linux-kernel - LTTng 0.88 adds dynamic instrumentation support (kprobes)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20090129234203.GA20044@Krystal>
Date:	Thu, 29 Jan 2009 18:42:03 -0500
From:	Mathieu Desnoyers <mathieu.desnoyers@...ymtl.ca>
To:	ltt-dev@...ts.casi.polymtl.ca, linux-kernel@...r.kernel.org
Cc:	Ananth N Mavinakayanahalli <ananth@...ibm.com>,
	anil.s.keshavamurthy@...el.com, davem@...emloft.net
Subject: LTTng 0.88 adds dynamic instrumentation support (kprobes)

Hi,

LTTng 0.88 and LTTV 0.12.9 now support dynamic kernel instrumentation
with kprobes through a simple /mnt/debugfs/ltt/kprobes/ interface.

Usage example :

ltt-armall
echo do_fork > /mnt/debugfs/ltt/kprobes/enable
lttctl -C -w /tmp/trace trace
(so something)
lttctl -D trace
lttv -m textDump -e event.name=kernel.kprobe -t /tmp/trace

Trace set contains 1 traces

kernel.kprobe: 2486.393516120 (/tmp/trace/kernel_2), 0, 0, , , 0, 0x0,
    MODE_UNKNOWN { ip = FFFFFFFF8023CDC0 }
kernel.kprobe: 2489.826739495 (/tmp/trace/kernel_2), 25527, 25527, bash,
    , 25526, 0x0, SYSCALL { ip = FFFFFFFF8023CDC0 [do_fork+0x0/0x3e0] }
kernel.kprobe: 2491.618955019 (/tmp/trace/kernel_6), 25527, 25527, bash,
    , 25526, 0x0, SYSCALL { ip = FFFFFFFF8023CDC0 [do_fork+0x0/0x3e0] }
End trace set

Enable, disable and list operations are availables to manipulate the
active LTTng kprobes.

LTTV 0.12.9 adds support to print the symbol names along with the
kprobes addresses.

Mathieu

-- 
Mathieu Desnoyers
OpenPGP key fingerprint: 8CD5 52C3 8E3C 4140 715F  BA06 3F25 A8FE 3BAE 9A68
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/