FM / io

/usr/share/systemtap/examples/io

Name	Size	Mode	Actions
capture_ssl_master_secrets.meta	664	0644	edit dl rm
capture_ssl_master_secrets.stp	1090	0755	edit dl rm
capture_ssl_master_secrets.txt	1907	0644	edit dl rm
deviceseeks.meta	490	0644	edit dl rm
deviceseeks.stp	1292	0755	edit dl rm
deviceseeks.txt	5395	0644	edit dl rm
disktop.meta	381	0644	edit dl rm
disktop.stp	1794	0755	edit dl rm
eatmydata.meta	337	0644	edit dl rm
eatmydata.stp	1188	0755	edit dl rm
eatmydata.txt	304	0644	edit dl rm
enospc.meta	332	0644	edit dl rm
enospc.stp	2318	0755	edit dl rm
inodewatch.meta	475	0644	edit dl rm
inodewatch.stp	245	0755	edit dl rm
inodewatch2.meta	504	0644	edit dl rm
inodewatch2.stp	390	0755	edit dl rm
ioblktime.meta	769	0644	edit dl rm
ioblktime.stp	788	0755	edit dl rm
iodevstats.meta	738	0644	edit dl rm
iodevstats.stp	1152	0755	edit dl rm
iodevstats.txt	528	0644	edit dl rm
iostat-scsi.meta	608	0644	edit dl rm
iostat-scsi.stp	4366	0755	edit dl rm
iostat-scsi.txt	481	0644	edit dl rm
iostats.meta	671	0644	edit dl rm
iostats.stp	1154	0755	edit dl rm
iostats.txt	361	0644	edit dl rm
iotime.meta	1024	0644	edit dl rm
iotime.stp	2893	0755	edit dl rm
iotop.meta	410	0644	edit dl rm
iotop.stp	624	0755	edit dl rm
io_submit.meta	508	0644	edit dl rm
io_submit.stp	1906	0755	edit dl rm
io_submit.tcl	140	0644	edit dl rm
mbrwatch.meta	559	0644	edit dl rm
mbrwatch.stp	234	0755	edit dl rm
mbrwatch.tcl	140	0644	edit dl rm
mbrwatch.txt	788	0644	edit dl rm
nfs_func_users.meta	665	0644	edit dl rm
nfs_func_users.stp	341	0755	edit dl rm
slowvfs.meta	426	0644	edit dl rm
slowvfs.stp	281	0755	edit dl rm
switchfile.meta	330	0644	edit dl rm
switchfile.stp	231	0644	edit dl rm
traceaio.c	2624	0644	edit dl rm
traceaio.meta	331	0644	edit dl rm
traceaio.stp	1825	0755	edit dl rm
traceaio.txt	2761	0644	edit dl rm
traceio.meta	403	0644	edit dl rm
traceio.stp	1384	0755	edit dl rm
traceio2.meta	400	0644	edit dl rm
traceio2.stp	494	0755	edit dl rm
ttyspy.meta	521	0644	edit dl rm
ttyspy.stp	1750	0755	edit dl rm
ttyspy.txt	455	0644	edit dl rm

Edit: /usr/share/systemtap/examples/io/ttyspy.stp (1750B)

#!/usr/bin/stap
# May also need --skip-badvars

global activity_time, activity_log

/* Concatenate head and tail, to a max of @num chars, preferring to keep the tail
   (as if it were a recent history buffer). */
function strcattail:string(head:string,tail:string,num:long) %{ /* pure */
         unsigned taillen = strlen(STAP_ARG_tail);
         unsigned headlen = strlen(STAP_ARG_head);
         unsigned maxlen = STAP_ARG_num < MAXSTRINGLEN ? STAP_ARG_num : MAXSTRINGLEN;
         unsigned headkeep = min(maxlen-taillen,headlen);
         unsigned headdrop = headlen-headkeep;

if (headkeep)
            strlcpy (STAP_RETVALUE, &STAP_ARG_head[headdrop], headkeep+1); /* includes \0 */
         strlcat (STAP_RETVALUE, STAP_ARG_tail, maxlen);
%}

probe kernel.function("tty_audit_add_data") {
      major=$tty->driver->major;
      minor=$tty->driver->minor_start + $tty->index;
      try { pgrp=@choose_defined($tty->ctrl->pgrp->numbers[0]->nr,
            $tty->pgrp %( kernel_v >= "2.6.24" %? ->numbers[0]->nr %: %) )}
      catch { }
      data=kernel_string_n($data,$size);
      uid=uid()

activity_time[major,minor,pgrp,uid] = gettimeofday_s();
      activity_log[major,minor,pgrp,uid]
       = strcattail(activity_log[major,minor,pgrp,uid],data,40);
}

probe timer.s(3) {
      ansi_clear_screen ()
      printf("(%3s,%2s,%5s,%5s)\n", "maj","min","pgrp","uid");
      foreach ([x,y,z,u] in activity_time-) {
              printf("(%3d,%3d,%5d,%5d) %s\n", x,y,z,u,
               text_str(activity_log[x,y,z,u]))
      }

/* delete last record, if older than 60 seconds */
      if (activity_time[x,y,z,u]+60 < gettimeofday_s()) {
         delete activity_time[x,y,z,u]
         delete activity_log[x,y,z,u]
      }
}

#!/usr/bin/stap # May also need --skip-badvars global activity_time, activity_log /* Concatenate head and tail, to a max of @num chars, preferring to keep the tail (as if it were a recent history buffer). */ function strcattail:string(head:string,tail:string,num:long) %{ /* pure */ unsigned taillen = strlen(STAP_ARG_tail); unsigned headlen = strlen(STAP_ARG_head); unsigned maxlen = STAP_ARG_num < MAXSTRINGLEN ? STAP_ARG_num : MAXSTRINGLEN; unsigned headkeep = min(maxlen-taillen,headlen); unsigned headdrop = headlen-headkeep; if (headkeep) strlcpy (STAP_RETVALUE, &STAP_ARG_head[headdrop], headkeep+1); /* includes \0 */ strlcat (STAP_RETVALUE, STAP_ARG_tail, maxlen); %} probe kernel.function("tty_audit_add_data") { major=$tty->driver->major; minor=$tty->driver->minor_start + $tty->index; try { pgrp=@choose_defined($tty->ctrl->pgrp->numbers[0]->nr, $tty->pgrp %( kernel_v >= "2.6.24" %? ->numbers[0]->nr %: %) )} catch { } data=kernel_string_n($data,$size); uid=uid() activity_time[major,minor,pgrp,uid] = gettimeofday_s(); activity_log[major,minor,pgrp,uid] = strcattail(activity_log[major,minor,pgrp,uid],data,40); } probe timer.s(3) { ansi_clear_screen () printf("(%3s,%2s,%5s,%5s)\n", "maj","min","pgrp","uid"); foreach ([x,y,z,u] in activity_time-) { printf("(%3d,%3d,%5d,%5d) %s\n", x,y,z,u, text_str(activity_log[x,y,z,u])) } /* delete last record, if older than 60 seconds */ if (activity_time[x,y,z,u]+60 < gettimeofday_s()) { delete activity_time[x,y,z,u] delete activity_log[x,y,z,u] } }