206 Commits

Author SHA1 Message Date
Brendan Gregg
cb42511b96 Merge pull request #71 from acyberexpert/master
correct argument in example
2020-01-14 14:47:11 -08:00
Brendan Gregg
a70d715fc3 Merge pull request #84 from jamagin/fix-81
Fixes #81 - When the kernel informs us of LOST EVENTS, clear lastfile
2020-01-14 14:22:15 -08:00
Brendan Gregg
e87bac32a2 Merge pull request #87 from bastianbeischer/openat
opensnoop: Monitor both sys_exit_open and sys_exit_openat.
2020-01-14 14:17:31 -08:00
Bastian Beischer
e54f006e8c opensnoop: Monitor both sys_exit_open and sys_exit_openat.
In glibc 2.26 and above the open() wrapper function uses the sys_openat syscall
instead of sys_open(), which (for code linked with libc) breaks opensnoop unless
openat is monitored.
2019-06-03 15:32:46 +02:00
Mike Magin
f801597351 Fixes #81 - When the kernel informs us of LOST EVENTS, clear lastfile
Correlating two lines seperated by a gulf of lost events results in
spurious output, for example a open that was attempted on a non-existing
file, but which seems to have resulted in a valid returncode.
2019-04-05 13:30:58 -07:00
acyberexpert
f7474acc3c correct argument in example 2018-05-17 21:58:21 +08:00
Brendan Gregg
98d42a2a14 Merge pull request #49 from guxtavo/documentation-patch
remove blank spaces in top output from execsnoop example
2017-12-19 14:20:48 -08:00
Brendan Gregg
442c3d31ed Merge pull request #62 from scotte/fix_spaces_in_filenames
Fixes #60 - Support filenames with spaces in opensnoop
2017-12-19 14:20:13 -08:00
Brendan Gregg
237ce5f07a Merge pull request #59 from lwindolf/patch-1
Fix usage copy&paste from opensnoop
2017-12-19 14:19:54 -08:00
Scott Emmons
6f53237f12 Fixes #60 - Support filenames with spaces in opensnoop 2017-12-18 17:25:18 -08:00
Lars Windolf
95d12d9254 Fix usage copy&paste from opensnoop 2017-11-14 23:34:28 +01:00
Brendan Gregg
7ffb3fdff8 Merge pull request #54 from EdwardBetts/spelling
correct spelling mistake
2017-09-06 01:33:38 -07:00
Brendan Gregg
5fae92a7b0 Merge pull request #56 from goldshtn/filter-pid
kprobe, opensnoop, tpoint, uprobe: Make -p switch respect all process' threads
2017-09-05 17:00:06 -07:00
Brendan Gregg
f7860d626a Merge pull request #55 from goldshtn/ftrace-pid
funcgraph, funcslower, functrace: Make -p switch respect all the process' threads
2017-09-05 16:59:39 -07:00
Sasha Goldshtein
0d6a509266 opensnoop: Make -s switch respect all process' threads
Signed-off-by: Sasha Goldshtein <goldshtn@gmail.com>
2017-09-04 11:25:30 -04:00
Sasha Goldshtein
b1fceb7239 uprobe: Make -p switch respect all process' threads
Signed-off-by: Sasha Goldshtein <goldshtn@gmail.com>
2017-09-04 11:17:14 -04:00
Sasha Goldshtein
2be76ae91b kprobe: Make -p switch respect all process' threads
Signed-off-by: Sasha Goldshtein <goldshtn@gmail.com>
2017-09-04 11:12:26 -04:00
Sasha Goldshtein
7579fea0dd tpoint: Make -p switch respect all process' threads
This makes -p pass all the process thread ids to the ftrace
common_pid filters. Previously, only the main thread would be
traced for each process. The -L switch now works for only a
single, specified thread.

Signed-off-by: Sasha Goldshtein <goldshtn@gmail.com>
2017-09-04 11:06:39 -04:00
Sasha Goldshtein
8d196f6165 functrace: Make -p switch respect all the process' threads
Signed-off-by: Sasha Goldshtein <goldshtn@gmail.com>
2017-09-04 10:03:06 -04:00
Sasha Goldshtein
cf7532a5e1 funcgraph: Make -p switch respect all the process' threads
Signed-off-by: Sasha Goldshtein <goldshtn@gmail.com>
2017-09-04 10:02:58 -04:00
Sasha Goldshtein
b41b1cd3b8 funcslower: Make -p switch respect all the process' threads
The -p switch used to set the `set_ftrace_pid` file, which is really
a thread id from the user's perspective. As a result, only the main
thread would be traced. Fix by enumerating the thread ids from /proc/
$pid/task and putting them all in `set_ftrace_pid` when asked.

Signed-off-by: Sasha Goldshtein <goldshtn@gmail.com>
2017-09-04 09:36:38 -04:00
Edward Betts
f49e2a97e8 correct spelling mistake 2017-09-01 10:19:56 +01:00
gfigueir
7b678464b8 remove blank spaces in top output from execsnoop example 2017-03-12 07:53:19 +01:00
Brendan Gregg
5a511f5f77 update URL v1.0 2016-04-17 15:57:13 -07:00
Brendan Gregg
29f192d0a2 tools map 2016-04-17 15:55:40 -07:00
Brendan Gregg
0c13e83723 link to newer eBPF/bcc tools 2015-09-19 22:40:38 -07:00
Brendan Gregg
5a2c24587b Merge pull request #36 from DiegoPomares/patch-1
Added filters
2015-08-07 15:50:45 -07:00
Diego Pomares
0eb3456a91 Added filters
The only thing missing is the capability of adding filters, example:

# ... synchronous writes histogram, 5 seconds
perf-stat-hist -f 'rwbs == "WS"' block:block_rq_complete nr_sector 5
2015-08-06 13:38:44 +02:00
Brendan Gregg
94b23cc96c links 2015-07-26 10:50:26 -07:00
Brendan Gregg
80e25785e1 Merge pull request #33 from rgulewich/master
Add lsblk to the "See Also" section
2015-07-23 10:49:08 -07:00
Brendan Gregg
3e05a2de72 Merge pull request #28 from ronin13/syscount-fix
syscount: Fix for perf list and perf script.
2015-07-23 10:48:04 -07:00
Rob Gulewich
4047d0f306 Add lsblk to the "See Also" section 2015-07-21 16:43:05 -07:00
Brendan Gregg
b6c75ffb5e kprobe USAGE message update 2015-07-14 11:52:39 -07:00
Brendan Gregg
06aa0eb988 USAGE message 2015-07-11 11:58:54 -07:00
Raghavendra D Prabhu
56edb4e321 syscount: Fix for perf list and perf script.
perf list adds the header 'List of ..' which requires to be filtered,
otherwise follow up commands fail.

perf script has had its option for fields changed from '-f' to '-F' in
recent perf. Hence, using longer option for compatibility.
2015-07-05 18:43:46 +05:30
Brendan Gregg
30ff475891 avoid listing symbol duplicates 2015-07-02 19:26:28 -07:00
Brendan Gregg
f3eee1f894 mysqld example 2015-07-02 16:36:10 -07:00
Brendan Gregg
e2be680480 handle missing dependencies 2015-07-02 15:36:41 -07:00
Brendan Gregg
e2dc944e78 warning message 2015-07-02 15:27:47 -07:00
Brendan Gregg
e203ba8c62 improve error messages, and better symbol match 2015-07-02 15:12:07 -07:00
Brendan Gregg
2be3c8d079 improve warnings 2015-07-01 12:06:34 -07:00
Brendan Gregg
5103491a8c synopsis 2015-06-29 12:53:35 -07:00
Brendan Gregg
952b85ef56 comment 2015-06-29 12:50:34 -07:00
Brendan Gregg
e1e25a0d6d link 2015-06-29 11:58:42 -07:00
Brendan Gregg
ab991efaa9 more uprobe examples 2015-06-29 00:48:19 -07:00
Brendan Gregg
d1bd15c601 wrong comment 2015-06-29 00:01:13 -07:00
Brendan Gregg
d626d3699e use objdump to find base load addr instead of needing a live process 2015-06-28 19:41:11 -07:00
Brendan Gregg
71086ef90b uprobe for user-level tracing 2015-06-28 13:48:29 -07:00
Brendan Gregg
b4e8f3802c usage message improvement, and drop printing probe name unless debug mode 2015-06-27 17:21:50 -07:00
Brendan Gregg
5ea7fd3975 Merge pull request #26 from yangoliver/master
bitesize: work with different versions of awk and bash
2015-06-27 16:43:14 -07:00