linux-kernel - Re: [RFC PATCH 1/3] Unified trace buffer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <33307c790809250825u567d3680w682899c111e10ed6@mail.gmail.com>
Date:	Thu, 25 Sep 2008 08:25:39 -0700
From:	"Martin Bligh" <mbligh@...gle.com>
To:	"Linus Torvalds" <torvalds@...ux-foundation.org>
Cc:	"Peter Zijlstra" <peterz@...radead.org>,
	"Martin Bligh" <mbligh@...igh.org>,
	"Steven Rostedt" <rostedt@...dmis.org>,
	linux-kernel@...r.kernel.org, "Ingo Molnar" <mingo@...e.hu>,
	"Thomas Gleixner" <tglx@...utronix.de>,
	"Andrew Morton" <akpm@...ux-foundation.org>,
	prasad@...ux.vnet.ibm.com,
	"Mathieu Desnoyers" <compudj@...stal.dyndns.org>,
	"Frank Ch. Eigler" <fche@...hat.com>,
	"David Wilder" <dwilder@...ibm.com>, hch@....de,
	"Tom Zanussi" <zanussi@...cast.net>,
	"Steven Rostedt" <srostedt@...hat.com>
Subject: Re: [RFC PATCH 1/3] Unified trace buffer

>> Right - if you use raw tsc you're dependent on clock speed, if we'd
>> normalize that on ns instead you'd need at least: [...]
>
> Please don't normalize to ns.
>
> It's really quite hard, and it's rather _expensive_ on many CPU's. It
> involves a non-constant 64-bit divide, after all. I bet it can be
> optimized to be a multiply-by-inverse instead, but it would be a 128-bit
> (or maybe just 96-bit?) multiply, and the code would be nasty, and likely
> rather more expensive than the TSC reading itself.
>
> Sure, you have to normalize at _some_ point, and normalizing early might
> make some things simpler, but the main thing that would become easier is
> people messing about in the raw log buffer on their own directly, which
> would hopefully be something that we'd discourage _anyway_ (ie we should
> try to use helper functions for people to do things like "get the next
> event data", not only because the headers are going to be odd due to
> trying to pack things together, but because maybe we can more easily
> extend on them later that way when nobody accesses the headers by hand).
>
> And I don't think normalizing later is in any way more fundamentally hard.
> It just means that you do part of the expensive things after you have
> gathered the trace, rather than during.

Agree with you on doing the expensive stuff later. If we wanted to get
something that'd pack down to a couple fewer bits, and approximate ns,
we could always >> 1 if you were > 2GHz, and >> 2 if you where > 4GHz,
etc. which is at least cheap.

But do we really need more than 3 bits for size anyway? 28 bytes
would fit most events such as system calls, interrupts, page faults,
all the common stuff.. Longer than that starts to be expensive
in memory consumption anyway, and if you're logging 32 bytes
or more ... 2 extra bytes for a length field is a small overhead to pay.

M.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/