blob: beea8a4ccfa9f3eb128f8c6f3beef3ff5c9a428d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
#! stap -p2
# these will ultimately be somehow associated with "providers"
# and have a syntax of their own
global kernel_jiffies, kernel_current_comm
function kernel_netlink(a, b) {
# this should be a builtin function
return 0
}
function stamp (syscall)
{
kernel_netlink (4, kernel_jiffies . " " .
kernel_current_comm . " " . syscall);
return 0
}
# probe kernel:syscall:read = kernel:function("sys_read");
probe begin /* syscall ("read") */
{
stamp ("read");
}
|