevent.nfs.proc.rename.return", + GROUP_NFS, HOOKID_NFS_PROC_RENAME_RETURN, "INT32","return") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_CREATE_ENTRY, + register_sys_event("addevent.nfs.proc.create.entry", + GROUP_NFS, HOOKID_NFS_PROC_CREATE_ENTRY, "INT8:INT8:INT64:INT8:STRING", "major_device:minor_device:fileid:version:filename") - register_sys_event(GROUP_NFS, HOOKID_NFS_PROC_CREATE_RETURN, + register_sys_event("addevent.nfs.proc.create.return", + GROUP_NFS, HOOKID_NFS_PROC_CREATE_RETURN, "INT32","return") + register_sys_event("addevent.nfs.proc.remove.entry", + GROUP_NFS, HOOKID_NFS_PROC_REMOVE_ENTRY, + "INT8:INT8:INT64:INT8:STRING", + "major_dev:minor_dev:field_id:version:filename"); + register_sys_event("addevent.nfs.proc.remove.return", + GROUP_NFS, HOOKID_NFS_PROC_REMOVE_RETURN, + "INT32", "return"); + reset_maxaction() - register_sys_event(GROUP_NFSD, HOOKID_NFSD_DISPATCH_ENTRY, + register_sys_event("addevent.nfsd.dispatch.entry", + GROUP_NFSD, HOOKID_NFSD_DISPATCH_ENTRY, "INT8:INT8:INT32:INT32:INT32:INT32", "proto:version:xid:proc:prog:client_ip") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_DISPATCH_RETURN, + register_sys_event("addevent.nfsd.dispatch.return", + GROUP_NFSD, HOOKID_NFSD_DISPATCH_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_OPEN_ENTRY, + register_sys_event("addevent.nfsd.open.entry", + GROUP_NFSD, HOOKID_NFSD_OPEN_ENTRY, "INT8:INT64:INT64:INT64:INT32:INT8", "size:ino0:ino1:ino2:type:access") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_OPEN_RETURN, + register_sys_event("addevent.nfsd.open.return", + GROUP_NFSD, HOOKID_NFSD_OPEN_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_READ_ENTRY, + register_sys_event("addevent.nfsd.read.entry", + GROUP_NFSD, HOOKID_NFSD_READ_ENTRY, "INT8:INT64:INT64:INT64:INT64:INT64:INT64:INT64", "size:ino0:ino1:ino2:count:offset:iov_len:vlen") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_READ_RETURN, + register_sys_event("addevent.nfsd.read.return", + GROUP_NFSD, HOOKID_NFSD_READ_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_WRITE_ENTRY, + register_sys_event("addevent.nfsd.write.entry", + GROUP_NFSD, HOOKID_NFSD_WRITE_ENTRY, "INT8:INT64:INT64:INT64:INT64:INT64:INT64:INT64", "size:ino0:ino1:ino2:count:offset:iov_len:vlen") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_WRITE_RETURN, + register_sys_event("addevent.nfsd.write.return", + GROUP_NFSD, HOOKID_NFSD_WRITE_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_LOOKUP_ENTRY, + register_sys_event("addevent.nfsd.lookup.entry", + GROUP_NFSD, HOOKID_NFSD_LOOKUP_ENTRY, "INT8:INT64:INT64:INT64:STRING", "size:ino0:ino1:ino2:filename") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_LOOKUP_RETURN, + register_sys_event("addevent.nfsd.lookup.return", + GROUP_NFSD, HOOKID_NFSD_LOOKUP_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_COMMIT_ENTRY, + register_sys_event("addevent.nfsd.commit.entry", + GROUP_NFSD, HOOKID_NFSD_COMMIT_ENTRY, "INT8:INT64:INT64:INT64:INT64:INT64", "size:ino0:ino1:ino2:count:offset") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_COMMIT_RETURN, + register_sys_event("addevent.nfsd.commit.return", + GROUP_NFSD, HOOKID_NFSD_COMMIT_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_CREATE_ENTRY, + register_sys_event("addevent.nfsd.create.entry", + GROUP_NFSD, HOOKID_NFSD_CREATE_ENTRY, "INT8:INT64:INT64:INT64:STRING:INT32:INT16:INT32", "size:ino0:ino1:ino2:filename:type:iap_valid:iap_mode") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_CREATE_RETURN, + register_sys_event("addevent.nfsd.create.return", + GROUP_NFSD, HOOKID_NFSD_CREATE_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_CREATEV3_ENTRY, + register_sys_event("addevent.nfsd.createv3.entry", + GROUP_NFSD, HOOKID_NFSD_CREATEV3_ENTRY, "INT8:INT64:INT64:INT64:STRING:INT8:INT16:INT32", "size:ino0:ino1:ino2:filename:createmode:iap_valid:iap_mode") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_CREATEV3_RETURN, + register_sys_event("addevent.nfsd.createv3.return", + GROUP_NFSD, HOOKID_NFSD_CREATEV3_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_UNLINK_ENTRY, + register_sys_event("addevent.nfsd.unlink.entry", + GROUP_NFSD, HOOKID_NFSD_UNLINK_ENTRY, "INT8:INT64:INT64:INT64:STRING:INT32", "size:ino0:ino1:ino2:filename:type") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_UNLINK_RETURN, + register_sys_event("addevent.nfsd.unlink.return", + GROUP_NFSD, HOOKID_NFSD_UNLINK_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_RENAME_ENTRY, + register_sys_event("addevent.nfsd.rename.entry", + GROUP_NFSD, HOOKID_NFSD_RENAME_ENTRY, "INT8:INT64:INT64:INT64:STRING:INT8:INT64:INT64:INT64:STRING", "old_size:old_ino0:old_ino1:old_ino2:old_filename:size:ino0:ino1:ino2:filename") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_RENAME_RETURN, + register_sys_event("addevent.nfsd.rename.return", + GROUP_NFSD, HOOKID_NFSD_RENAME_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_CLOSE_ENTRY, - "STRING", - "filename") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_CLOSE_RETURN, + register_sys_event("addevent.nfsd.close.entry", + GROUP_NFSD, HOOKID_NFSD_CLOSE_ENTRY, + "STRING", "filename") + register_sys_event("addevent.nfsd.close.return", + GROUP_NFSD, HOOKID_NFSD_CLOSE_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_LOOKUP_ENTRY, + register_sys_event("addevent.nfsd.proc.lookup.entry", + GROUP_NFSD, HOOKID_NFSD_PROC_LOOKUP_ENTRY, "INT8:INT64:INT64:INT64:INT8:STRING", "size:ino0:ino1:ino2:version:filename") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_LOOKUP_RETURN, + register_sys_event("addevent.nfsd.proc.lookup.return", + GROUP_NFSD, HOOKID_NFSD_PROC_LOOKUP_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_READ_ENTRY, + register_sys_event("addevent.nfsd.proc.read.entry", + GROUP_NFSD, HOOKID_NFSD_PROC_READ_ENTRY, "INT8:INT64:INT64:INT64:INT8:INT64:INT64:INT64:INT64", "size:ino0:ino1:ino2:version:count:offset:iov_len:vlen") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_READ_RETURN, + register_sys_event("addevent.nfsd.proc.read.return", + GROUP_NFSD, HOOKID_NFSD_PROC_READ_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_WRITE_ENTRY, + register_sys_event("addevent.nfsd.proc.write.entry", + GROUP_NFSD, HOOKID_NFSD_PROC_WRITE_ENTRY, "INT8:INT64:INT64:INT64:INT8:INT64:INT64:INT64:INT64", "size:ino0:ino1:ino2:version:count:offset:iov_len:vlen") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_WRITE_RETURN, + register_sys_event("addevent.nfsd.proc.write.return", + GROUP_NFSD, HOOKID_NFSD_PROC_WRITE_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_COMMIT_ENTRY, + register_sys_event("addevent.nfsd.proc.commit.entry", + GROUP_NFSD, HOOKID_NFSD_PROC_COMMIT_ENTRY, "INT8:INT64:INT64:INT64:INT8:INT64:INT64", "size:ino0:ino1:ino2:version:count:offset") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_COMMIT_RETURN, + register_sys_event("addevent.nfsd.proc.commit.return", + GROUP_NFSD, HOOKID_NFSD_PROC_COMMIT_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_COMPOUND_ENTRY, + register_sys_event("addevent.nfsd.proc.compound.entry", + GROUP_NFSD, HOOKID_NFSD_PROC_COMPOUND_ENTRY, "INT32","num") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_COMPOUND_RETURN, + register_sys_event("addevent.nfsd.proc.compound.return", + GROUP_NFSD, HOOKID_NFSD_PROC_COMPOUND_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_REMOVE_ENTRY, + register_sys_event("addevent.nfsd.proc.remove.entry", + GROUP_NFSD, HOOKID_NFSD_PROC_REMOVE_ENTRY, "INT8:INT64:INT64:INT64:INT8:STRING", "size:ino0:ino1:ino2:version:filename") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_REMOVE_RETURN, + register_sys_event("addevent.nfsd.proc.remove.return", + GROUP_NFSD, HOOKID_NFSD_PROC_REMOVE_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_RENAME_ENTRY, + register_sys_event("addevent.nfsd.proc.rename.entry", + GROUP_NFSD, HOOKID_NFSD_PROC_RENAME_ENTRY, "INT8:INT8:INT64:INT64:INT64:STRING:INT8:INT64:INT64:INT64:STRING", "version:old_size:old_ino0:old_ino1:old_ino2:old_filename:size:ino0:ino1:ino2:filename") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_RENAME_RETURN, + register_sys_event("addevent.nfsd.proc.rename.return", + GROUP_NFSD, HOOKID_NFSD_PROC_RENAME_RETURN, "INT32","return") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_CREATE_ENTRY, + register_sys_event("addevent.nfsd.proc.create.entry", + GROUP_NFSD, HOOKID_NFSD_PROC_CREATE_ENTRY, "INT8:INT64:INT64:INT64:INT8:STRING", "size:ino0:ino1:ino2:version:filename") - register_sys_event(GROUP_NFSD, HOOKID_NFSD_PROC_CREATE_RETURN, + register_sys_event("addevent.nfsd.proc.create.return", + GROUP_NFSD, HOOKID_NFSD_PROC_CREATE_RETURN, "INT32","return") reset_maxaction() diff --git a/tapset/LKET/signal.stp b/tapset/LKET/signal.stp index 2584aacd..28b4a2b9 100755 --- a/tapset/LKET/signal.stp +++ b/tapset/LKET/signal.stp @@ -12,24 +12,33 @@ probe never } probe addevent.signal - = + = addevent.signal.entry, + addevent.signal.return +{} + +probe addevent.signal.entry + = addevent.signal.send.entry, - addevent.signal.send.return, addevent.signal.syskill.entry, - addevent.signal.syskill.return, addevent.signal.systgkill.entry, - addevent.signal.systgkill.return, addevent.signal.systkill.entry, - addevent.signal.systkill.return, addevent.signal.pending.entry, - addevent.signal.pending.return, addevent.signal.do_action.entry, - addevent.signal.do_action.return, addevent.signal.procmask.entry, - addevent.signal.procmask.return, addevent.signal.flush.entry {} +probe addevent.signal.return + = + addevent.signal.send.return, + addevent.signal.syskill.return, + addevent.signal.systgkill.return, + addevent.signal.systkill.return, + addevent.signal.pending.return, + addevent.signal.do_action.return, + addevent.signal.procmask.return +{} + /* Fires when a signal is sent to a process */ probe addevent.signal.send.entry += _addevent.signal.send.entry |