blob: 3b5e751df517b9773b50865eebd0d518db95d907 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
|
.\" -*- nroff -*-
.TH STAPPROBES.PROCESS 3stap @DATE@ "Intel, IBM"
.SH NAME
stapprobes.process \- systemtap process probe points
.\" macros
.de SAMPLE
.br
.RS
.nf
.nh
..
.de ESAMPLE
.hy
.fi
.RE
..
.SH DESCRIPTION
This family of probe points is used to probe the process activities.
It contains the following probe points:
.P
.TP
.B process.create
Fires whenever a new process is successfully created, either as a
result of one of the fork syscall variants, or a new kernel thread.
.B Arguments:
.I task
a handle to the newly created process
.I new_pid
pid of the newly created process
.P
.TP
.B process.start
Fires immediately before a new process begins execution.
.B Arguments:
.I N/A
.P
.TP
.B process.exec
Fires whenever a process attempts to exec to a new program
.B Arguments:
.I filename
the path to the new executable
.P
.TP
.B process.exec_complete
Fires at the completion of an exec call
.B Arguments:
.I errno
the error number resulting from the exec
.I success
a boolean indicating whether the exec was successful
.P
.TP
.B process.exit
Fires when a process terminates. This will always be followed by a
process.release, though the latter may be delayed if the process
waits in a zombie state.
.B Arguments:
.I code
the exit code of the process
.P
.TP
.B process.release
Fires when a process is released from the kernel. This always
follows a process.exit, though it may be delayed somewhat if the
process waits in a zombie state.
.B Arguments:
.I task
a task handle to the process being released
.I pid
pid of the process being released
.SH SEE ALSO
.IR stap (1),
.IR stapprobes (3stap),
|