search for: execnam

G''Day Folks, I''ve found another use of dtrace, this makes your console keyboard sound like a typewriter. http://www.brendangregg.com/DTrace/typewriter-0.70.tar.gz I''ve only tested it on an UltraSPARC 5 and a Pentium laptop so far, more to follow. Ok, sorry, not actually a practical use of DTrace. :) Enjoy! Brendan [Sydney, Australia]

...utilities like opensnoop and execsnoop etc. My interest is to write a simple script that can snoop the files which uses the 3 syscalls like open,create,unlink. I have gone through dtrace oneliners that can do the same : dtrace -n ''syscall::open*:entry { printf("%s %s",execname,copyinstr(arg0));}'' dtrace -n ''syscall::creat*:entry { printf("%s %s",execname,copyinstr(arg0));}'' dtrace -n ''syscall::unlink*:entry { printf("%s %s",execname,copyinstr(arg0));}'' But how to write a single script that can snoop...

Hi, Is there a way to print out full path name of execname when the following probe is touched? proc:genunix:exec_common:exec-success Thanks. ************************************************ * C P Lin, Common Technology Project Lead. * * Sun Microsystems Inc. * * E-Mail: c.lin at sun.com...

Suppose I have a USDT probe in Firefox and that I''m trying to catch the startup with a probe like this: proc:::exec-success /execname == "firefox-bin"/ { start = timestamp; } and stop tracing when Firefox hits this USDT probe: mozilla:::main-entry { exit(0); } How do I put the running firefox-bin into "trace mode" so that my USDT probe fires? Thanks, Joel --- fastest mac firefox! http://wagerlabs....

I have been doing some profiling using the profile provider. I have a command that runs more slowly on the T1000 than it does on prior systems and I am trying to find out why. Using the profile provider at 1000 hz, and aggregating on the ustack output, I find that the same function appears at the top of the stack on both platforms, but on each there are specific instruction locations within

...ne process is this the correct track to be on here? My aim is to look at a process and look at upping the reboose_interval on some of our servers. #!/usr/sbin/dtrace -s sched:::off-cpu { self->cpu = cpu; self->timestamp=timestamp; } sched:::on-cpu /self->cpu != cpu && execname=="mstragent"/ { printf("%s migrated from cpu %d to cpu %d nsec:%d \n",execname,self->cpu,cpu,timestamp-self->timestamp); printf("%s migrated from cpu %d to cpu %d ms:%d \n",execname,self->cpu,cpu,(timestamp-self->timestamp)/1000000); self->c...

Hi , I have posted DTrace script to snoop tcp traffic and also provided a wrapper script for it to filter out unwanted traffic. http://blogs.sun.com/roller/comments/raviswam/Weblog/tcp_snoop_using_dtrace Please let me know if you have any feedback/comments on this. Thanks Ravi

Just adding a few more details to the previous mail so that I can avoid some trouble for you folks. 1. I have done a /execname != "dtrace"/ to avoid dtrace itself causing more syscalls to be fired. 2. I have also supressed the printing on the terminal which makes dtrace slower. And what happens is this: dtrace -qn ''syscall::read:entry /execname != "dtrace"/ { @[execname] = count();}'...

I''m interested in monitoring the amount of stack used by a multi-threaded program. I assume ''stackdepth'' built-in would be useful...but not sure. Been through demo''s, ToolKit, and internals..but it''s just not clicking for me yet. Not sure how to measure start/end of stack size dynamically...Anyone know how to break this down? This message posted from

is there a way to place regular expressions on predicates like ~ in awk such that /execname ~ prog/ matches all executables with the ''prog'' substring? thanks. This message posted from opensolaris.org

i''m using the following probe to calculate how many bytes are being written by tcp write calls, by process and total: fbt:ip:tcp_output:entry { this->tcpout_size = msgdsize(args[1]); @tcpout_size[execname] = sum(this->tcpout_size); @tcpout_size["TOTAL_TCP_OUT"] = sum(this->tcpout_size); } I run this probe for N seconds. I suppose that if i get the tcpout_size["TOTAL_TCP_OUT"] value and i divide it by N (seconds), i get the number of bytes per second written by tcp_outp...

...4 bit, SXDE3. ] ./jpg1.d dtrace: failed to compile script ./jpg1.d: "/usr/lib/dtrace/iscsi.d", line 94: syntax error near "uiscsiproto_t" Doesn''t matter what script. Even classic oneliners such as: ] dtrace -n ''syscall::open*:entry { printf("%s % s",execname,copyinstr(arg0)); }'' bomb in this way... dtrace: invalid probe specifier syscall::open*:entry { printf("%s % s",execname,copyinstr(arg0)); }: "/usr/lib/dtrace/iscsi.d", line 94: syntax error near "uiscsiproto_t" Thing is, I have another machine (a laptop,...

...lity changes (it utilises one of the five reserved fields). The pr_lgrp field will only be available for consumers with dtrace_kernel privilege since the translator needs to do kernel pointer dereference. This change allows simple script to get lgroup migration statistics, e.g. sched:::on-cpu /execname != "sched" && curlwpsinfo->pr_lgrp != lgrp/ { @[execname, curlwpsinfo->pr_lgrp] = count(); } snmpd 3 1 utmpd 1 1 automountd...

...XXX wr_ptr = YYY I find the bug description/correction at sun web page, and i know i can ignore it. I thinking about how can i delete from console only these messages (here is my first version, what is not (so) elegant): #!/usr/sbin/dtrace -qs #pragma D option destructive syscall::write:entry / execname == "syslogd" && (self->class = copyinstr(arg1)) != NULL && 90 < strlen(self->class) / { self->addr = arg1; copyoutstr("Clear nxge_ipp_eccue_valid_check messages", self->addr, 100); } Problems with this script: 1. It change all sys...

Hi I have a process which reads a socket using recvfrom. After sometime, for no apparent reason, recvfrom exits with an EINTR causing the sender to barf too. Basically the socket on which these processes were communicating no longer exists. On writing a dtrace, I could determine that a signal was received at that socket causing the EINTR. I do not know of way to see who sent the signal (which

Hi All, One of the customer is seeing the following error messages. He is using a S10U1 system with all latest patches. Dtrace script is attached. I am not seeing these error messages on S10U2 system. What could be the problem? Thanks, Gangadhar. ------------------------------------------------------------------------ rroberto at njengsunu60-2:~$ dtrace -AFs /lib/svc/share/kcfd.d dtrace:

...as interested in using DTrace to figure out the total time for which each thread in my application sleeps, blocked on a semaphore, i.e., as a result of sem_wait() call. In order to measure this, I wrote a script with sched:::sleep and sched:wakeup probes enabled, as shown below: sched:::sleep /execname == "myexecname"/ { ustack(); bedtime[curlwpsinfo->pr_addr,curlwpsinfo->pr_stype] = walltimestamp; } sched:::wakeup /bedtime[args[0]->pr_addr,args[0]->pr_stype]/ { @sleeptime[execname,args[0]->pr_lwpid,args[0]->pr_addr,args[0]->pr_stype] = sum(wal...

Greetings, is there a way to specify probes and other dtrace operations via command line parameters, like " BEGIN { usr_exec=$$1; usr_syscall=$$2; } syscall::usr_syscall:entry /execname == usr_exec && guard++ == 0/ { ... " [this does not work] This would make it possible to create "generic" dtrace scripts. Otherwise, some shellscript with sed-magic would need to be used. thanks Joachim -- Joachim Worringen, Software Architect, Dolphin Interconnect So...

everyone, Just out of curiosity, I did a dtrace -n ''syscall:::entry { @num[execname, probefunc] = count(); }'' and looked at the entries produced by ''rm''. I see everything that rm did, *except* the unlinkat - which is unfortunate because I want to trace which processes have deleted which files. So - does dtrace contain unlinkat as a probe for a system...

Howdy, Is there a method to get the number of elements in an aggregation? Are the results stored in an aggregation guaranteed to be in any type of order? Thanks for any insight, - Ryan -- UNIX Administrator http://daemons.net/~matty