FM / process

/usr/share/systemtap/examples/process

Name	Size	Mode	Actions
auditbt.meta	429	0644	edit dl rm
auditbt.stp	622	0755	edit dl rm
auditbt.tcl	79	0644	edit dl rm
chng_cpu.meta	775	0644	edit dl rm
chng_cpu.stp	1049	0755	edit dl rm
chng_cpu.tcl	140	0644	edit dl rm
cycle_thief.meta	1082	0644	edit dl rm
cycle_thief.stp	2893	0755	edit dl rm
cycle_thief.txt	5974	0644	edit dl rm
errsnoop.meta	575	0644	edit dl rm
errsnoop.stp	1015	0755	edit dl rm
forktracker.meta	525	0644	edit dl rm
forktracker.stp	601	0755	edit dl rm
futexes.meta	520	0644	edit dl rm
futexes.stp	1118	0755	edit dl rm
futexes.txt	944	0644	edit dl rm
futexes2.meta	593	0644	edit dl rm
futexes2.stp	2014	0644	edit dl rm
ltrace.meta	314	0644	edit dl rm
ltrace.stp	3007	0755	edit dl rm
ltrace.tcl	122	0644	edit dl rm
migrate.meta	746	0644	edit dl rm
migrate.stp	1037	0755	edit dl rm
mutex-contention.meta	479	0644	edit dl rm
mutex-contention.stp	5559	0755	edit dl rm
mutex-contention.tcl	79	0644	edit dl rm
noptrace.meta	512	0644	edit dl rm
noptrace.stp	2235	0755	edit dl rm
noptrace.txt	1212	0644	edit dl rm
pfiles.meta	450	0644	edit dl rm
pfiles.stp	24523	0755	edit dl rm
plimit.meta	387	0644	edit dl rm
plimit.stp	3029	0755	edit dl rm
procmod_watcher.meta	657	0644	edit dl rm
procmod_watcher.stp	2406	0644	edit dl rm
proctop.meta	601	0644	edit dl rm
proctop.stp	4245	0755	edit dl rm
proctop.txt	8654	0644	edit dl rm
proc_snoop.stp	1133	0755	edit dl rm
proc_snoop_parser.xml	818	0644	edit dl rm
proc_snoop_parser_instructions.txt	2180	0644	edit dl rm
psig.meta	354	0644	edit dl rm
psig.stp	5616	0755	edit dl rm
pstrace_exec.meta	545	0644	edit dl rm
pstrace_exec.stp	465	0755	edit dl rm
pstree.meta	455	0644	edit dl rm
pstree.stp	1957	0755	edit dl rm
rlimit_nofile.meta	319	0644	edit dl rm
rlimit_nofile.stp	1151	0755	edit dl rm
sched-latency.meta	470	0644	edit dl rm
sched-latency.stp	508	0644	edit dl rm
sched-latency.txt	1566	0644	edit dl rm
schedtimes.meta	814	0644	edit dl rm
schedtimes.stp	3949	0755	edit dl rm
schedtimes.txt	3278	0644	edit dl rm
semop-watch.meta	267	0644	edit dl rm
semop-watch.stp	822	0755	edit dl rm
sigkill.meta	560	0644	edit dl rm
sigkill.stp	656	0755	edit dl rm
sigmon.meta	669	0644	edit dl rm
sigmon.stp	932	0755	edit dl rm
sig_by_pid.meta	357	0644	edit dl rm
sig_by_pid.stp	1078	0755	edit dl rm
sig_by_pid.txt	1514	0644	edit dl rm
sig_by_proc.meta	364	0644	edit dl rm
sig_by_proc.stp	851	0755	edit dl rm
sig_by_proc.txt	951	0644	edit dl rm
sleepingBeauties.meta	581	0644	edit dl rm
sleepingBeauties.stp	1364	0755	edit dl rm
sleepingBeauties.tcl	140	0644	edit dl rm
sleeptime.meta	601	0644	edit dl rm
sleeptime.stp	1469	0755	edit dl rm
spawn_seeker.meta	854	0644	edit dl rm
spawn_seeker.stp	1526	0755	edit dl rm
spawn_seeker.txt	1318	0644	edit dl rm
strace.meta	385	0644	edit dl rm
strace.stp	2081	0755	edit dl rm
strace.txt	3672	0644	edit dl rm
syscalls_by_pid.meta	514	0644	edit dl rm
syscalls_by_pid.stp	633	0755	edit dl rm
syscalls_by_pid.txt	597	0644	edit dl rm
syscalls_by_proc.meta	531	0644	edit dl rm
syscalls_by_proc.stp	692	0755	edit dl rm
syscalls_by_proc.txt	1130	0644	edit dl rm
syscalltimes	6291	0755	edit dl rm
syscalltimes.meta	454	0644	edit dl rm
syscalltimes.txt	11459	0644	edit dl rm
thread-business.meta	346	0644	edit dl rm
thread-business.stp	866	0755	edit dl rm
thread-business.txt	2823	0644	edit dl rm
threadstacks.meta	585	0644	edit dl rm
threadstacks.stp	1789	0755	edit dl rm
threadstacks.tcl	79	0644	edit dl rm
wait4time.meta	658	0644	edit dl rm
wait4time.stp	1347	0755	edit dl rm

Edit: /usr/share/systemtap/examples/process/thread-business.txt (2823B)

thread-business.stp - monitor syscall history

Prints a periodic tabular report about the counts of syscall activity
  of all threads on the system, along with a textual
  recent-syscall-history for each

$ stap thread-business.stp -T 5

execname    tid count recent syscalls

stapio  20196    50 ppoll read ppoll read ppoll read ppoll read ppoll 
           sleep  20194    30 nanosleep close mmap2 fstat open brk brk brk munma
   systemd-udevd    491    23 epoll_wait munmap close read read mmap2 fstat open
      irqbalance    625    15 nanosleep munmap close read read mmap2 fstat open 
   systemd-udevd  20193    14 exit_group close close munmap munmap munmap munmap
          stapio  20192     8 pselect6 fcntl read fcntl kill fcntl read fcntl 
          stapio  20194     6 execve execve execve rt_sigprocmask rt_sigaction r

The output when the system is not doing anything interesting.

Rerunning the script while SystemTap was being built.

$ stap thread-business.stp -T 5

execname    tid count recent syscalls

sh  20967 13559 exit_group rt_sigprocmask rt_sigprocmask read lsee
              sh  20826  5088 exit_group rt_sigprocmask rt_sigprocmask read lsee
  git-diff-files  21404  2967 exit_group write fstat mmap2 fstat lstat lstat lst
  git-diff-files  21348  2967 exit_group write fstat mmap2 fstat lstat lstat lst
            sshd   9634  2394 select clock_gettime write clock_gettime rt_sigpro
            make  21312  1110 exit_group munmap close write chdir stat rt_sigpro
            make  21368  1110 exit_group munmap close write chdir stat rt_sigpro
            make  21411  1011 exit_group munmap close write chdir rt_sigprocmask
            make  21410   983 exit_group munmap close write chdir rt_sigprocmask
              sh  21370   978 exit_group read rt_sigprocmask rt_sigprocmask read
              sh  21314   978 exit_group read rt_sigprocmask rt_sigprocmask read
    git-describe  21344   759 exit_group write fstat close getdents getdents ope
    git-describe  21400   759 exit_group write fstat close getdents getdents ope
              sh  20699   539 exit_group rt_sigprocmask rt_sigprocmask rt_sigact
            find  20825   461 exit_group close munmap close write close fchdir c
              sh  21499   403 exit_group rt_sigreturn wait4 rt_sigprocmask close
            find  20965   381 exit_group close munmap close write close fchdir c
         install  21505   359 exit_group close close close lseek lsetxattr close
              sh  21515   340 exit_group rt_sigreturn wait4 rt_sigprocmask close
            make  21367   334 exit_group munmap close write chdir rt_sigprocmask
        execname    tid count recent syscalls

cmd: