diff options
Diffstat (limited to 'tapset/LKET/syscalls.stp')
| -rwxr-xr-x | tapset/LKET/syscalls.stp | 31 |
1 files changed, 22 insertions, 9 deletions
diff --git a/tapset/LKET/syscalls.stp b/tapset/LKET/syscalls.stp index 7b4f6799..cd6850aa 100755 --- a/tapset/LKET/syscalls.stp +++ b/tapset/LKET/syscalls.stp @@ -6,18 +6,17 @@ // later version. probe addevent.syscall - = addevent.syscall.entry, addevent.syscall.return + = addevent.syscall.entry, + addevent.syscall.return +{} + +probe addevent.syscall.entry + += _addevent.syscall.entry { + update_record() } -/* log the system call name */ -function log_syscall_tracedata(var_id:long, name:string) -%{ - _lket_trace(_GROUP_SYSCALL, THIS->var_id, "%0s", THIS->name); -%} - - -probe addevent.syscall.entry +probe _addevent.syscall.entry = syscall.* { if(filter_by_pid() == 1 ) { @@ -26,9 +25,23 @@ probe addevent.syscall.entry } probe addevent.syscall.return + += _addevent.syscall.return +{ + update_record() +} + +probe _addevent.syscall.return = syscall.*.return { if(filter_by_pid() == 1 ) { log_syscall_tracedata(HOOKID_SYSCALL_RETURN, name) } } + +/* log the system call name */ +function log_syscall_tracedata(var_id:long, name:string) +%{ + _lket_trace(_GROUP_SYSCALL, THIS->var_id, "%0s", THIS->name); +%} + + |