Skip to content

Instantly share code, notes, and snippets.

@kokukuma
Created October 27, 2015 02:39
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kokukuma/61fea56fa03fc5859070 to your computer and use it in GitHub Desktop.
Save kokukuma/61fea56fa03fc5859070 to your computer and use it in GitHub Desktop.
global syscalllist
probe begin {
printf("================================================ Syslog Monitoring Started\n")
}
probe module("nfs").function("*").return
{
syscalllist[execname(), pid(), probefunc()]++
}
probe module("ext4").function("*").return
{
syscalllist[execname(), pid(), probefunc()]++
}
probe module("vboxsf").function("*").return
{
syscalllist[execname(), pid(), probefunc()]++
}
probe kernel.function("generic_file_read_iter")
{
syscalllist[execname(), pid(), probefunc()]++
}
probe end {
foreach ( [exec, pid, func] in syscalllist- ) {
printf("%d %s(%d) %s\n", syscalllist[exec, pid, func], exec, pid , func)
}
exit()
printf("================================================ end\n")
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment