FM / process

/usr/share/systemtap/examples/process

Name	Size	Mode	Actions
auditbt.meta	429	0644	edit dl rm
auditbt.stp	622	0755	edit dl rm
auditbt.tcl	79	0644	edit dl rm
chng_cpu.meta	775	0644	edit dl rm
chng_cpu.stp	1049	0755	edit dl rm
chng_cpu.tcl	140	0644	edit dl rm
cycle_thief.meta	1082	0644	edit dl rm
cycle_thief.stp	2893	0755	edit dl rm
cycle_thief.txt	5974	0644	edit dl rm
errsnoop.meta	575	0644	edit dl rm
errsnoop.stp	1015	0755	edit dl rm
forktracker.meta	525	0644	edit dl rm
forktracker.stp	601	0755	edit dl rm
futexes.meta	520	0644	edit dl rm
futexes.stp	1118	0755	edit dl rm
futexes.txt	944	0644	edit dl rm
futexes2.meta	593	0644	edit dl rm
futexes2.stp	2014	0644	edit dl rm
ltrace.meta	314	0644	edit dl rm
ltrace.stp	3007	0755	edit dl rm
ltrace.tcl	122	0644	edit dl rm
migrate.meta	746	0644	edit dl rm
migrate.stp	1037	0755	edit dl rm
mutex-contention.meta	479	0644	edit dl rm
mutex-contention.stp	5559	0755	edit dl rm
mutex-contention.tcl	79	0644	edit dl rm
noptrace.meta	512	0644	edit dl rm
noptrace.stp	2235	0755	edit dl rm
noptrace.txt	1212	0644	edit dl rm
pfiles.meta	450	0644	edit dl rm
pfiles.stp	24523	0755	edit dl rm
plimit.meta	387	0644	edit dl rm
plimit.stp	3029	0755	edit dl rm
procmod_watcher.meta	657	0644	edit dl rm
procmod_watcher.stp	2406	0644	edit dl rm
proctop.meta	601	0644	edit dl rm
proctop.stp	4245	0755	edit dl rm
proctop.txt	8654	0644	edit dl rm
proc_snoop.stp	1133	0755	edit dl rm
proc_snoop_parser.xml	818	0644	edit dl rm
proc_snoop_parser_instructions.txt	2180	0644	edit dl rm
psig.meta	354	0644	edit dl rm
psig.stp	5616	0755	edit dl rm
pstrace_exec.meta	545	0644	edit dl rm
pstrace_exec.stp	465	0755	edit dl rm
pstree.meta	455	0644	edit dl rm
pstree.stp	1957	0755	edit dl rm
rlimit_nofile.meta	319	0644	edit dl rm
rlimit_nofile.stp	1151	0755	edit dl rm
sched-latency.meta	470	0644	edit dl rm
sched-latency.stp	508	0644	edit dl rm
sched-latency.txt	1566	0644	edit dl rm
schedtimes.meta	814	0644	edit dl rm
schedtimes.stp	3949	0755	edit dl rm
schedtimes.txt	3278	0644	edit dl rm
semop-watch.meta	267	0644	edit dl rm
semop-watch.stp	822	0755	edit dl rm
sigkill.meta	560	0644	edit dl rm
sigkill.stp	656	0755	edit dl rm
sigmon.meta	669	0644	edit dl rm
sigmon.stp	932	0755	edit dl rm
sig_by_pid.meta	357	0644	edit dl rm
sig_by_pid.stp	1078	0755	edit dl rm
sig_by_pid.txt	1514	0644	edit dl rm
sig_by_proc.meta	364	0644	edit dl rm
sig_by_proc.stp	851	0755	edit dl rm
sig_by_proc.txt	951	0644	edit dl rm
sleepingBeauties.meta	581	0644	edit dl rm
sleepingBeauties.stp	1364	0755	edit dl rm
sleepingBeauties.tcl	140	0644	edit dl rm
sleeptime.meta	601	0644	edit dl rm
sleeptime.stp	1469	0755	edit dl rm
spawn_seeker.meta	854	0644	edit dl rm
spawn_seeker.stp	1526	0755	edit dl rm
spawn_seeker.txt	1318	0644	edit dl rm
strace.meta	385	0644	edit dl rm
strace.stp	2081	0755	edit dl rm
strace.txt	3672	0644	edit dl rm
syscalls_by_pid.meta	514	0644	edit dl rm
syscalls_by_pid.stp	633	0755	edit dl rm
syscalls_by_pid.txt	597	0644	edit dl rm
syscalls_by_proc.meta	531	0644	edit dl rm
syscalls_by_proc.stp	692	0755	edit dl rm
syscalls_by_proc.txt	1130	0644	edit dl rm
syscalltimes	6291	0755	edit dl rm
syscalltimes.meta	454	0644	edit dl rm
syscalltimes.txt	11459	0644	edit dl rm
thread-business.meta	346	0644	edit dl rm
thread-business.stp	866	0755	edit dl rm
thread-business.txt	2823	0644	edit dl rm
threadstacks.meta	585	0644	edit dl rm
threadstacks.stp	1789	0755	edit dl rm
threadstacks.tcl	79	0644	edit dl rm
wait4time.meta	658	0644	edit dl rm
wait4time.stp	1347	0755	edit dl rm

Edit: /usr/share/systemtap/examples/process/proc_snoop.stp (1133B)

#!/usr/bin/stap

global start_ts

probe begin {
  start_ts = gettimeofday_us()
  printf("%12s  %5s  %5s  %-16s  ACTION\n",
         "TIMESTAMP", "PID", "TID", "EXECNAME")
}

function report(action:string) {
  printf("%12d  %5d  %5d  %-16s  %s\n", gettimeofday_us() - start_ts,
         pid(), tid(), execname(), action)
}

function id:string(task:long) {
  return sprintf("p:%d t:%d n:%s", task_pid(task), task_tid(task),
                 task_execname(task))
}

probe kprocess.create {
  report(sprintf("create %s", id(task)))
}

probe kprocess.start {
  report("start")
}

probe kprocess.exec {
  report(sprintf("exec %s", filename))
}

probe kprocess.exec_complete {
  if (success)
    report("exec success")
  else
    report(sprintf("exec failed %d (%s)", errno, errno_str(errno)))
}

probe kprocess.exit {
  report(sprintf("exit %d", code))
}

probe kprocess.release {
  report(sprintf("remove %s", id(task)))
}

probe signal.send {
  report(sprintf("sigsend %d (%s) to %s%s", sig, sig_name, id(task),
                 shared? " [SHARED]" : ""))
}

probe signal.handle {
  report(sprintf("sighandle %d (%s)", sig, sig_name))
}

#!/usr/bin/stap global start_ts probe begin { start_ts = gettimeofday_us() printf("%12s %5s %5s %-16s ACTION\n", "TIMESTAMP", "PID", "TID", "EXECNAME") } function report(action:string) { printf("%12d %5d %5d %-16s %s\n", gettimeofday_us() - start_ts, pid(), tid(), execname(), action) } function id:string(task:long) { return sprintf("p:%d t:%d n:%s", task_pid(task), task_tid(task), task_execname(task)) } probe kprocess.create { report(sprintf("create %s", id(task))) } probe kprocess.start { report("start") } probe kprocess.exec { report(sprintf("exec %s", filename)) } probe kprocess.exec_complete { if (success) report("exec success") else report(sprintf("exec failed %d (%s)", errno, errno_str(errno))) } probe kprocess.exit { report(sprintf("exit %d", code)) } probe kprocess.release { report(sprintf("remove %s", id(task))) } probe signal.send { report(sprintf("sigsend %d (%s) to %s%s", sig, sig_name, id(task), shared? " [SHARED]" : "")) } probe signal.handle { report(sprintf("sighandle %d (%s)", sig, sig_name)) }