1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
This README file is made of information gathered from the LTT web
pages at http://www.opersys.com/LTT/news.html
custom.c is an example kernel module that uses the custom event tracing
facilities provided. And here is the output resulting from tracing while this
module is loaded and unloaded:
Syscall exit 975,040,384,033,092
Syscall entry 975,040,384,033,167 SYSCALL : init_module; EIP : 0x0804A82D
Memory 975,040,384,033,168 PAGE ALLOC ORDER : 0
Memory 975,040,384,033,173 PAGE ALLOC ORDER : 0
Memory 975,040,384,033,178 PAGE FREE ORDER : 0
Memory 975,040,384,033,179 PAGE FREE ORDER : 0
Event creation 975,040,384,033,184 NEW EVENT TYPE : Alpha
Event creation 975,040,384,033,188 NEW EVENT TYPE : Omega
Event creation 975,040,384,033,191 NEW EVENT TYPE : Theta
Event creation 975,040,384,033,194 NEW EVENT TYPE : Delta
Event creation 975,040,384,033,196 NEW EVENT TYPE : Rho
Alpha 975,040,384,033,209 Number 1, String We are initializing the
Omega 975,040,384,033,212 Number 25, Char c
Theta 975,040,384,033,213 Plain string
Delta 975,040,384,033,215 00 00 00 00 00 00 00 00
Rho 975,040,384,033,216 12
Syscall exit 975,040,384,033,217
Syscall entry 975,040,384,033,249 SYSCALL : close; EIP : 0x0804AE41
File system 975,040,384,033,251 CLOSE : 3
Syscall exit 975,040,384,033,255
Although DProbes is only available for the i386 (for now), the custom even
tracing functions of LTT will work both on the i386 and the PPC.
|
