global /* register event */ GROUP_REGEVT, HOOKID_REGSYSEVT, HOOKID_REGUSREVT, /* syscall */ GROUP_SYSCALL, HOOKID_SYSCALL_ENTRY, HOOKID_SYSCALL_RETURN, /* process creation */ GROUP_PROCESS, HOOKID_PROCESS_SNAPSHOT, HOOKID_PROCESS_FORK, HOOKID_PROCESS_EXECVE, /* io scheduler */ GROUP_IOSCHED, HOOKID_IOSCHED_ADD_REQ, HOOKID_IOSCHED_NEXT_REQ, HOOKID_IOSCHED_COMPLETE_REQ, /* task dispatching */ GROUP_TASK, HOOKID_TASK_CTXSWITCH, HOOKID_TASK_CPUIDLE, /* scsi */ GROUP_SCSI, HOOKID_SCSI_IOENTRY, HOOKID_SCSI_IO_TO_LLD, HOOKID_SCSI_IODONE_BY_LLD, HOOKID_SCSI_IOCOMP_BY_MIDLEVEL, /* page fault */ GROUP_PAGEFAULT, HOOKID_PAGEFAULT, /* network device */ GROUP_NETDEV, HOOKID_NETDEV_RECEIVE, HOOKID_NETDEV_TRANSMIT, /* io related syscall (not including AIO related calls) */ GROUP_IOSYSCALL, HOOKID_IOSYSCALL_OPEN_ENTRY, HOOKID_IOSYSCALL_OPEN_RETURN, HOOKID_IOSYSCALL_CLOSE_ENTRY, HOOKID_IOSYSCALL_CLOSE_RETURN, HOOKID_IOSYSCALL_READ_ENTRY, HOOKID_IOSYSCALL_READ_RETURN, HOOKID_IOSYSCALL_WRITE_ENTRY, HOOKID_IOSYSCALL_WRITE_RETURN, HOOKID_IOSYSCALL_READV_ENTRY, HOOKID_IOSYSCALL_READV_RETURN, HOOKID_IOSYSCALL_WRITEV_ENTRY, HOOKID_IOSYSCALL_WRITEV_RETURN, HOOKID_IOSYSCALL_PREAD64_ENTRY, HOOKID_IOSYSCALL_PREAD64_RETURN, HOOKID_IOSYSCALL_PWRITE64_ENTRY, HOOKID_IOSYSCALL_PWRITE64_RETURN, HOOKID_IOSYSCALL_READAHEAD_ENTRY, HOOKID_IOSYSCALL_READAHEAD_RETURN, HOOKID_IOSYSCALL_SENDFILE_ENTRY, HOOKID_IOSYSCALL_SENDFILE_RETURN, HOOKID_IOSYSCALL_SENDFILE64_ENTRY, HOOKID_IOSYSCALL_SENDFILE64_RETURN, HOOKID_IOSYSCALL_LSEEK_ENTRY, HOOKID_IOSYSCALL_LSEEK_RETURN, HOOKID_IOSYSCALL_LLSEEK_ENTRY, HOOKID_IOSYSCALL_LLSEEK_RETURN, HOOKID_IOSYSCALL_SYNC_ENTRY, HOOKID_IOSYSCALL_SYNC_RETURN, HOOKID_IOSYSCALL_FSYNC_ENTRY, HOOKID_IOSYSCALL_FSYNC_RETURN, HOOKID_IOSYSCALL_FDATASYNC_ENTRY, HOOKID_IOSYSCALL_FDATASYNC_RETURN, HOOKID_IOSYSCALL_FLOCK_ENTRY, HOOKID_IOSYSCALL_FLOCK_RETURN, /* AIO related calls */ GROUP_AIO, HOOKID_AIO_IO_SETUP_ENTRY, HOOKID_AIO_IO_SETUP_RETURN, HOOKID_AIO_IO_SUBMIT_ENTRY, HOOKID_AIO_IO_SUBMIT_RETURN, HOOKID_AIO_IO_SUBMIT_ONE_ENTRY, HOOKID_AIO_IO_SUBMIT_ONE_RETURN, HOOKID_AIO_IO_GETEVENTS_ENTRY, HOOKID_AIO_IO_GETEVENTS_RETURN, HOOKID_AIO_IO_DESTROY_ENTRY, HOOKID_AIO_IO_DESTROY_RETURN, HOOKID_AIO_IO_CANCEL_ENTRY, HOOKID_AIO_IO_CANCEL_RETURN %{ /* used in embedded c codes */ /* Group ID Definitions */ int _GROUP_REGEVT = 1; int _GROUP_SYSCALL = 2; int _GROUP_PROCESS = 3; int _GROUP_IOSCHED = 4; int _GROUP_TASK = 5; int _GROUP_SCSI = 6; int _GROUP_PAGEFAULT = 7; int _GROUP_NETDEV = 8; int _GROUP_IOSYSCALL = 9; int _GROUP_AIO = 10; /* hookIDs defined inside each group */ int _HOOKID_REGSYSEVT = 1; int _HOOKID_REGUSREVT = 2; int _HOOKID_SYSCALL_ENTRY = 1; int _HOOKID_SYSCALL_RETURN = 2; int _HOOKID_PROCESS_SNAPSHOT = 1; int _HOOKID_PROCESS_EXECVE = 2; int _HOOKID_PROCESS_FORK = 3; int _HOOKID_IOSCHED_ADD_REQ = 1; int _HOOKID_IOSCHED_NEXT_REQ = 2; int _HOOKID_IOSCHED_COMPLETE_REQ = 3; int _HOOKID_TASK_CTXSWITCH = 1; int _HOOKID_TASK_CPUIDLE = 2; int _HOOKID_SCSI_IOENTRY = 1; int _HOOKID_SCSI_IO_TO_LLD = 2; int _HOOKID_SCSI_IODONE_BY_LLD = 3; int _HOOKID_SCSI_IOCOMP_BY_MIDLEVEL = 4; int _HOOKID_PAGEFAULT = 1; int _HOOKID_NETDEV_RECEIVE = 1; int _HOOKID_NETDEV_TRANSMIT = 2; int _HOOKID_IOSYSCALL_OPEN_ENTRY = 1; int _HOOKID_IOSYSCALL_OPEN_RETURN = 2; int _HOOKID_IOSYSCALL_CLOSE_ENTRY = 3; int _HOOKID_IOSYSCALL_CLOSE_RETURN = 4; int _HOOKID_IOSYSCALL_READ_ENTRY = 5; int _HOOKID_IOSYSCALL_READ_RETURN = 6; int _HOOKID_IOSYSCALL_WRITE_ENTRY = 7; int _HOOKID_IOSYSCALL_WRITE_RETURN = 8; int _HOOKID_IOSYSCALL_READV_ENTRY = 9; int _HOOKID_IOSYSCALL_READV_RETURN = 10; int _HOOKID_IOSYSCALL_WRITEV_ENTRY = 11; int _HOOKID_IOSYSCALL_WRITEV_RETURN = 12; int _HOOKID_IOSYSCALL_PREAD64_ENTRY = 13; int _HOOKID_IOSYSCALL_PREAD64_RETURN = 14; int _HOOKID_IOSYSCALL_PWRITE64_ENTRY = 15; int _HOOKID_IOSYSCALL_PWRITE64_RETURN = 16; int _HOOKID_IOSYSCALL_READAHEAD_ENTRY = 17; int _HOOKID_IOSYSCALL_READAHEAD_RETURN = 18; int _HOOKID_IOSYSCALL_SENDFILE_ENTRY = 19; int _HOOKID_IOSYSCALL_SENDFILE_RETURN = 20; int _HOOKID_IOSYSCALL_LSEEK_ENTRY = 21; int _HOOKID_IOSYSCALL_LSEEK_RETURN = 22; int _HOOKID_IOSYSCALL_LLSEEK_ENTRY = 23; int _HOOKID_IOSYSCALL_LLSEEK_RETURN = 24; int _HOOKID_IOSYSCALL_SYNC_ENTRY = 25; int _HOOKID_IOSYSCALL_SYNC_RETURN = 26; int _HOOKID_IOSYSCALL_FSYNC_ENTRY = 27; int _HOOKID_IOSYSCALL_FSYNC_RETURN = 28; int _HOOKID_IOSYSCALL_FDATASYNC_ENTRY = 29; int _HOOKID_IOSYSCALL_FDATASYNC_RETURN = 30; int _HOOKID_IOSYSCALL_FLOCK_ENTRY = 31; int _HOOKID_IOSYSCALL_FLOCK_RETURN = 32; int _HOOKID_AIO_IO_SETUP_ENTRY = 1; int _HOOKID_AIO_IO_SETUP_RETURN = 2; int _HOOKID_AIO_IO_SUBMIT_ENTRY = 3; int _HOOKID_AIO_IO_SUBMIT_RETURN = 4; int _HOOKID_AIO_IO_SUBMIT_ONE_ENTRY = 5; int _HOOKID_AIO_IO_SUBMIT_ONE_RETURN = 6; int _HOOKID_AIO_IO_GETEVENTS_ENTRY = 7; int _HOOKID_AIO_IO_GETEVENTS_RETURN = 8; int _HOOKID_AIO_IO_DESTROY_ENTRY = 9; int _HOOKID_AIO_IO_DESTROY_RETURN = 10; int _HOOKID_AIO_IO_CANCEL_ENTRY = 11; int _HOOKID_AIO_IO_CANCEL_RETURN = 12; %} function hookid_init() { GROUP_REGEVT = 1 HOOKID_REGSYSEVT = 1 HOOKID_REGUSREVT = 2 GROUP_SYSCALL = 2 HOOKID_SYSCALL_ENTRY = 1 HOOKID_SYSCALL_RETURN = 2 GROUP_PROCESS = 3 HOOKID_PROCESS_SNAPSHOT = 1 HOOKID_PROCESS_EXECVE = 2 HOOKID_PROCESS_FORK = 3 GROUP_IOSCHED = 4 HOOKID_IOSCHED_ADD_REQ = 1 HOOKID_IOSCHED_NEXT_REQ = 2 HOOKID_IOSCHED_COMPLETE_REQ = 3 GROUP_TASK = 5 HOOKID_TASK_CTXSWITCH = 1 HOOKID_TASK_CPUIDLE = 2 GROUP_SCSI = 6 HOOKID_SCSI_IOENTRY = 1 HOOKID_SCSI_IO_TO_LLD = 2 HOOKID_SCSI_IODONE_BY_LLD = 3 HOOKID_SCSI_IOCOMP_BY_MIDLEVEL = 4 GROUP_PAGEFAULT = 7 HOOKID_PAGEFAULT = 1 GROUP_NETDEV = 8 HOOKID_NETDEV_RECEIVE = 1 HOOKID_NETDEV_TRANSMIT = 2 GROUP_IOSYSCALL = 9 HOOKID_IOSYSCALL_OPEN_ENTRY = 1 HOOKID_IOSYSCALL_OPEN_RETURN = 2 HOOKID_IOSYSCALL_CLOSE_ENTRY = 3 HOOKID_IOSYSCALL_CLOSE_RETURN = 4 HOOKID_IOSYSCALL_READ_ENTRY = 5 HOOKID_IOSYSCALL_READ_RETURN = 6 HOOKID_IOSYSCALL_WRITE_ENTRY = 7 HOOKID_IOSYSCALL_WRITE_RETURN = 8 HOOKID_IOSYSCALL_READV_ENTRY = 9 HOOKID_IOSYSCALL_READV_RETURN = 10 HOOKID_IOSYSCALL_WRITEV_ENTRY = 11 HOOKID_IOSYSCALL_WRITEV_RETURN = 12 HOOKID_IOSYSCALL_PREAD64_ENTRY = 13 HOOKID_IOSYSCALL_PREAD64_RETURN = 14 HOOKID_IOSYSCALL_PWRITE64_ENTRY = 15 HOOKID_IOSYSCALL_PWRITE64_RETURN = 16 HOOKID_IOSYSCALL_READAHEAD_ENTRY = 17 HOOKID_IOSYSCALL_READAHEAD_RETURN = 18 HOOKID_IOSYSCALL_SENDFILE_ENTRY = 19 HOOKID_IOSYSCALL_SENDFILE_RETURN = 20 HOOKID_IOSYSCALL_LSEEK_ENTRY = 21 HOOKID_IOSYSCALL_LSEEK_RETURN = 22 HOOKID_IOSYSCALL_LLSEEK_ENTRY = 23 HOOKID_IOSYSCALL_LLSEEK_RETURN = 24 HOOKID_IOSYSCALL_SYNC_ENTRY = 25 HOOKID_IOSYSCALL_SYNC_RETURN = 26 HOOKID_IOSYSCALL_FSYNC_ENTRY = 27 HOOKID_IOSYSCALL_FSYNC_RETURN = 28 HOOKID_IOSYSCALL_FDATASYNC_ENTRY = 29 HOOKID_IOSYSCALL_FDATASYNC_RETURN = 30 HOOKID_IOSYSCALL_FLOCK_ENTRY = 31 HOOKID_IOSYSCALL_FLOCK_RETURN = 32 GROUP_AIO = 10 HOOKID_AIO_IO_SETUP_ENTRY = 1 HOOKID_AIO_IO_SETUP_RETURN = 2 HOOKID_AIO_IO_SUBMIT_ENTRY = 3 HOOKID_AIO_IO_SUBMIT_RETURN = 4 HOOKID_AIO_IO_SUBMIT_ONE_ENTRY = 5 HOOKID_AIO_IO_SUBMIT_ONE_RETURN = 6 HOOKID_AIO_IO_GETEVENTS_ENTRY = 7 HOOKID_AIO_IO_GETEVENTS_RETURN = 8 HOOKID_AIO_IO_DESTROY_ENTRY = 9 HOOKID_AIO_IO_DESTROY_RETURN = 10 HOOKID_AIO_IO_CANCEL_ENTRY = 11 HOOKID_AIO_IO_CANCEL_RETURN = 12 } probe begin { hookid_init() lket_trace_init() register_sys_events() write_events_desc() process_snapshot() }