On Fri, Jun 08, 2018 at 10:47 -0700, I wrote:
> Ok, I'll dig around a bit more and also double-check that I didn't > change any settings in the meantime. Confirmed that I'm still seeing that difference even when using the options to turn the stores. Tried it on two different Fedora 28 systems, with similar results. I haven't been able to nail down what's going on though. The AdvanceTime() method does seem to do a lot of locking in pcap mode, independent of whether there's actually any data store operations. However, I tried a quick hack to get that down and that didn't change anything. I then ran it through oprofile. Output is attached. There's indeed some locking showing up high in there, but I can't tell if that's just expected idling in CAF. I am bit surprised to see a number of std::chrono() methods showing rather prominently that I would expect to be cheap. Robin -- Robin Sommer * ICSI/LBNL * ro...@icir.org * www.icir.org/robin
Using /home/robin/bro/master/tmp/oprofile_data/samples/ for samples directory. WARNING! Some of the events were throttled. Throttling occurs when the initial sample rate is too high, causing an excessive number of interrupts. Decrease the sampling frequency. Check the directory /home/robin/bro/master/tmp/oprofile_data/samples/current/stats/throttled for the throttled event names. WARNING: Lost samples detected! See /home/robin/bro/master/tmp/oprofile_data/samples/operf.log for details. warning: /hpsa could not be found. warning: /kvm could not be found. warning: /nf_conntrack could not be found. warning: /nf_defrag_ipv4 could not be found. warning: /nf_nat could not be found. warning: /nf_nat_ipv4 could not be found. warning: /tg3 could not be found. CPU: Intel Sandy Bridge microarchitecture, speed 2000 MHz (estimated) Counted CPU_CLK_UNHALTED events (Clock cycles when not halted) with a unit mask of 0x00 (No unit mask) count 100000 samples % image name symbol name 48605 3.3738 kallsyms find_busiest_group 31108 2.1593 libtcmalloc.so.4.5.1 /usr/lib64/libtcmalloc.so.4.5.1 24088 1.6720 bro RE_Match_State::Match(unsigned char const*, int, bool, bool, bool) 22833 1.5849 kallsyms native_write_msr 20525 1.4247 kallsyms finish_task_switch 20314 1.4100 kallsyms syscall_return_via_sysret 16822 1.1677 kallsyms __softirqentry_text_start 16520 1.1467 libcaf_core.so.0.15.7 caf::detail::double_ended_queue<caf::resumable>::lock_guard::lock_guard(std::atomic_flag&) 15112 1.0490 kallsyms update_blocked_averages 12897 0.8952 kallsyms run_timer_softirq 12890 0.8947 kallsyms pick_next_task_fair 12729 0.8836 libpthread-2.27.so nanosleep 12495 0.8673 kallsyms update_curr 12209 0.8475 kallsyms _raw_spin_lock 12186 0.8459 libcaf_core.so.0.15.7 caf::resumable* caf::policy::work_stealing::dequeue<caf::scheduler::worker<caf::policy::work_stealing> >(caf::scheduler::worker<caf::policy::work_stealing>*) 11979 0.8315 kallsyms __schedule 11886 0.8250 kallsyms __update_load_avg_cfs_rq.isra.34 11463 0.7957 kallsyms idle_cpu 11239 0.7801 kallsyms __update_load_avg_se.isra.33 11178 0.7759 kallsyms native_sched_clock 11010 0.7642 kallsyms update_load_avg 10854 0.7534 libcaf_core.so.0.15.7 std::atomic<caf::detail::double_ended_queue<caf::resumable>::node*>::load(std::memory_order) const 10770 0.7476 kallsyms load_balance 10737 0.7453 libcaf_core.so.0.15.7 decltype (({parm#1}->data)()) caf::policy::unprofiled::d<caf::scheduler::worker<caf::policy::work_stealing> >(caf::scheduler::worker<caf::policy::work_stealing>*) 10582 0.7345 bro DFA_State::Xtion(int, DFA_Machine*) 10554 0.7326 libcaf_core.so.0.15.7 caf::detail::double_ended_queue<caf::resumable>::take_head() 10185 0.7070 bro RandTest::add(void const*, int) 10133 0.7034 libcaf_core.so.0.15.7 std::__uniq_ptr_impl<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::_M_ptr() 9920 0.6886 libstdc++.so.6.0.25 /usr/lib64/libstdc++.so.6.0.25 9813 0.6811 kallsyms swapgs_restore_regs_and_return_to_usermode 9685 0.6723 kallsyms trigger_load_balance 9431 0.6546 libcaf_core.so.0.15.7 std::tuple_element<0ul, std::tuple<caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> > >::type& std::get<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >(std::tuple<caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >&) 9404 0.6528 libcaf_core.so.0.15.7 caf::scheduler::worker<caf::policy::work_stealing>::data() 9350 0.6490 kallsyms do_syscall_64 9311 0.6463 libcaf_core.so.0.15.7 std::enable_if<std::__and_<std::__not_<std::__is_tuple_like<caf::detail::double_ended_queue<caf::resumable>::node*> >, std::is_move_constructible<caf::detail::double_ended_queue<caf::resumable>::node*>, std::is_move_assignable<caf::detail::double_ended_queue<caf::resumable>::node*> >::value, void>::type std::swap<caf::detail::double_ended_queue<caf::resumable>::node*>(caf::detail::double_ended_queue<caf::resumable>::node*&, caf::detail::double_ended_queue<caf::resumable>::node*&) 9297 0.6453 libbroker.so.. std::operator&(std::memory_order, std::__memory_order_modifier) 9194 0.6382 bro DFA_State::Accept() const 9009 0.6253 kallsyms _raw_spin_lock_irqsave 8818 0.6121 libcaf_core.so.0.15.7 std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::_M_head(std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >&) 8690 0.6032 libcaf_core.so.0.15.7 caf::detail::double_ended_queue<caf::resumable>::node*& std::__get_helper<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >(std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >&) 8643 0.5999 kallsyms queued_spin_lock_slowpath 8622 0.5985 kallsyms irq_work_interrupt 8246 0.5724 libcaf_core.so.0.15.7 std::_Head_base<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, false>::_M_head(std::_Head_base<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, false>&) 8095 0.5619 libcaf_core.so.0.15.7 std::unique_ptr<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::reset(caf::detail::double_ended_queue<caf::resumable>::node*) 7881 0.5470 libbroker.so.. std::chrono::duration<long, std::ratio<1l, 1000000l> >::count() const 7790 0.5407 libcaf_core.so.0.15.7 caf::detail::double_ended_queue<caf::resumable>::lock_guard::~lock_guard() 7732 0.5367 libcaf_core.so.0.15.7 void std::this_thread::sleep_for<long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&) 7502 0.5207 kallsyms update_cfs_group 7328 0.5087 libpthread-2.27.so __pthread_disable_asynccancel 7143 0.4958 kallsyms cpuacct_charge 6975 0.4842 libcaf_core.so.0.15.7 std::_Head_base<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, false>::_M_head(std::_Head_base<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, false> const&) 6972 0.4839 libc-2.27.so __GI___strlen_sse2 6606 0.4585 kallsyms enqueue_task_fair 6543 0.4542 kallsyms rebalance_domains 6239 0.4331 kallsyms irq_exit 6174 0.4286 bro ones_complement_checksum(void const*, int, unsigned int) 6160 0.4276 libcaf_core.so.0.15.7 std::unique_ptr<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::operator->() const 6047 0.4197 libcaf_core.so.0.15.7 unsigned long std::uniform_int_distribution<unsigned long>::operator()<std::linear_congruential_engine<unsigned long, 16807ul, 0ul, 2147483647ul> >(std::linear_congruential_engine<unsigned long, 16807ul, 0ul, 2147483647ul>&, std::uniform_int_distribution<unsigned long>::param_type const&) 5997 0.4163 libc-2.27.so vfprintf 5964 0.4140 libcaf_core.so.0.15.7 std::unique_ptr<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::get() const 5769 0.4004 libcaf_core.so.0.15.7 std::__uniq_ptr_impl<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::_M_ptr() const 5650 0.3922 kallsyms entry_SYSCALL_64_after_hwframe 5639 0.3914 kallsyms irqtime_account_irq 5507 0.3823 libcaf_core.so.0.15.7 std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::_M_head(std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> > const&) 5485 0.3807 kallsyms try_to_wake_up 5388 0.3740 kallsyms find_next_and_bit 5287 0.3670 kallsyms do_nanosleep 5287 0.3670 libpthread-2.27.so pthread_mutex_lock 5264 0.3654 libcaf_core.so.0.15.7 std::__atomic_base<caf::detail::double_ended_queue<caf::resumable>::node*>::operator caf::detail::double_ended_queue<caf::resumable>::node*() const 5220 0.3623 kallsyms nohz_balance_exit_idle 5210 0.3616 libpthread-2.27.so pthread_cond_timedwait@@GLIBC_2.3.2 5106 0.3544 kallsyms find_next_bit 4957 0.3441 libcaf_core.so.0.15.7 std::remove_reference<caf::detail::double_ended_queue<caf::resumable>::node*&>::type&& std::move<caf::detail::double_ended_queue<caf::resumable>::node*&>(caf::detail::double_ended_queue<caf::resumable>::node*&) 4882 0.3389 [vdso] (tgid:46504 range:0x7ffe89dfa000-0x7ffe89dfbfff) [vdso] (tgid:46504 range:0x7ffe89dfa000-0x7ffe89dfbfff) 4878 0.3386 kallsyms account_entity_enqueue 4871 0.3381 kallsyms __next_timer_interrupt 4738 0.3289 libcaf_core.so.0.15.7 caf::detail::double_ended_queue<caf::resumable>::node* const& std::__get_helper<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >(std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> > const&) 4729 0.3283 bro BaseList::operator[](int) const 4698 0.3261 kallsyms _raw_spin_lock_irq 4682 0.3250 kallsyms timerqueue_add 4535 0.3148 kallsyms enqueue_entity 4500 0.3124 libcaf_core.so.0.15.7 std::uniform_int_distribution<unsigned long>::param_type::b() const 4431 0.3076 kallsyms update_rq_clock 4341 0.3013 kallsyms check_preempt_wakeup 4338 0.3011 kallsyms hrtimer_nanosleep 4319 0.2998 bro threading::Queue<threading::BasicInputMessage*>::Get() 4280 0.2971 kallsyms __hrtimer_run_queues 4255 0.2954 kallsyms _raw_spin_trylock 4180 0.2901 libcaf_core.so.0.15.7 std::__uniq_ptr_impl<caf::scheduler::worker<caf::policy::work_stealing>, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >::_M_ptr() const 4118 0.2858 kallsyms __calc_delta 4111 0.2854 kallsyms __radix_tree_lookup 4110 0.2853 bro std::chrono::duration<long, std::ratio<1l, 1000000000l> >::count() const 4102 0.2847 libcaf_core.so.0.15.7 std::unique_ptr<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::release() 4078 0.2831 libcaf_core.so.0.15.7 std::__detail::_Mod<unsigned long, 2147483647ul, 16807ul, 0ul, true, true>::__calc(unsigned long) 3918 0.2720 libcaf_core.so.0.15.7 std::tuple_element<0ul, std::tuple<caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> > >::type const& std::get<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >(std::tuple<caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> > const&) 3916 0.2718 libbroker.so.. std::chrono::duration<long, std::ratio<1l, 1000000l> >::duration<long, void>(long const&) 3880 0.2693 bro std::chrono::duration_values<long>::zero() 3854 0.2675 bro std::chrono::duration<long, std::ratio<1l, 1000000000l> >::duration<long, void>(long const&) 3852 0.2674 kallsyms ktime_get 3837 0.2663 libcaf_core.so.0.15.7 caf::scheduler::abstract_coordinator::num_workers() const 3802 0.2639 kallsyms account_entity_dequeue 3798 0.2636 kallsyms sys_nanosleep 3758 0.2609 libcaf_core.so.0.15.7 std::unique_ptr<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::~unique_ptr() 3699 0.2568 libcaf_core.so.0.15.7 unsigned long std::uniform_int_distribution<unsigned long>::operator()<std::linear_congruential_engine<unsigned long, 16807ul, 0ul, 2147483647ul> >(std::linear_congruential_engine<unsigned long, 16807ul, 0ul, 2147483647ul>&) 3634 0.2522 libcaf_core.so.0.15.7 std::atomic<caf::detail::double_ended_queue<caf::resumable>::node*>::operator caf::detail::double_ended_queue<caf::resumable>::node*() const 3612 0.2507 libpthread-2.27.so __pthread_mutex_unlock_usercnt 3609 0.2505 libcaf_core.so.0.15.7 caf::resumable* caf::policy::work_stealing::try_steal<caf::scheduler::worker<caf::policy::work_stealing> >(caf::scheduler::worker<caf::policy::work_stealing>*) 3563 0.2473 libcaf_core.so.0.15.7 unsigned long std::__detail::__mod<unsigned long, 2147483647ul, 16807ul, 0ul>(unsigned long) 3531 0.2451 kallsyms _raw_spin_unlock_irqrestore 3492 0.2424 kallsyms read_tsc 3466 0.2406 bro Unref(BroObj*) 3427 0.2379 libcaf_core.so.0.15.7 std::chrono::duration<long, std::ratio<1l, 1000000l> >::zero() 3417 0.2372 kallsyms __queue_work 3414 0.2370 kallsyms cyc2ns_read_begin.part.2 3359 0.2332 libcaf_core.so.0.15.7 caf::scheduler::worker<caf::policy::work_stealing>* const& std::__get_helper<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >(std::_Tuple_impl<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > > const&) 3350 0.2325 kallsyms run_rebalance_domains 3308 0.2296 kallsyms insert_work 3295 0.2287 kallsyms copy_user_generic_string 3283 0.2279 libcrypto.so.1.0.2o /usr/lib64/libcrypto.so.1.0.2o 3264 0.2266 kallsyms irq_work_run_list 3242 0.2250 libcaf_core.so.0.15.7 caf::scheduler::coordinator<caf::policy::work_stealing>::worker_by_id(unsigned long) 3218 0.2234 libbroker.so.. std::chrono::duration<long, std::ratio<1l, 1000000000l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::ratio<1000l, 1l>, long, false, true>::__cast<long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&) 3173 0.2202 kallsyms hrtimer_active 3160 0.2193 kallsyms task_tick_fair 3128 0.2171 libc-2.27.so clock_gettime 3097 0.2150 kallsyms hrtimer_start_range_ns 3061 0.2125 libcaf_core.so.0.15.7 std::_Tuple_impl<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >::_M_head(std::_Tuple_impl<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > > const&) 3036 0.2107 bro _siphash 3006 0.2087 kallsyms reweight_entity 2989 0.2075 kallsyms apic_timer_interrupt 2944 0.2044 kallsyms dequeue_task_fair 2928 0.2032 libcaf_core.so.0.15.7 caf::scheduler::worker<caf::policy::work_stealing>::parent() 2921 0.2028 bro std::chrono::duration<long, std::ratio<1l, 1l> >::count() const 2907 0.2018 bro std::chrono::duration<long, std::ratio<1l, 1l> >::duration<long, void>(long const&) 2852 0.1980 libcaf_core.so.0.15.7 std::linear_congruential_engine<unsigned long, 16807ul, 0ul, 2147483647ul>::operator()() 2801 0.1944 bro BaseList::length() const 2773 0.1925 libc-2.27.so _IO_default_xsputn 2765 0.1919 kallsyms rcu_process_callbacks 2764 0.1919 libcaf_core.so.0.15.7 std::_Head_base<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, false>::_M_head(std::_Head_base<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, false> const&) 2726 0.1892 kallsyms kthread_data 2715 0.1885 libcaf_core.so.0.15.7 std::vector<std::unique_ptr<caf::scheduler::worker<caf::policy::work_stealing>, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >, std::allocator<std::unique_ptr<caf::scheduler::worker<caf::policy::work_stealing>, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > > > >::operator[](unsigned long) 2713 0.1883 libcaf_core.so.0.15.7 bool std::chrono::operator< <long, std::ratio<1l, 1000000l>, long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1000000l> > const&) 2704 0.1877 kallsyms ret_from_intr 2697 0.1872 kallsyms lapic_next_deadline 2662 0.1848 kallsyms decay_load 2619 0.1818 bro Ref(BroObj*) 2603 0.1807 kallsyms do_futex 2548 0.1769 kallsyms __hrtimer_next_event_base 2540 0.1763 kallsyms put_prev_entity 2520 0.1749 kallsyms ctx_sched_out 2516 0.1746 libcaf_core.so.0.15.7 std::unique_ptr<caf::scheduler::worker<caf::policy::work_stealing>, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >::get() const 2449 0.1700 libcaf_core.so.0.15.7 std::chrono::duration<long, std::ratio<1l, 1l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1l> >, std::ratio<1l, 1000000l>, long, true, false>::__cast<long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&) 2448 0.1699 libcaf_core.so.0.15.7 std::uniform_int_distribution<unsigned long>::param_type::a() const 2432 0.1688 kallsyms __indirect_thunk_start 2426 0.1684 libcaf_core.so.0.15.7 std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1l> > >::value, std::chrono::duration<long, std::ratio<1l, 1l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1l> >, long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&) 2393 0.1661 libcaf_core.so.0.15.7 bool std::chrono::operator<=<long, std::ratio<1l, 1000000l>, long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1000000l> > const&) 2391 0.1660 kallsyms perf_event_task_tick 2385 0.1655 libpthread-2.27.so pthread_cond_signal@@GLIBC_2.3.2 2374 0.1648 kallsyms interrupt_entry 2360 0.1638 bro threading::Queue<threading::BasicOutputMessage*>::Put(threading::BasicOutputMessage*) 2335 0.1621 libc-2.27.so __strchrnul_sse2 2334 0.1620 libcaf_core.so.0.15.7 caf::detail::double_ended_queue<caf::resumable>::take_tail() 2326 0.1615 bro BroType::Tag() const 2312 0.1605 kallsyms dequeue_entity 2294 0.1592 kallsyms hrtimer_interrupt 2272 0.1577 kallsyms __hrtimer_init 2264 0.1572 kallsyms get_nohz_timer_target 2251 0.1562 kallsyms _copy_from_user 2247 0.1560 kallsyms schedule 2244 0.1558 libpthread-2.27.so __pthread_enable_asynccancel 2226 0.1545 kallsyms futex_wait 2224 0.1544 kallsyms __enqueue_entity 2188 0.1519 kallsyms dbs_update_util_handler 2178 0.1512 kallsyms update_min_vruntime 2175 0.1510 libc-2.27.so vsnprintf 2166 0.1503 kallsyms __perf_event_task_sched_out 2164 0.1502 libc-2.27.so __strcpy_sse2_unaligned 2153 0.1494 kallsyms sys_futex 2134 0.1481 libcaf_core.so.0.15.7 std::tuple_element<0ul, std::tuple<caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > > >::type const& std::get<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >(std::tuple<caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > > const&) 2133 0.1481 bro threading::Manager::Process() 2109 0.1464 kallsyms rb_insert_color 2094 0.1454 kallsyms note_gp_changes 2077 0.1442 kallsyms rcu_check_callbacks 2071 0.1438 kallsyms activate_task 2058 0.1429 libcaf_core.so.0.15.7 std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1000000l> > >::value, std::chrono::duration<long, std::ratio<1l, 1000000l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1000000l> >, long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1l> > const&) 2036 0.1413 kallsyms resched_curr 2017 0.1400 bro ODesc::StartsWithEscapeSequence(char const*, char const*) 2003 0.1390 kallsyms clear_buddies 2002 0.1390 kallsyms pick_next_entity 1980 0.1374 kallsyms sched_clock_cpu 1970 0.1367 kallsyms cpu_load_update 1931 0.1340 kallsyms __perf_event_task_sched_in 1929 0.1339 libcaf_core.so.0.15.7 std::common_type<std::chrono::duration<long, std::ratio<1l, 1000000l> >, std::chrono::duration<long, std::ratio<1l, 1l> > >::type std::chrono::operator-<long, std::ratio<1l, 1000000l>, long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1l> > const&) 1896 0.1316 libc-2.27.so memcpy@GLIBC_2.2.5 1813 0.1258 kallsyms scheduler_tick 1812 0.1258 kallsyms __cgroup_account_cputime 1805 0.1253 bro Dictionary::NextEntry(HashKey*&, IterCookie*&, int) const 1805 0.1253 libpthread-2.27.so __pthread_mutex_cond_lock 1773 0.1231 kallsyms deactivate_task 1768 0.1227 bro iosource::Manager::FindSoonest(double*) 1738 0.1206 kallsyms queue_work_on 1733 0.1203 kallsyms futex_wake 1692 0.1174 kallsyms rb_insert_color_cached 1679 0.1165 kallsyms smp_apic_timer_interrupt 1674 0.1162 kallsyms wakeup_preempt_entity.isra.59 1667 0.1157 libpthread-2.27.so __condvar_dec_grefs 1663 0.1154 libc-2.27.so __memcpy_sse2_unaligned_erms 1649 0.1145 kallsyms prepare_exit_to_usermode 1625 0.1128 kallsyms cpuacct_account_field 1600 0.1111 kallsyms clockevents_program_event 1589 0.1103 kallsyms entry_SYSCALL_64_stage2 1586 0.1101 libcaf_core.so.0.15.7 std::chrono::duration<long, std::ratio<1l, 1000000l> >::duration<long, std::ratio<1l, 1l>, void>(std::chrono::duration<long, std::ratio<1l, 1l> > const&) 1585 0.1100 kallsyms cpumask_next_and 1581 0.1097 libpthread-2.27.so pthread_mutex_unlock 1555 0.1079 kallsyms get_futex_key 1536 0.1066 bro threading::Queue<threading::BasicOutputMessage*>::MaybeReady() 1526 0.1059 kallsyms futex_wait_setup 1525 0.1059 libbroker.so.. std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::value, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&) 1517 0.1053 kallsyms enqueue_hrtimer 1490 0.1034 bro threading::MsgThread::RetrieveIn() 1462 0.1015 kallsyms x86_pmu_disable 1451 0.1007 kallsyms __accumulate_pelt_segments 1448 0.1005 kallsyms cpu_needs_another_gp 1443 0.1002 bro __gthread_active_p() 1439 0.0999 kallsyms rb_erase_cached 1421 0.0986 libcaf_core.so.0.15.7 caf::scheduler::worker<caf::policy::work_stealing>::id() const 1400 0.0972 kallsyms tick_sched_timer 1399 0.0971 kallsyms set_next_buddy 1398 0.0970 kallsyms check_preempt_curr 1397 0.0970 kallsyms rcu_note_context_switch 1379 0.0957 bro std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::time_since_epoch() const 1372 0.0952 kallsyms __list_del_entry_valid 1366 0.0948 kallsyms sched_avg_update 1353 0.0939 kallsyms __hrtimer_get_next_event 1339 0.0929 kallsyms __list_add_valid 1334 0.0926 kallsyms profile_tick 1313 0.0911 bro threading::Manager::NextTimestamp(double*) 1303 0.0904 bro RecordVal::RecordVal(RecordType*) 1275 0.0885 libcaf_core.so.0.15.7 std::chrono::duration<long, std::ratio<1l, 1000000l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1000000l> >, std::ratio<1000000l, 1l>, long, false, true>::__cast<long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1l> > const&) 1271 0.0882 bro bool std::operator==<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**>(std::_Deque_iterator<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**> const&, std::_Deque_iterator<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**> const&) 1271 0.0882 kallsyms rcu_irq_exit 1262 0.0876 kallsyms hrtimer_try_to_cancel 1253 0.0870 libc-2.27.so __memcmp_sse4_1 1236 0.0858 kallsyms __intel_pmu_enable_all.constprop.17 1210 0.0840 libpcap.so.1.8.1 /usr/lib64/libpcap.so.1.8.1 1195 0.0829 kallsyms select_idle_sibling 1190 0.0826 kallsyms run_posix_cpu_timers 1181 0.0820 bro threading::Queue<threading::BasicOutputMessage*>::Get() 1181 0.0820 kallsyms __bitmap_and 1180 0.0819 bro std::unique_lock<std::mutex>::~unique_lock() 1177 0.0817 kallsyms futex_wait_queue_me 1174 0.0815 kallsyms account_system_index_time 1169 0.0811 bro threading::BasicThread::Fmt(char const*, ...) 1155 0.0802 bro bool std::operator==<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**>(std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**> const&, std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**> const&) 1139 0.0791 kallsyms update_group_capacity 1136 0.0789 kallsyms tick_program_event 1133 0.0786 kallsyms select_task_rq_fair 1117 0.0775 bro BroObj::BroObj() 1112 0.0772 bro copy_string(char const*) 1100 0.0764 bro Attributes::FindAttr(attr_tag) const 1093 0.0759 bro logging::WriterBackend::OnHeartbeat(double, double) 1080 0.0750 kallsyms can_migrate_task 1058 0.0734 bro bool std::chrono::operator< <std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&) 1057 0.0734 bro ODesc::FirstEscapeLoc(char const*, unsigned long) 1055 0.0732 bro StmtList::Exec(Frame*, stmt_flow_type&) const 1054 0.0732 bro threading::MsgThread::Run() 1048 0.0727 bro std::unique_lock<std::mutex>::unique_lock(std::mutex&) 1037 0.0720 kallsyms exit_to_usermode_loop 1033 0.0717 kallsyms rb_next 1031 0.0716 bro ExprStmt::Exec(Frame*, stmt_flow_type&) const 1019 0.0707 bro BroFunc::Call(ValPList*, Frame*) const 1016 0.0705 kallsyms __update_idle_core 999 0.0693 kallsyms dbs_irq_work 998 0.0693 bro std::vector<Func::Body, std::allocator<Func::Body> >::size() const 997 0.0692 bro DFA_State::Stats(unsigned int*, unsigned int*) 997 0.0692 bro analyzer::tcp::TCP_Analyzer::DeliverPacket(int, unsigned char const*, bool, unsigned long, IP_Hdr const*, int) 983 0.0682 kallsyms retint_kernel 976 0.0677 bro void __gnu_cxx::new_allocator<threading::BasicOutputMessage*>::construct<threading::BasicOutputMessage*, threading::BasicOutputMessage* const&>(threading::BasicOutputMessage**, threading::BasicOutputMessage* const&) 965 0.0670 kallsyms hash_futex 965 0.0670 kallsyms hrtimer_forward 962 0.0668 kallsyms rcu_nmi_exit 929 0.0645 libc-2.27.so _IO_no_init 918 0.0637 bro std::cv_status std::condition_variable::wait_for<long, std::ratio<1l, 1l> >(std::unique_lock<std::mutex>&, std::chrono::duration<long, std::ratio<1l, 1l> > const&) 914 0.0634 kallsyms get_futex_key_refs.isra.13 910 0.0632 bro Dictionary::Lookup(void const*, int, unsigned long) const 901 0.0625 kallsyms smp_irq_work_interrupt 888 0.0616 kallsyms irq_enter 882 0.0612 bro safe_vsnprintf(char*, unsigned long, char const*, __va_list_tag*) 876 0.0608 libc-2.27.so _IO_str_init_static_internal 871 0.0605 bro operator new(unsigned long, void*) 862 0.0598 bro DebugLogger::IsEnabled(DebugStream) const 859 0.0596 kallsyms ttwu_do_activate 843 0.0585 bro std::unique_lock<std::mutex>::unlock() 841 0.0584 bro std::cv_status std::condition_variable::__wait_until_impl<std::chrono::duration<long, std::ratio<1l, 1000000000l> > >(std::unique_lock<std::mutex>&, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&) 841 0.0584 kallsyms get_timespec64 839 0.0582 kallsyms rcu_bh_qs 836 0.0580 kallsyms native_apic_mem_write 836 0.0580 kallsyms update_cfs_rq_h_load 827 0.0574 bro std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::_Rb_tree_const_iterator(std::_Rb_tree_node_base const*) 822 0.0571 kallsyms get_pwq.isra.20 821 0.0570 bro threading::HeartbeatMessage::~HeartbeatMessage() 820 0.0569 bro __gthread_cond_timedwait(pthread_cond_t*, pthread_mutex_t*, timespec const*) 818 0.0568 bro EventHandler::operator bool() const 815 0.0566 kallsyms ktime_get_update_offsets_now 799 0.0555 kallsyms raise_softirq 779 0.0541 bro std::_Rb_tree<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::_Identity<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::end() const 778 0.0540 bro threading::HeartbeatMessage::Process() 778 0.0540 kallsyms ttwu_do_wakeup 778 0.0540 libpthread-2.27.so __lll_unlock_wake 772 0.0536 libc-2.27.so __mempcpy_sse2_unaligned 770 0.0534 bro threading::Queue<threading::BasicOutputMessage*>::Ready() 760 0.0528 bro UnaryExpr::Eval(Frame*) const 750 0.0521 kallsyms set_next_entity 749 0.0520 kallsyms intel_pmu_disable_all 746 0.0518 bro logging::WriterBackend::Write(int, int, threading::Value***) 745 0.0517 kallsyms task_tick_numa 738 0.0512 bro threading::formatter::Ascii::Describe(ODesc*, threading::Value*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) const 734 0.0509 bro __gthread_mutex_unlock(pthread_mutex_t*) 725 0.0503 bro __gthread_mutex_lock(pthread_mutex_t*) 716 0.0497 bro std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::operator!=(std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > const&) const 708 0.0491 kallsyms cpu_load_update_active 705 0.0489 bro EventHandlerPtr::operator bool() const 703 0.0488 kallsyms rcu_irq_enter 703 0.0488 libc-2.27.so sched_yield 695 0.0482 bro threading::BasicThread::Name() const 687 0.0477 bro NameExpr::Eval(Frame*) const 687 0.0477 kallsyms wq_worker_waking_up 681 0.0473 bro NetSessions::DoNextPacket(double, Packet const*, IP_Hdr const*, EncapsulationStack const*) 681 0.0473 kallsyms __cgroup_account_cputime_field 679 0.0471 kallsyms idr_find 677 0.0470 bro threading::BasicThread::Killed() const 677 0.0470 kallsyms lock_hrtimer_base.isra.21 677 0.0470 libc-2.27.so _IO_old_init 663 0.0460 bro threading::Message::Name() const 659 0.0457 bro std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**>::difference_type std::operator-<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**>(std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**> const&, std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**> const&) 655 0.0455 bro RuleMatcher::Match(RuleEndpointState*, Rule::PatternType, unsigned char const*, int, bool, bool, bool) 621 0.0431 bro std::unique_lock<std::mutex>::lock() 619 0.0430 bro BroObj::~BroObj() 614 0.0426 bro logging::writer::Ascii::DoHeartbeat(double, double) 614 0.0426 bro std::mutex::lock() 611 0.0424 bro ID::AsType() 605 0.0420 kallsyms __intel_pmu_disable_all 603 0.0419 bro threading::MsgThread::SendOut(threading::BasicOutputMessage*, bool) 599 0.0416 bro std::cv_status std::condition_variable::wait_until<std::chrono::duration<long, std::ratio<1l, 1000000000l> > >(std::unique_lock<std::mutex>&, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&) 597 0.0414 kallsyms sched_clock 593 0.0412 kallsyms rcu_all_qs 592 0.0411 bro Val::~Val() 588 0.0408 kallsyms put_prev_task_fair 586 0.0407 bro threading::Message::Message(char const*) 577 0.0401 kallsyms irqtime_account_process_tick.isra.10 563 0.0391 kallsyms rb_erase 560 0.0389 bro plugin::Manager::HavePluginForHook(plugin::HookType) const 558 0.0387 bro iosource::IOSource::IsOpen() const 551 0.0382 bro std::_Rb_tree<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::_Identity<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::begin() const 533 0.0370 bro Attr::Tag() const 521 0.0362 libc-2.27.so isprint 520 0.0361 bro std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> >::empty() const 518 0.0360 kallsyms find_first_bit 517 0.0359 kallsyms set_task_cpu 513 0.0356 bro BaseList::append(void*) 513 0.0356 bro SerialObj::SerialObj() 512 0.0355 bro threading::MsgThread::Debug(DebugStream, char const*) 512 0.0355 libz.so.1.2.11 /usr/lib64/libz.so.1.2.11 509 0.0353 bro base_type_no_ref(TypeTag) 509 0.0353 bro std::mutex::unlock() 506 0.0351 bro threading::acquire_lock(std::mutex&) 505 0.0351 bro std::set<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::end() const 495 0.0344 kallsyms plist_add 493 0.0342 bro Val::AsRecord() const 488 0.0339 kallsyms rcu_segcblist_ready_cbs 484 0.0336 kallsyms pick_next_task_idle 483 0.0335 bro SegmentProfiler::SegmentProfiler(SegmentStatsReporter*, char const*) 483 0.0335 bro threading::MsgThread::Failed() const 475 0.0330 bro IfStmt::DoExec(Frame*, Val*, stmt_flow_type&) const 467 0.0324 kallsyms irq_work_queue 465 0.0323 kallsyms __msecs_to_jiffies 464 0.0322 kallsyms native_apic_mem_read 463 0.0321 bro ValPList::operator[](int) const 460 0.0319 bro TransientID::TransientID() 455 0.0316 bro BaseList::BaseList(int) 451 0.0313 bro BroType::InternalType() const 449 0.0312 bro std::chrono::duration<long, std::ratio<1l, 1000000000l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::ratio<1000000000l, 1l>, long, false, true>::__cast<long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1l> > const&) 447 0.0310 bro threading::formatter::Ascii::Describe(ODesc*, int, threading::Field const* const*, threading::Value**) const 439 0.0305 kallsyms __remove_hrtimer 433 0.0301 bro std::__deque_buf_size(unsigned long) 427 0.0296 bro RecordVal::Assign(int, Val*, Opcode) 423 0.0294 bro BinaryExpr::Eval(Frame*) const 420 0.0292 bro std::_List_iterator<threading::MsgThread*>::operator++(int) 420 0.0292 bro threading::BasicOutputMessage::BasicOutputMessage(char const*) 418 0.0290 bro std::mutex* std::__addressof<std::mutex>(std::mutex&) 415 0.0288 kallsyms cgroup_cpu_stat_updated 412 0.0286 bro BaseList::clear() 412 0.0286 kallsyms get_futex_value_locked 409 0.0284 bro ODesc::AddBytesRaw(void const*, unsigned int) 404 0.0280 kallsyms rcu_nmi_enter 401 0.0278 bro analyzer::tcp::ContentLine_Analyzer::DoDeliverOnce(int, unsigned char const*) 400 0.0278 libc-2.27.so _IO_setb 397 0.0276 bro threading::Message::~Message() 396 0.0275 bro Stmt::RegisterAccess() const 387 0.0269 bro Packet::Init(int, timeval*, unsigned int, unsigned int, unsigned char const*, int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >) 372 0.0258 bro std::__detail::_List_node_header::_M_init() 371 0.0258 bro __gnu_cxx::__aligned_membuf<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::_M_ptr() const 370 0.0257 libcaf_core.so.0.15.7 std::this_thread::yield() 369 0.0256 libcaf_core.so.0.15.7 __gthread_yield() 368 0.0255 bro CallExpr::Eval(Frame*) const 367 0.0255 kallsyms irq_work_run 365 0.0253 bro void __gnu_cxx::new_allocator<threading::BasicInputMessage*>::destroy<threading::BasicInputMessage*>(threading::BasicInputMessage**) 361 0.0251 bro std::_Rb_tree_node<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::_M_valptr() const 361 0.0251 bro threading::DebugMessage::DebugMessage(DebugStream, threading::MsgThread*, char const*) 359 0.0249 bro bool std::chrono::operator< <long, std::ratio<1l, 1000000000l>, long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&) 359 0.0249 kallsyms find_get_entry 358 0.0248 bro std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> >::push_back(threading::BasicOutputMessage* const&) 358 0.0248 bro threading::MsgThread::SendOut(threading::BasicOutputMessage*) 355 0.0246 bro starts_with(char const*, char const*, unsigned long) 353 0.0245 bro threading::BasicThread::Terminating() const 352 0.0244 bro NetSessions::NextPacket(double, Packet const*) 350 0.0243 bro Val::Ref() 349 0.0242 kallsyms get_work_pool 345 0.0239 bro BaseList::replace(int, void*) 340 0.0236 libpthread-2.27.so _pthread_cleanup_push 339 0.0235 kallsyms _cond_resched 338 0.0235 bro net_run() 332 0.0230 bro analyzer::Analyzer::NextPacket(int, unsigned char const*, bool, unsigned long, IP_Hdr const*, int) 330 0.0229 bro AssignExpr::Eval(Frame*) const 329 0.0228 bro iosource::pcap::PcapSource::ExtractNextPacket(Packet*) 326 0.0226 bro EventMgr::Drain() 326 0.0226 bro iosource::PktSrc::Process() 326 0.0226 kallsyms retint_user 326 0.0226 kallsyms task_ctx_sched_out 320 0.0222 libc-2.27.so __strcmp_sse2_unaligned 319 0.0221 bro Val::Type() 318 0.0221 bro Expr::IsError() const 318 0.0221 kallsyms ext4_mark_iloc_dirty 316 0.0219 libc-2.27.so __fread_chk 315 0.0219 bro DictEntryPList::operator[](int) const 313 0.0217 bro std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::operator++() 313 0.0217 bro std::__shared_ptr<bro_broker::Manager::BrokerState, (__gnu_cxx::_Lock_policy)2>::get() const 313 0.0217 kallsyms migrate_task_rq_fair 312 0.0217 bro std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1l> > >::value, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1l> > > >::type std::chrono::time_point_cast<std::chrono::duration<long, std::ratio<1l, 1l> >, std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&) 310 0.0215 libc-2.27.so __mpn_divrem 309 0.0214 bro logging::WriterFrontend::FlushWriteBuffer() 308 0.0214 bro std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::operator*() const 307 0.0213 bro std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::value, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1l> > const&) 306 0.0212 bro threading::Queue<threading::BasicInputMessage*>::Put(threading::BasicInputMessage*) 304 0.0211 bro __gnu_cxx::__aligned_membuf<iosource::Manager::Source*>::_M_ptr() 304 0.0211 kallsyms change_protection 303 0.0210 bro PQ_Element::Time() const 303 0.0210 libc-2.27.so tolower 302 0.0210 bro Trigger::EvaluatePending() 302 0.0210 kallsyms radix_tree_lookup 299 0.0208 bro void std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_construct<char*>(char*, char*, std::forward_iterator_tag) 298 0.0207 bro std::_Rb_tree<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::_Identity<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::empty() const 296 0.0205 bro Frame::NthElement(int) 296 0.0205 kallsyms check_cfs_rq_runtime 295 0.0205 bro iosource::PktSrc::ExtractNextPacketInternal() 292 0.0203 bro Val::~Val() 292 0.0203 bro std::unique_lock<std::mutex>::mutex() const 292 0.0203 libbroker.so.. bool std::chrono::operator><std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&) 290 0.0201 bro Specific_RE_Matcher::LongestMatch(unsigned char const*, int) 288 0.0200 bro ListExpr::Eval(Frame*) const 288 0.0200 bro TableVal::MemoryAllocation() const 288 0.0200 kallsyms detach_entity_cfs_rq 288 0.0200 kallsyms timerqueue_del 287 0.0199 libc-2.27.so fread 286 0.0199 bro std::chrono::time_point<std::chrono::_V2::system_clock, std::common_type<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::type> std::chrono::operator+<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> >, long, std::ratio<1l, 1000000000l> >(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&, std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&) 285 0.0198 kallsyms tick_sched_handle 284 0.0197 kallsyms perf_pmu_disable.part.92 282 0.0196 bro Connection::IsReuse(double, unsigned char const*) 282 0.0196 bro std::unordered_set<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::hash<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::equal_to<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::empty() const 281 0.0195 bro analyzer::Analyzer::FirstSupportAnalyzer(bool) 279 0.0194 bro RecordType::FieldDecl(int) 274 0.0190 bro pad_size(unsigned long) 273 0.0189 bro net_packet_dispatch(double, Packet const*, iosource::PktSrc*) 273 0.0189 bro threading::HeartbeatMessage::~HeartbeatMessage() 272 0.0189 bro analyzer::Analyzer::Conn() const 271 0.0188 bro StmtPList::operator[](int) const 271 0.0188 bro std::common_type<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1l> > >::type std::chrono::operator-<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1l> > >(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1l> > > const&) 271 0.0188 bro std::set<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::begin() const 270 0.0187 bro std::_List_iterator<threading::MsgThread*>::_List_iterator(std::__detail::_List_node_base*) 269 0.0187 bro Func::HasBodies() const 269 0.0187 bro eval_list(Frame*, ListExpr const*) 269 0.0187 bro std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::_Rb_tree_const_iterator() 266 0.0185 bro __gnu_cxx::__aligned_membuf<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::_M_addr() const 266 0.0185 bro __gnu_cxx::__aligned_membuf<threading::MsgThread*>::_M_ptr() 263 0.0183 bro threading::OutputMessage<threading::MsgThread>::OutputMessage(char const*, threading::MsgThread*) 263 0.0183 libbroker.so.. broker::endpoint::advance_time(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >) 261 0.0181 libc-2.27.so __GI___printf_fp_l 260 0.0180 bro analyzer::Analyzer::ForwardStream(int, unsigned char const*, bool) 259 0.0180 bro threading::DebugMessage::Process() 258 0.0179 kallsyms sys_sched_yield 258 0.0179 kallsyms wake_q_add 257 0.0178 bro std::__cxx11::list<threading::MsgThread*, std::allocator<threading::MsgThread*> >::end() 256 0.0178 bro RecordVal::Lookup(int) const 255 0.0177 kallsyms __update_load_avg_blocked_se.isra.32 253 0.0176 libc-2.27.so __memset_sse2_unaligned 252 0.0175 bro std::chrono::duration<long, std::ratio<1l, 1000000000l> >::duration<long, std::ratio<1l, 1l>, void>(std::chrono::duration<long, std::ratio<1l, 1l> > const&) 250 0.0174 bro RecordType::FieldType(int) const 250 0.0174 bro std::_List_node<threading::MsgThread*>::_M_valptr() 248 0.0172 bro rules_lex() 248 0.0172 bro std::_Deque_iterator<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**>::_Deque_iterator(std::_Deque_iterator<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**> const&) 248 0.0172 bro std::_List_iterator<iosource::Manager::Source*>::operator*() const 247 0.0171 bro Reassembler::NewBlock(double, unsigned long, unsigned long, unsigned char const*) 247 0.0171 kallsyms calc_global_load_tick 247 0.0171 kallsyms native_apic_wait_icr_idle 247 0.0171 kallsyms rcu_segcblist_future_gp_needed 246 0.0171 bro BroString::Reset() 246 0.0171 bro threading::MsgThread::MightHaveOut() 246 0.0171 kallsyms __switch_to 246 0.0171 kallsyms decay_load_missed 243 0.0169 bro threading::InputMessage<threading::MsgThread>::Object() const 242 0.0168 bro TypeDeclPList::operator[](int) const 241 0.0167 bro ODesc::AddBytes(void const*, unsigned int) 241 0.0167 bro TableEntryVal::ExpireAccessTime() const 240 0.0167 bro safe_malloc(unsigned long) 238 0.0165 kallsyms update_process_times 237 0.0165 bro threading::MsgThread::SendIn(threading::BasicInputMessage*, bool) 236 0.0164 kallsyms cpumask_next_wrap 235 0.0163 bro std::__cxx11::list<Trigger*, std::allocator<Trigger*> >::begin() 232 0.0161 bro std::_Deque_iterator<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**>::operator*() const 232 0.0161 bro std::__cxx11::list<iosource::Manager::Source*, std::allocator<iosource::Manager::Source*> >::begin() 232 0.0161 libpthread-2.27.so _pthread_cleanup_pop 231 0.0160 bro std::_Hashtable<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::__detail::_Identity, std::equal_to<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::hash<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::__detail::_Mod_range_hashing, std::__detail::_Default_ranged_hash, std::__detail::_Prime_rehash_policy, std::__detail::_Hashtable_traits<true, true, true> >::empty() const 230 0.0160 bro iosource::PktSrc::NextTimestamp(double*) 228 0.0158 bro IP_Hdr::TotalLen() const 227 0.0158 bro RecordVal::MemoryAllocation() const 227 0.0158 bro Val::Val(int, TypeTag) 227 0.0158 bro std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1l> > >::time_since_epoch() const 224 0.0155 bro std::_List_iterator<threading::MsgThread*>::operator*() const 223 0.0155 kallsyms propagate_entity_cfs_rq.isra.70 221 0.0153 bro analyzer::http::HTTP_Analyzer::DeliverStream(int, unsigned char const*, bool) 220 0.0153 bro threading::Value::~Value() 220 0.0153 kallsyms __handle_mm_fault 219 0.0152 bro DebugLogger::IsVerbose() const 218 0.0151 bro analyzer::tcp::TCP_Analyzer::ExtractTCP_Header(unsigned char const*&, int&, int&) 217 0.0151 bro Connection::NextPacket(double, int, IP_Hdr const*, int, int, unsigned char const*&, int&, int&, Packet const*) 217 0.0151 bro modp_dtoa 217 0.0151 kallsyms attach_entity_load_avg 216 0.0150 bro std::_List_iterator<threading::MsgThread*>::operator!=(std::_List_iterator<threading::MsgThread*> const&) const 216 0.0150 libc-2.27.so htons 215 0.0149 bro Reassembler::CheckOverlap(DataBlock*, DataBlock*, unsigned long, unsigned long, unsigned char const*) 215 0.0149 bro analyzer::http::HTTP_Entity::Deliver(int, char const*, int) 215 0.0149 kallsyms ttwu_stat 215 0.0149 libbroker.so.. std::multimap<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >, std::pair<caf::actor, caf::message>, std::less<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > >, std::allocator<std::pair<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const, std::pair<caf::actor, caf::message> > > >::empty() const 214 0.0149 bro Val::AsRecordVal() 213 0.0148 bro Reassembler::AddAndCheck(DataBlock*, unsigned long, unsigned long, unsigned char const*) 213 0.0148 bro post_execute_stmt(Stmt*, Frame*, Val*, stmt_flow_type*) 213 0.0148 bro std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1l> > >::value, std::chrono::duration<long, std::ratio<1l, 1l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1l> >, long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&) 212 0.0147 bro std::__shared_ptr_access<bro_broker::Manager::BrokerState, (__gnu_cxx::_Lock_policy)2, false, false>::operator->() const 212 0.0147 bro std::queue<threading::BasicOutputMessage*, std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> > >::empty() const 210 0.0146 bro bool std::chrono::operator< <long, std::ratio<1l, 1000000000l>, long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1l> > const&) 209 0.0145 bro Dictionary::Lookup(HashKey const*) const 209 0.0145 bro __gnu_cxx::__aligned_membuf<threading::MsgThread*>::_M_addr() 209 0.0145 bro file_analysis::File::DeliverStream(unsigned char const*, unsigned long) 209 0.0145 bro std::_List_iterator<iosource::Manager::Source*>::_List_iterator(std::__detail::_List_node_base*) 209 0.0145 bro std::_List_node<iosource::Manager::Source*>::_M_valptr() 209 0.0145 libpthread-2.27.so __condvar_confirm_wakeup 208 0.0144 bro Packet::ProcessLayer2() 208 0.0144 bro std::_List_iterator<analyzer::Analyzer*>::_List_iterator(std::__detail::_List_node_base*) 208 0.0144 kallsyms account_process_tick 207 0.0144 bro SerialObj::~SerialObj() 207 0.0144 libbroker.so.. std::_Rb_tree<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >, std::pair<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const, std::pair<caf::actor, caf::message> >, std::_Select1st<std::pair<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const, std::pair<caf::actor, caf::message> > >, std::less<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > >, std::allocator<std::pair<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const, std::pair<caf::actor, caf::message> > > >::empty() const 206 0.0143 bro BinaryExpr::Fold(Val*, Val*) const 206 0.0143 bro ValPList::append(Val*) 206 0.0143 bro broker::endpoint::is_shutdown() const 206 0.0143 kallsyms __default_send_IPI_shortcut 205 0.0142 bro std::common_type<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::type std::chrono::operator+<long, std::ratio<1l, 1000000000l>, long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&) 205 0.0142 libc-2.27.so __strncpy_sse2_unaligned 203 0.0141 bro std::__cxx11::list<analyzer::Analyzer*, std::allocator<analyzer::Analyzer*> >::begin() 203 0.0141 kallsyms irq_work_tick 202 0.0140 kallsyms hrtimer_reprogram 202 0.0140 ld-2.27.so do_lookup_x 201 0.0140 bro Val::AsNonConstRecord() 201 0.0140 bro analyzer::tcp::TCP_Analyzer::IsReuse(double, unsigned char const*) 201 0.0140 bro std::_List_iterator<iosource::Manager::Source*>::operator++() 200 0.0139 bro RemoteSerializer::NextTimestamp(double*) 199 0.0138 kallsyms tick_nohz_tick_stopped 198 0.0137 bro std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> >::size() const 196 0.0136 kallsyms cpus_share_cache 194 0.0135 bro logging::FlushWriteBufferMessage::Process() 194 0.0135 kallsyms yield_task_fair 193 0.0134 bro analyzer::tcp::ContentLine_Analyzer::DoDeliver(int, unsigned char const*) 193 0.0134 bro std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> >::begin() 192 0.0133 bro ValPList::replace(int, Val*) 191 0.0133 kallsyms page_fault 191 0.0133 kallsyms switch_mm_irqs_off 190 0.0132 bro std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> >::empty() const 189 0.0131 bro PriorityQueue::BubbleDown(int) 189 0.0131 kallsyms hrtimer_init 188 0.0130 bro analyzer::conn_size::ConnSize_Analyzer::DeliverPacket(int, unsigned char const*, bool, unsigned long, IP_Hdr const*, int) 188 0.0130 bro threading::acquire_lock(std::mutex&) 185 0.0128 bro BaseList::~BaseList() 185 0.0128 bro threading::BasicOutputMessage* const& std::forward<threading::BasicOutputMessage* const&>(std::remove_reference<threading::BasicOutputMessage* const&>::type&) 185 0.0128 libc-2.27.so _IO_sgetn 184 0.0128 bro BoolExpr::Eval(Frame*) const 184 0.0128 bro BroType::BroType(TypeTag, bool) 184 0.0128 bro BuildConnIDHashKey(ConnID const&) 184 0.0128 bro Frame::SetNextStmt(Stmt*) 184 0.0128 bro pre_execute_stmt(Stmt*, Frame*) 182 0.0126 bro std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> >::pop_front() 181 0.0126 bro brolex() 178 0.0124 bro BroType::Ref() 177 0.0123 bro RuleMatcherState::Match(Rule::PatternType, unsigned char const*, int, bool, bool, bool, bool) 177 0.0123 bro analyzer::http::HTTP_Entity::SubmitData(int, char const*) 175 0.0121 bro analyzer::tcp::TCP_Reassembler::AckReceived(unsigned long) 174 0.0121 bro threading::MsgThread::HasOut() 174 0.0121 kallsyms native_iret 173 0.0120 kallsyms llist_add_batch 172 0.0119 bro std::_Hashtable<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::__detail::_Identity, std::equal_to<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::hash<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::__detail::_Mod_range_hashing, std::__detail::_Default_ranged_hash, std::__detail::_Prime_rehash_policy, std::__detail::_Hashtable_traits<true, true, true> >::size() const 170 0.0118 bro BroString::Len() const 170 0.0118 bro std::chrono::duration<long, std::ratio<1l, 1l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1l> >, std::ratio<1l, 1000000000l>, long, true, false>::__cast<long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&) 168 0.0117 bro PriorityQueue::Top() const 168 0.0117 bro iosource::IOSource::IsIdle() const 167 0.0116 bro Func::Flavor() const 167 0.0116 kallsyms wake_up_process 165 0.0115 bro TimerMgr::Advance(double, int) 164 0.0114 bro is_vector(Val*) 163 0.0113 bro DebugLogger::Log(DebugStream, char const*, ...) 163 0.0113 bro Frame::Reset(int) 163 0.0113 bro std::common_type<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1l> > >::type std::chrono::operator-<long, std::ratio<1l, 1000000000l>, long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1l> > const&) 162 0.0112 bro analyzer::tcp::TCP_Reassembler::DataSent(double, unsigned long, int, unsigned char const*, analyzer::tcp::TCP_Flags, bool) 162 0.0112 bro std::__cxx11::_List_base<Trigger*, std::allocator<Trigger*> >::_M_clear() 161 0.0112 bro Dictionary::Init(int) 161 0.0112 bro analyzer::http::HTTP_Entity::DeliverBodyClear(int, char const*, int) 161 0.0112 bro std::__cxx11::list<threading::MsgThread*, std::allocator<threading::MsgThread*> >::begin() 161 0.0112 bro std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::time_point(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&) 161 0.0112 kallsyms __acct_update_integrals 161 0.0112 libc-2.27.so _IO_file_xsgetn 160 0.0111 bro Val::Val(bool, TypeTag) 159 0.0110 bro FieldExpr::Fold(Val*) const 159 0.0110 bro std::_List_iterator<Trigger*>::_List_iterator(std::__detail::_List_node_base*) 159 0.0110 bro std::__cxx11::list<iosource::Manager::Source*, std::allocator<iosource::Manager::Source*> >::end() 158 0.0110 bro threading::InputMessage<threading::MsgThread>::~InputMessage() 158 0.0110 bro void std::vector<std::unique_lock<std::mutex>, std::allocator<std::unique_lock<std::mutex> > >::_M_realloc_insert<std::unique_lock<std::mutex> >(__gnu_cxx::__normal_iterator<std::unique_lock<std::mutex>*, std::vector<std::unique_lock<std::mutex>, std::allocator<std::unique_lock<std::mutex> > > >, std::unique_lock<std::mutex>&&) 157 0.0109 bro std::__cxx11::list<analyzer::Analyzer*, std::allocator<analyzer::Analyzer*> >::end() 156 0.0108 bro RecordType::FieldOffset(char const*) const 156 0.0108 bro analyzer::mime::MIME_Entity::DecodeDataLine(int, char const*, int) 156 0.0108 bro current_time(bool) 155 0.0108 bro SegmentProfiler::~SegmentProfiler() 155 0.0108 bro file_analysis::File::DeliverChunk(unsigned char const*, unsigned long, unsigned long) 155 0.0108 bro std::_List_iterator<iosource::Manager::Source*>::operator!=(std::_List_iterator<iosource::Manager::Source*> const&) const 154 0.0107 bro Frame::Release() 154 0.0107 bro threading::OutputMessage<logging::WriterFrontend>::OutputMessage(char const*, logging::WriterFrontend*) 154 0.0107 libm-2.27.so __ieee754_log_avx 153 0.0106 bro Connection::CheckHistory(unsigned int, char) 153 0.0106 bro __gnu_cxx::__aligned_membuf<iosource::Manager::Source*>::_M_addr() 153 0.0106 bro delete_vals(ValPList*) 153 0.0106 bro std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**>::_Deque_iterator(std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**> const&) 153 0.0106 bro threading::MsgThread::RetrieveOut() 151 0.0105 bro std::__cxx11::_List_base<iosource::Manager::Source*, std::allocator<iosource::Manager::Source*> >::_M_get_size() const 150 0.0104 bro ID::HasVal() const 150 0.0104 bro std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > std::__niter_base<std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > >(std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > >) 149 0.0103 bro BroType::AsFuncType() 149 0.0103 bro RandTest::end(double*, double*, double*, double*, double*) 149 0.0103 bro analyzer::mime::MIME_Entity::Deliver(int, char const*, int) 149 0.0103 bro analyzer::tcp::TCP_Flags::SYN() const 148 0.0103 bro Val::Val(BroType*) 147 0.0102 bro ID::IsGlobal() const 147 0.0102 kallsyms hrtick_update 146 0.0101 bro non-virtual thunk to RemoteSerializer::NextTimestamp(double*) 146 0.0101 bro std::set<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::empty() const 145 0.0101 bro analyzer::conn_size::ConnSize_Analyzer::CheckSizes(bool) 145 0.0101 bro analyzer::tcp::ContentLine_Analyzer::DeliverStream(int, unsigned char const*, bool) 145 0.0101 bro analyzer::tcp::TCP_Endpoint::DataSent(double, unsigned long, int, int, unsigned char const*, IP_Hdr const*, tcphdr const*) 145 0.0101 kallsyms __fget 144 0.0100 bro Frame::Clear() 144 0.0100 kallsyms start_this_handle 143 0.0099 bro Dictionary::DeInit() 143 0.0099 bro analyzer::tcp::TCP_Flags::RST() const 143 0.0099 bro file_analysis::Manager::DataIn(unsigned char const*, unsigned long, analyzer::Tag, Connection*, bool, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) 143 0.0099 bro void std::allocator_traits<std::allocator<threading::BasicOutputMessage*> >::construct<threading::BasicOutputMessage*, threading::BasicOutputMessage* const&>(std::allocator<threading::BasicOutputMessage*>&, threading::BasicOutputMessage**, threading::BasicOutputMessage* const&) 143 0.0099 kallsyms ktime_add_safe 143 0.0099 libc-2.27.so _itoa_word 142 0.0099 bro BuiltinFunc::Call(ValPList*, Frame*) const 142 0.0099 bro RuleEndpointState::MatcherPList::operator[](int) const 141 0.0098 bro analyzer::mime::MIME_Message::Deliver(int, char const*, int) 141 0.0098 kallsyms __sb_start_write 139 0.0096 bro HashKey::~HashKey() 139 0.0096 bro NullStmt::Exec(Frame*, stmt_flow_type&) const 139 0.0096 kallsyms __x86_indirect_thunk_r14 138 0.0096 bro BroString::MemoryAllocation() const 138 0.0096 bro NetSessions::CheckHeaderTrunc(int, unsigned int, unsigned int, Packet const*, EncapsulationStack const*) 138 0.0096 bro base_type(TypeTag) 138 0.0096 kallsyms __fget_light 137 0.0095 bro bro_broker::Manager::Active() 137 0.0095 bro logging::writer::Ascii::DoWrite(int, threading::Field const* const*, threading::Value**) 137 0.0095 bro std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1l> > >::time_point(std::chrono::duration<long, std::ratio<1l, 1l> > const&) 135 0.0094 bro analyzer::pia::PIA::Match(Rule::PatternType, unsigned char const*, int, bool, bool, bool, bool) 135 0.0094 bro std::unique_lock<std::mutex>::unique_lock(std::unique_lock<std::mutex>&&) 134 0.0093 bro SegmentProfiler::SegmentProfiler(SegmentStatsReporter*, Location const*) 134 0.0093 bro analyzer::Analyzer::NextStream(int, unsigned char const*, bool) 134 0.0093 bro analyzer::Analyzer::UpdateConnVal(RecordVal*) 134 0.0093 kallsyms clear_page_rep 133 0.0092 bro MutableVal::MutableVal(BroType*) 133 0.0092 bro Val::Val(unsigned long, TypeTag) 133 0.0092 libc-2.27.so _IO_vfscanf 132 0.0092 bro IP_Hdr::HdrLen() const 132 0.0092 bro RecordCoerceExpr::Fold(Val*) const 132 0.0092 bro TypeList::~TypeList() 131 0.0091 bro Dictionary::MemoryAllocation() const 131 0.0091 bro std::__detail::_List_node_header::_List_node_header() 131 0.0091 bro threading::BasicInputMessage::~BasicInputMessage() 131 0.0091 kallsyms tick_sched_do_timer 130 0.0090 bro ODesc::Grow(unsigned int) 130 0.0090 bro std::chrono::duration<long, std::ratio<1l, 1000000000l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::ratio<1000000000l, 1l>, double, false, true>::__cast<double, std::ratio<1l, 1l> >(std::chrono::duration<double, std::ratio<1l, 1l> > const&) 130 0.0090 kallsyms jbd2_journal_stop 129 0.0090 bro CompositeHash::ComputeSingletonHash(Val const*, int) const 129 0.0090 libc-2.27.so hack_digit 128 0.0089 bro NetSessions::DumpPacket(Packet const*, int) 128 0.0089 bro TableVal::DoExpire(double) 128 0.0089 bro analyzer::tcp::TCP_Analyzer::UpdateStateMachine(double, analyzer::tcp::TCP_Endpoint*, analyzer::tcp::TCP_Endpoint*, unsigned int, unsigned int, int, int, int, analyzer::tcp::TCP_Flags, int&, int&) 127 0.0088 bro analyzer::tcp::TCP_Reassembler::BlockInserted(DataBlock*) 126 0.0087 bro Connection::CheckFlowLabel(bool, unsigned int) 126 0.0087 bro RuleMatcherState::MatcherInitialized(bool) 126 0.0087 bro TableEntryVal::Value() 126 0.0087 bro analyzer::SupportAnalyzer::ForwardStream(int, unsigned char const*, bool) 126 0.0087 bro std::pair<char const*, unsigned long>::pair<int, true>(char const* const&, int&&) 126 0.0087 bro std::queue<threading::BasicInputMessage*, std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> > >::empty() const 125 0.0087 bro TableVal::Lookup(Val*, bool) 125 0.0087 bro analyzer::tcp::TCP_Endpoint::NoDataAcked() const 124 0.0086 bro seq_delta(unsigned int, unsigned int) 124 0.0086 bro std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> >::front() 124 0.0086 kallsyms fsnotify 123 0.0085 bro CompositeHash::ComputeHash(Val const*, int) const 123 0.0085 bro analyzer::tcp::TCP_Reassembler::DeliverBlock(unsigned long, int, unsigned char const*) 123 0.0085 bro iosource::Manager::Size() const 123 0.0085 bro std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::value, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&) 122 0.0085 bro IPAddr::IPAddr(in_addr const&) 122 0.0085 bro std::__shared_ptr_access<bro_broker::Manager::BrokerState, (__gnu_cxx::_Lock_policy)2, false, false>::_M_get() const 121 0.0084 bro std::mutex::native_handle() 120 0.0083 bro TimerMgr::Time() const 120 0.0083 bro Val::AsCount() const 120 0.0083 kallsyms account_user_time 119 0.0083 bro Val::IsZero() const 119 0.0083 kallsyms arch_irq_work_raise 118 0.0082 bro Expr::Type() const 118 0.0082 bro MutableVal::LoggingAccess() const 117 0.0081 bro Connection::CheckEncapsulation(EncapsulationStack const*) 117 0.0081 bro IPAddr::operator=(IPAddr const&) 116 0.0081 bro Frame::Frame(int, BroFunc const*, ValPList const*) 116 0.0081 bro MutableVal::~MutableVal() 116 0.0081 bro Val::Val(TypeTag) 115 0.0080 bro Connection::BuildConnVal() 115 0.0080 bro analyzer::tcp::TCP_Analyzer::DeliverData(double, unsigned char const*, int, int, IP_Hdr const*, tcphdr const*, analyzer::tcp::TCP_Endpoint*, unsigned long, int, analyzer::tcp::TCP_Flags) 114 0.0079 bro ID::IsInternalGlobal() const 114 0.0079 bro analyzer::tcp::TCP_Endpoint::IsOrig() const 114 0.0079 bro strreverse 113 0.0078 bro MutableVal::Modified() 113 0.0078 bro analyzer::tcp::TCP_Reassembler::Deliver(unsigned long, int, unsigned char const*) 113 0.0078 kallsyms __ext4_get_inode_loc 112 0.0078 bro Connection::GetTimerMgr() const 112 0.0078 bro ODesc::AddRaw(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) 112 0.0078 bro std::chrono::duration<long, std::ratio<1l, 1000000000l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::ratio<1l, 1l>, long, true, true>::__cast<long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&) 110 0.0076 bro ODesc::IsBinary() const 109 0.0076 bro Connection::Match(Rule::PatternType, unsigned char const*, int, bool, bool, bool, bool) 109 0.0076 bro Frame::HasDelayed() const 109 0.0076 bro InitStmt::Exec(Frame*, stmt_flow_type&) const 109 0.0076 bro SerialObj::IncreaseTimeCounter() 109 0.0076 bro init_endpoint(analyzer::tcp::TCP_Endpoint*, analyzer::tcp::TCP_Flags, unsigned int, unsigned int, double) 109 0.0076 bro logging::Manager::RecordToFilterVals(logging::Manager::Stream*, logging::Manager::Filter*, RecordVal*) 109 0.0076 kallsyms wake_up_q 108 0.0075 bro DFA_Machine::StartState() const 108 0.0075 bro modp_ulitoa10 108 0.0075 kallsyms sched_slice.isra.57 107 0.0074 bro analyzer::tcp::TCP_ApplicationAnalyzer::TCP() 107 0.0074 bro file_analysis::File::UpdateLastActivityTime() 107 0.0074 bro std::chrono::duration<double, std::ratio<1l, 1l> >::duration<double, void>(double const&) 107 0.0074 kallsyms __mark_inode_dirty 106 0.0074 bro ListVal::ListVal(TypeTag) 106 0.0074 bro RefExpr::Assign(Frame*, Val*, Opcode) 106 0.0074 bro ValPList::~ValPList() 106 0.0074 bro std::_List_iterator<analyzer::Analyzer*>::operator!=(std::_List_iterator<analyzer::Analyzer*> const&) const 106 0.0074 bro threading::MsgThread::Heartbeat() 106 0.0074 kallsyms kmem_cache_alloc 105 0.0073 bro DFA_State_Cache::GetStats(DFA_State_Cache::Stats*) 105 0.0073 bro RemoteSerializer::Poll(bool) 105 0.0073 bro logging::FlushWriteBufferMessage::FlushWriteBufferMessage(logging::WriterFrontend*) 105 0.0073 kallsyms drop_futex_key_refs.isra.15 105 0.0073 kallsyms error_entry 104 0.0072 bro AttrPList::operator[](int) const 104 0.0072 bro IP_Hdr::SrcAddr() const 104 0.0072 bro ListVal::~ListVal() 104 0.0072 bro siphash(unsigned long*, unsigned char const*, unsigned long, unsigned char const*) 104 0.0072 bro std::queue<threading::BasicOutputMessage*, std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> > >::size() const 103 0.0071 bro ConstExpr::Eval(Frame*) const 103 0.0071 bro ProfileLogger::Log() 103 0.0071 bro void __gnu_cxx::new_allocator<threading::BasicInputMessage*>::construct<threading::BasicInputMessage*, threading::BasicInputMessage* const&>(threading::BasicInputMessage**, threading::BasicInputMessage* const&) 102 0.0071 bro DataBlock::DataBlock(Reassembler*, unsigned char const*, unsigned long, unsigned long, DataBlock*, DataBlock*, ReassemblerType) 102 0.0071 bro HashKey::HashBytes(void const*, int) 101 0.0070 bro ConstExpr::Value() const 101 0.0070 bro EventHandler::Call(ValPList*, bool) 101 0.0070 bro FragReassemblerTracker::~FragReassemblerTracker() 101 0.0070 bro IP_Hdr::IP_Hdr(ip const*, bool) 101 0.0070 bro iosource::IOSource::SetIdle(bool) 101 0.0070 bro std::__cxx11::list<analyzer::Analyzer*, std::allocator<analyzer::Analyzer*> >::clear() 101 0.0070 bro std::chrono::duration<double, std::ratio<1l, 1l> >::count() const 101 0.0070 bro std::vector<Val*, std::allocator<Val*> >::size() const 100 0.0069 bro HasFieldExpr::Fold(Val*) const 100 0.0069 bro NetSessions::LookupTimerMgr(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const*, bool) 100 0.0069 bro ODesc::Add(char const*, int) 100 0.0069 bro PQ_TimerMgr::Top() 100 0.0069 bro analyzer::tcp::TCP_Flags::FIN() const 99 0.0069 bro Frame::SetElement(int, Val*) 99 0.0069 bro std::_List_iterator<threading::BasicThread*>::operator!=(std::_List_iterator<threading::BasicThread*> const&) const 98 0.0068 bro HashKey::HashKey(void const*, int) 98 0.0068 bro update_window(analyzer::tcp::TCP_Endpoint*, unsigned int, unsigned int, unsigned int, analyzer::tcp::TCP_Flags) 97 0.0067 bro EquivClass::Size() const 97 0.0067 bro Frame::SetCall(CallExpr const*) 97 0.0067 bro ReturnStmt::Exec(Frame*, stmt_flow_type&) const 96 0.0067 bro BaseList::remove(void*) 96 0.0067 bro ID::Offset() const 96 0.0067 bro std::chrono::duration<long, std::ratio<1l, 1l> >::duration<int, void>(int const&) 95 0.0066 bro Func::FType() const 95 0.0066 bro HashKey::HashKey(char const*) 95 0.0066 bro get_relative_seq(analyzer::tcp::TCP_Endpoint const*, unsigned int, unsigned int, unsigned int, bool*) 94 0.0065 bro FragReassemblerTracker::FragReassemblerTracker(NetSessions*, FragReassembler*) 94 0.0065 bro IPAddr::~IPAddr() 94 0.0065 kallsyms __find_get_block 92 0.0064 bro BroTypePList::append(BroType*) 92 0.0064 bro ListVal::Append(Val*) 92 0.0064 bro ODesc::Add(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) 92 0.0064 libc-2.27.so read 91 0.0063 bro NotExpr::Fold(Val*) const 91 0.0063 bro std::_List_iterator<Trigger*>::operator!=(std::_List_iterator<Trigger*> const&) const 91 0.0063 bro std::__cxx11::_List_base<Trigger*, std::allocator<Trigger*> >::_List_impl::_List_impl() 91 0.0063 ld-2.27.so _dl_lookup_symbol_x 90 0.0062 bro IP_Hdr::~IP_Hdr() 90 0.0062 bro IndexExpr::Eval(Frame*) const 90 0.0062 bro PriorityQueue::SetElement(int, PQ_Element*) 90 0.0062 bro RecordType::NumFields() const 90 0.0062 bro StringVal::~StringVal() 90 0.0062 bro Val*&& std::forward<Val*>(std::remove_reference<Val*>::type&) 90 0.0062 bro analyzer::Analyzer::AppendNewChildren() 90 0.0062 bro std::iterator_traits<char*>::difference_type std::__distance<char*>(char*, char*, std::random_access_iterator_tag) 90 0.0062 kallsyms ext4_block_write_begin 90 0.0062 kallsyms ext4_da_write_begin 89 0.0062 bro Connection::OrigAddr() const 89 0.0062 bro InExpr::Fold(Val*, Val*) const 89 0.0062 bro Tag::Tag(Tag const&) 89 0.0062 bro TypeList::Append(BroType*) 89 0.0062 bro logging::Manager::ValToLogVal(Val*, BroType*) 89 0.0062 bro std::queue<threading::BasicOutputMessage*, std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> > >::push(threading::BasicOutputMessage* const&) 88 0.0061 bro Specific_RE_Matcher::Match(unsigned char const*, int) 88 0.0061 bro std::__cxx11::list<Trigger*, std::allocator<Trigger*> >::list() 88 0.0061 kallsyms sched_clock_tick 87 0.0060 libc-2.27.so __rawmemchr_sse2 86 0.0060 bro PQ_TimerMgr::DoAdvance(double, int) 86 0.0060 bro analyzer::mime::MIME_Entity::NewDataLine(int, char const*, int) 86 0.0060 bro int const& std::min<int>(int const&, int const&) 86 0.0060 bro std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > std::__copy_move<false, false, std::bidirectional_iterator_tag>::__copy_m<std::_List_iterator<Trigger*>, std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > >(std::_List_iterator<Trigger*>, std::_List_iterator<Trigger*>, std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > >) 86 0.0060 kallsyms vfs_write 85 0.0059 bro BroType::AsTypeList() 85 0.0059 bro Val::AsString() const 85 0.0059 kallsyms __do_page_fault 85 0.0059 libc-2.27.so snprintf 84 0.0058 bro DFA_State::NFAStateNum() const 84 0.0058 bro analyzer::http::HTTP_Entity::DeliverBody(int, char const*, int) 84 0.0058 bro file_analysis::AnalyzerSet::DrainModifications() 84 0.0058 kallsyms hrtimer_cancel 84 0.0058 kallsyms kmem_cache_free 83 0.0058 bro analyzer::tcp::TCP_Endpoint::AckWraps() const 83 0.0058 kallsyms handle_mm_fault 82 0.0057 bro operator==(IPAddr const&, IPAddr const&) 82 0.0057 bro std::__cxx11::list<Trigger*, std::allocator<Trigger*> >::end() 82 0.0057 kallsyms ext4_da_write_end 81 0.0056 bro HashKey::HashKey(void const*, int, unsigned long) 81 0.0056 bro analyzer::tcp::TCP_Analyzer::CheckRecording(int, analyzer::tcp::TCP_Flags) 81 0.0056 bro int&& std::forward<int>(std::remove_reference<int>::type&) 81 0.0056 bro std::allocator<std::_List_node<Trigger*> >::allocator() 81 0.0056 bro std::pair<bool, Val*>::operator=(std::pair<bool, Val*>&&) 81 0.0056 bro std::vector<Frame*, std::allocator<Frame*> >::pop_back() 81 0.0056 kallsyms __vfs_read 81 0.0056 tg3 /tg3 80 0.0056 bro file_analysis::Hash::DeliverStream(unsigned char const*, unsigned long) 79 0.0055 bro EqExpr::Fold(Val*, Val*) const 79 0.0055 bro analyzer::tcp::TCP_Endpoint::CheckHistory(unsigned int, char) 79 0.0055 bro std::__cxx11::_List_base<analyzer::Analyzer*, std::allocator<analyzer::Analyzer*> >::_M_clear() 79 0.0055 kallsyms reschedule_interrupt 78 0.0054 bro TypeList::TypeList(BroType*) 78 0.0054 bro std::queue<threading::BasicInputMessage*, std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> > >::front() 78 0.0054 kallsyms hrtimer_wakeup 78 0.0054 kallsyms security_file_permission 77 0.0053 bro BinaryExpr::StringFold(Val*, Val*) const 77 0.0053 bro Reassembler::TrimToSeq(unsigned long) 77 0.0053 bro Tag::~Tag() 77 0.0053 bro analyzer::Tag::~Tag() 77 0.0053 bro analyzer::tcp::ContentLine_Analyzer::SkipDeliveries() const 77 0.0053 bro operator<(IPAddr const&, IPAddr const&) 76 0.0053 bro FieldExpr::Assign(Frame*, Val*, Opcode) 76 0.0053 bro ListVal::~ListVal() 76 0.0053 bro void __gnu_cxx::new_allocator<threading::BasicOutputMessage*>::destroy<threading::BasicOutputMessage*>(threading::BasicOutputMessage**) 76 0.0053 kallsyms mark_page_accessed 75 0.0052 bro TraceState::DoTrace() const 75 0.0052 bro analyzer::tcp::TCP_Flags::TCP_Flags(tcphdr const*) 75 0.0052 bro std::deque<file_analysis::AnalyzerSet::Modification*, std::allocator<file_analysis::AnalyzerSet::Modification*> >::empty() const 75 0.0052 bro update_history(analyzer::tcp::TCP_Flags, analyzer::tcp::TCP_Endpoint*, unsigned long, int) 75 0.0052 bro void std::allocator_traits<std::allocator<threading::BasicInputMessage*> >::destroy<threading::BasicInputMessage*>(std::allocator<threading::BasicInputMessage*>&, threading::BasicInputMessage**) 75 0.0052 kallsyms apic_send_IPI_self 75 0.0052 kallsyms run_local_timers 74 0.0051 bro RuleMatcher::InitEndpoint(analyzer::Analyzer*, IP_Hdr const*, int, RuleEndpointState*, bool, analyzer::pia::PIA*) 74 0.0051 kallsyms current_kernel_time64 74 0.0051 libc-2.27.so htonl 73 0.0051 bro Event::~Event() 73 0.0051 bro std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**>::_S_buffer_size() 73 0.0051 bro std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > >::insert_iterator(std::__cxx11::list<Trigger*, std::allocator<Trigger*> >&, std::_List_iterator<Trigger*>) 73 0.0051 bro std::queue<threading::BasicInputMessage*, std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> > >::pop() 73 0.0051 bro std::unique_lock<std::mutex>* std::__uninitialized_copy<false>::__uninit_copy<std::move_iterator<std::unique_lock<std::mutex>*>, std::unique_lock<std::mutex>*>(std::move_iterator<std::unique_lock<std::mutex>*>, std::move_iterator<std::unique_lock<std::mutex>*>, std::unique_lock<std::mutex>*) 73 0.0051 libc-2.27.so fwrite 72 0.0050 bro Event::Dispatch(bool) 72 0.0050 bro analyzer::http::HTTP_Message::IsOrig() 72 0.0050 bro analyzer::tcp::TCP_Endpoint::ValidChecksum(tcphdr const*, int) const 72 0.0050 bro file_analysis::Manager::GetFile(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, Connection*, analyzer::Tag, bool, bool, char const*) 72 0.0050 bro std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> >::pop_front() 72 0.0050 bro std::move_iterator<std::unique_lock<std::mutex>*>::base() const 72 0.0050 bro void std::vector<std::unique_lock<std::mutex>, std::allocator<std::unique_lock<std::mutex> > >::emplace_back<std::unique_lock<std::mutex> >(std::unique_lock<std::mutex>&&) 72 0.0050 kallsyms memset 72 0.0050 kallsyms smp_call_function_many 72 0.0050 ld-2.27.so _dl_fixup 72 0.0050 libc-2.27.so isupper 71 0.0049 bro Connection::SetLastTime(double) 71 0.0049 bro FuncType::Flavor() const 71 0.0049 bro addr_port_canon_lt(IPAddr const&, unsigned int, IPAddr const&, unsigned int) 71 0.0049 bro bool __gnu_cxx::__is_null_pointer<char>(char*) 71 0.0049 bro std::_List_node<threading::BasicThread*>::_M_valptr() 71 0.0049 bro threading::DebugMessage::~DebugMessage() 70 0.0049 bro Dictionary::InitForIteration() const 70 0.0049 bro HashKey::Size() const 70 0.0049 bro Val::AsTable() const 70 0.0049 bro std::vector<std::unique_lock<std::mutex>, std::allocator<std::unique_lock<std::mutex> > >::size() const 70 0.0049 kallsyms cpumask_next 69 0.0048 bro BroType::~BroType() 69 0.0048 bro analyzer::tcp::TCP_Endpoint::SeqWraps() const 69 0.0048 bro escapeReservedContent(ODesc*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, char const*, int) 69 0.0048 bro std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > std::__copy_move_a2<false, std::_List_iterator<Trigger*>, std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > >(std::_List_iterator<Trigger*>, std::_List_iterator<Trigger*>, std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > >) 69 0.0048 kallsyms add_transaction_credits 68 0.0047 bro ConnID::~ConnID() 68 0.0047 bro PriorityQueue::Swap(int, int) 68 0.0047 bro RecordVal::~RecordVal() 68 0.0047 bro VectorVal::Assign(unsigned int, Val*, Opcode) 68 0.0047 bro analyzer::Analyzer::DeliverPacket(int, unsigned char const*, bool, unsigned long, IP_Hdr const*, int) 68 0.0047 bro analyzer::tcp::TCP_Analyzer::UpdateConnVal(RecordVal*) 68 0.0047 bro net_is_processing_suspended() 67 0.0047 bro BifFunc::bro_to_lower(Frame*, ValPList*) 67 0.0047 bro CompositeHash::SingleValHash(int, char*, BroType*, Val*, bool) const 67 0.0047 bro HashKey::Hash() const 67 0.0047 bro Val::InternalInt() const 67 0.0047 bro __gnu_cxx::__aligned_membuf<threading::BasicThread*>::_M_ptr() 67 0.0047 bro long const& std::min<long>(long const&, long const&) 67 0.0047 bro std::_List_iterator<threading::BasicThread*>::_List_iterator(std::__detail::_List_node_base*) 67 0.0047 libc-2.27.so __libc_enable_asynccancel 66 0.0046 bro IP_Hdr::IsFragment() const 66 0.0046 bro __gnu_cxx::__aligned_membuf<analyzer::Analyzer*>::_M_ptr() 66 0.0046 bro std::__cxx11::list<iosource::Manager::Source*, std::allocator<iosource::Manager::Source*> >::_M_node_count() const 66 0.0046 bro std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> >::begin() 66 0.0046 bro streq(char const*, char const*) 66 0.0046 bro void __gnu_cxx::new_allocator<CallInfo>::construct<CallInfo, CallInfo>(CallInfo*, CallInfo&&) 66 0.0046 kallsyms unlock_page 65 0.0045 bro analyzer::http::HTTP_Message::RequestBuffer(int*, char**) 65 0.0045 bro threading::BasicOutputMessage::~BasicOutputMessage() 64 0.0044 bro BoolExpr::DoSingleEval(Frame*, Val*, Expr*) const 64 0.0044 bro IPAddr::IPAddr() 64 0.0044 bro expire_timers(iosource::PktSrc*) 64 0.0044 bro net_update_time(double) 64 0.0044 bro std::vector<Val*, std::allocator<Val*> >::_M_default_append(unsigned long) 64 0.0044 bro yyparse() 64 0.0044 kallsyms do_select 64 0.0044 kallsyms jbd2_journal_dirty_metadata 63 0.0044 bro Dictionary::Dictionary(dict_order, int) 63 0.0044 bro Dictionary::Insert(DictEntry*, int) 63 0.0044 bro bool std::operator==<file_analysis::AnalyzerSet::Modification*, file_analysis::AnalyzerSet::Modification*&, file_analysis::AnalyzerSet::Modification**>(std::_Deque_iterator<file_analysis::AnalyzerSet::Modification*, file_analysis::AnalyzerSet::Modification*&, file_analysis::AnalyzerSet::Modification**> const&, std::_Deque_iterator<file_analysis::AnalyzerSet::Modification*, file_analysis::AnalyzerSet::Modification*&, file_analysis::AnalyzerSet::Modification**> const&) 63 0.0044 bro file_analysis::File::DataIn(unsigned char const*, unsigned long) 63 0.0044 bro std::__cxx11::_List_base<Trigger*, std::allocator<Trigger*> >::_M_init() 63 0.0044 bro void std::_Destroy_aux<false>::__destroy<std::unique_lock<std::mutex>*>(std::unique_lock<std::mutex>*, std::unique_lock<std::mutex>*) 63 0.0044 bro void std::vector<CallInfo, std::allocator<CallInfo> >::emplace_back<CallInfo>(CallInfo&&) 63 0.0044 kallsyms ext4_file_write_iter 62 0.0043 bro Dictionary::Length() const 62 0.0043 bro HashKey::CopyKey(void const*, int) const 62 0.0043 bro analyzer::Analyzer::GetAnalyzerTag() const 62 0.0043 bro analyzer::mime::MIME_Entity::FlushData() 62 0.0043 bro std::_List_iterator<threading::BasicThread*>::operator*() const 62 0.0043 bro unsigned long const& std::max<unsigned long>(unsigned long const&, unsigned long const&) 62 0.0043 kallsyms shmem_getpage_gfp 62 0.0043 libc-2.27.so _IO_file_underflow@@GLIBC_2.2.5 61 0.0042 bro CompositeHash::CompositeHash(TypeList*) 61 0.0042 bro Event::Event(EventHandlerPtr, ValPList*, unsigned long, unsigned int, TimerMgr*, BroObj*) 61 0.0042 bro FuncType::YieldType() 61 0.0042 bro IterCookie::IterCookie(int, int) 61 0.0042 bro do_split_string(StringVal*, RE_Matcher*, int, int) 61 0.0042 bro rules_parse() 61 0.0042 bro std::_List_iterator<threading::BasicThread*>::operator++(int) 61 0.0042 bro std::vector<Func::Body, std::allocator<Func::Body> >::end() const 61 0.0042 kallsyms __generic_file_write_iter 61 0.0042 kallsyms copy_page_to_iter 61 0.0042 kallsyms sys_read 60 0.0042 bro Bstr_cmp(BroString const*, BroString const*) 60 0.0042 bro analyzer::conn_size::ConnSize_Analyzer::UpdateConnVal(RecordVal*) 60 0.0042 bro file_analysis::boolPDict::Lookup(char const*) const 60 0.0042 bro std::__cxx11::list<iosource::Manager::Source*, std::allocator<iosource::Manager::Source*> >::size() const
_______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev