Stack Overflow
Stack Overflow

Questions tagged [systemtap]

Systemtap is tool to probe or trace a running linux system, supporting visibility into both kernel- (its initial focus) and user-space. It uses dynamically loaded probes to gather performance and tracing data about the whole system or just selected processes.

142 questions
0
votes
0 answers

where to find SystemTap event definition

where are the SystemTap events defined? For example, the below probe is for vfs.write.return. How do I know I could probe a component called 'vfs', it can be called 'virtualFs' as well. And there is a variable 'devname' defined. Without a document…
wakaka
  • 103
  • 2
0
votes
1 answer

The non-invasive way to Instrumentation

I'm trying to find a way to monitor Process by hooking it's function. [Process] [thirdparty] ... trigger callback pc --> myfunc(st *s, int b); ------------> …
Nail Jay
  • 267
  • 3
  • 9
0
votes
0 answers

How do I install kernel debug symbols on Amazon Linux AMI?

I'm trying to use System Tap for gdb-helpers (an extension of the C debugger gdb), but I get an error that I've found on Stack to be caused by not having the kernel debug symbols installed (see here: Original Answer). My problem is, I've only found…
Zachary Gillette
  • 1
0
votes
1 answer

Systemtap does not find the tapping points

I was trying to compile my own kernel through clang-13 and run systemtap on that. I have enabled the CONFIG_DEBUG_INFO, CONFIG_DEBUG_KERNEL and all other default debugging configs including CONFIG_KPROBES, CONFIG_UPROBES. Additionally I have…
anon
  • 188
  • 1
  • 13
0
votes
1 answer

Debuginfo for polkit-0.115-11.el8.x86_64

I am trying to use systemtap hooks on polkit functions, but I get an error that I need to install debuginfo. I can't find debuginfo for polkit package - polkit-0.115-11.el8.x86_64. Does anyone know where can I find it? Thnaks. enter image…
gal
  • 1
  • 2
0
votes
1 answer

Systemtap monitor child processes after parent exits

I'm using the example script here with "follow_fork" set to 1: https://sourceware.org/systemtap/examples/process/strace.stp I just have a C program that calls fork() three times called "forker". A systemtap output log is below. You can see that it…
philipsal
  • 21
  • 1
  • 4
0
votes
0 answers

Kernel module to intercept system calls causes issues in execution of userspace programs

I've been trying to write a kernel module (using SystemTap) that would intercept system calls, capture its information and add it to a system call buffer region that is kmalloc'd. I have implemented a mmap file operation so that a user space process…
InertFluid
  • 71
  • 5
0
votes
0 answers

Kernel Installation error: failed to write (No space left on device)

I am installing SystemTap on linux server. When I run the test script: sudo stap -v -e 'probe vfs.read {printf("read performed"); exit()}' I got the below error message. Pass 1: parsed user script and 480 library scripts using…
raina
  • 72
  • 3
  • 9
0
votes
1 answer

Measuring TCP delay from Linux kernel

TCP does not prioritize traffic like IP. When there are a lot of TCP background connections opened that are uploading data (like when BitTorrent is seeding in background) delay may occur for a particular socket because TCP will choose only one…
Calin-Andrei Burloiu
  • 1,481
  • 2
  • 13
  • 25
0
votes
1 answer

Why systemTap script report a read fault near operator error?

I'm running SystemTap on CentOS Linux release 7.6.1810. The version of SystemTap is: $ stap -V Systemtap translator/driver (version 4.0/0.172/0.176, rpm 4.0-11.el7) Copyright (C) 2005-2018 Red Hat, Inc. and others This is free software; see the…
visionken
  • 65
  • 1
  • 7
0
votes
1 answer

Probing a userspace process with systemtap over ebpf begin probe doesn't work

I'm trying to probe a userspace process with a begin probe that doesn't seem to do anything begin.stp: probe process("a.out").begin { printf("%s %d\n", execname(), pid()) } stp output: [root@RHEL8 ~]# stap --bpf -v ~/begin.stp Pass 1: parsed…
Eytan Naim
  • 159
  • 14
0
votes
2 answers

SystemTap support for user space application

I want to know how to add support in the systemtap for user space applications. When I am trying to trace any user space program, it is showing that CONFIG_UTRACE not set.
pradeepchhetri
  • 2,899
  • 6
  • 28
  • 50
0
votes
2 answers

Internals of systemtap

I want to know what actually happens internally when the event written in the tap file occurs and how it is handled?
pradeepchhetri
  • 2,899
  • 6
  • 28
  • 50
0
votes
1 answer

Kernel options required for the installation of Systemtap

I want to install kerneltap in ubuntu. I want to know whether if I need to recompile the kernel again then which options should I turn on in the kernel during recompilation.
pradeepchhetri
  • 2,899
  • 6
  • 28
  • 50
0
votes
0 answers

Embedded C in SystemTap - dereferencing pointer to incomplete type

I am following this tutorial: https://blog.lexfo.fr/cve-2017-11176-linux-kernel-exploitation-part1.html As I try to see what the netlink_sock contains in state, I use this embedded C code: %{ #include #include…
Shahar Zelig
  • 31
  • 3
1 2 3
…
9 10