Re: [lttng-dev] What are sys calls starting with compat?
Date: Tue, 10 Dec 2013 11:39:40 -0800 What does sys_unknown mean and why does it occur? Does it mean that LTTng cannot find the name of a system call? Yes. It means the ID of the system call is unknown to LTTng (e.g. kernel newer than LTTng system call instrumentation). You can also get sys_ni_syscall (and compat_sys_ni_syscall) when the system call is even more unknown -that is to say, when the system call number cannot be found in the system call dispatch table. Daniel U. Thibault Protection des systèmes et contremesures (PSC) | Systems Protection Countermeasures (SPC) Cyber sécurité pour les missions essentielles (CME) | Mission Critical Cyber Security (MCCS) R D pour la défense Canada - Valcartier (RDDC Valcartier) | Defence RD Canada - Valcartier (DRDC Valcartier) 2459 route de la Bravoure Québec QC G3J 1X5 CANADA Vox : (418) 844-4000 x4245 Fax : (418) 844-4538 NAC : 918V QSDJ http://www.travelgis.com/map.asp?addr=918V%20QSDJ Gouvernement du Canada | Government of Canada http://www.valcartier.drdc-rddc.gc.ca/ ___ lttng-dev mailing list lttng-dev@lists.lttng.org http://lists.lttng.org/cgi-bin/mailman/listinfo/lttng-dev
Re: [lttng-dev] What are sys calls starting with compat?
Date: Tue, 10 Dec 2013 01:55:48 + (UTC) System calls with compat prefix are for e.g. 32-bit processes running on a 64-bit kernel: those processes are using a different system call table (ia32 for Intel) than 64-bit processes, and therefore those system calls are named compat_* by LTTng. Mathieu I presume the LTTng event names will also be prefixed with compat_. For instance, compat_sys_rmdir. Or would it be sys_compat_rmdir? And what of the exit_syscall and sys_unknown events? Daniel U. Thibault Protection des systèmes et contremesures (PSC) | Systems Protection Countermeasures (SPC) Cyber sécurité pour les missions essentielles (CME) | Mission Critical Cyber Security (MCCS) R D pour la défense Canada - Valcartier (RDDC Valcartier) | Defence RD Canada - Valcartier (DRDC Valcartier) 2459 route de la Bravoure Québec QC G3J 1X5 CANADA Vox : (418) 844-4000 x4245 Fax : (418) 844-4538 NAC : 918V QSDJ http://www.travelgis.com/map.asp?addr=918V%20QSDJ Gouvernement du Canada | Government of Canada http://www.valcartier.drdc-rddc.gc.ca/ ___ lttng-dev mailing list lttng-dev@lists.lttng.org http://lists.lttng.org/cgi-bin/mailman/listinfo/lttng-dev
Re: [lttng-dev] What are sys calls starting with compat?
- Original Message - From: Daniel Thibault daniel.thiba...@drdc-rddc.gc.ca To: lttng-dev@lists.lttng.org Cc: Mathieu Desnoyers mathieu.desnoy...@efficios.com Sent: Tuesday, December 10, 2013 9:57:21 AM Subject: Re: [lttng-dev] What are sys calls starting with compat? Date: Tue, 10 Dec 2013 01:55:48 + (UTC) System calls with compat prefix are for e.g. 32-bit processes running on a 64-bit kernel: those processes are using a different system call table (ia32 for Intel) than 64-bit processes, and therefore those system calls are named compat_* by LTTng. Mathieu I presume the LTTng event names will also be prefixed with compat_. Yes. For instance, compat_sys_rmdir. Yes. Or would it be sys_compat_rmdir? No. And what of the exit_syscall and sys_unknown events? exit_syscall has no compat prefix as I recall. compat_sys_unknown. Thanks, Mathieu -- Mathieu Desnoyers EfficiOS Inc. http://www.efficios.com ___ lttng-dev mailing list lttng-dev@lists.lttng.org http://lists.lttng.org/cgi-bin/mailman/listinfo/lttng-dev
Re: [lttng-dev] What are sys calls starting with compat?
What does sys_unknown mean and why doe it occur? Does it mean that LTTng can not find the name of system call? Regards, Shariyar -- Message: 2 Date: Tue, 10 Dec 2013 15:31:19 + (UTC) From: Mathieu Desnoyers mathieu.desnoy...@efficios.com To: Daniel Thibault daniel.thiba...@drdc-rddc.gc.ca Cc: lttng-dev@lists.lttng.org Subject: Re: [lttng-dev] What are sys calls starting with compat? Message-ID: 1571110803.82672.1386689479225.javamail.zim...@efficios.com Content-Type: text/plain; charset=utf-8 - Original Message - From: Daniel Thibault daniel.thiba...@drdc-rddc.gc.ca To: lttng-dev@lists.lttng.org Cc: Mathieu Desnoyers mathieu.desnoy...@efficios.com Sent: Tuesday, December 10, 2013 9:57:21 AM Subject: Re: [lttng-dev] What are sys calls starting with compat? Date: Tue, 10 Dec 2013 01:55:48 + (UTC) System calls with compat prefix are for e.g. 32-bit processes running on a 64-bit kernel: those processes are using a different system call table (ia32 for Intel) than 64-bit processes, and therefore those system calls are named compat_* by LTTng. Mathieu I presume the LTTng event names will also be prefixed with compat_. Yes. For instance, compat_sys_rmdir. Yes. Or would it be sys_compat_rmdir? No. And what of the exit_syscall and sys_unknown events? exit_syscall has no compat prefix as I recall. compat_sys_unknown. Thanks, Mathieu ___ lttng-dev mailing list lttng-dev@lists.lttng.org http://lists.lttng.org/cgi-bin/mailman/listinfo/lttng-dev
Re: [lttng-dev] What are sys calls starting with compat?
- Original Message - From: Shariyar syed.shari...@gmail.com To: lttng-dev@lists.lttng.org Sent: Tuesday, December 10, 2013 2:39:40 PM Subject: Re: [lttng-dev] What are sys calls starting with compat? What does sys_unknown mean and why doe it occur? Does it mean that LTTng can not find the name of system call? Yes. It means the ID of the system call is unknown to LTTng (e.g. kernel newer than LTTng system call instrumentation). Thanks, Mathieu Regards, Shariyar -- Message: 2 Date: Tue, 10 Dec 2013 15:31:19 + (UTC) From: Mathieu Desnoyers mathieu.desnoy...@efficios.com To: Daniel Thibault daniel.thiba...@drdc-rddc.gc.ca Cc: lttng-dev@lists.lttng.org Subject: Re: [lttng-dev] What are sys calls starting with compat? Message-ID: 1571110803.82672.1386689479225.javamail.zim...@efficios.com Content-Type: text/plain; charset=utf-8 - Original Message - From: Daniel Thibault daniel.thiba...@drdc-rddc.gc.ca To: lttng-dev@lists.lttng.org Cc: Mathieu Desnoyers mathieu.desnoy...@efficios.com Sent: Tuesday, December 10, 2013 9:57:21 AM Subject: Re: [lttng-dev] What are sys calls starting with compat? Date: Tue, 10 Dec 2013 01:55:48 + (UTC) System calls with compat prefix are for e.g. 32-bit processes running on a 64-bit kernel: those processes are using a different system call table (ia32 for Intel) than 64-bit processes, and therefore those system calls are named compat_* by LTTng. Mathieu I presume the LTTng event names will also be prefixed with compat_. Yes. For instance, compat_sys_rmdir. Yes. Or would it be sys_compat_rmdir? No. And what of the exit_syscall and sys_unknown events? exit_syscall has no compat prefix as I recall. compat_sys_unknown. Thanks, Mathieu ___ lttng-dev mailing list lttng-dev@lists.lttng.org http://lists.lttng.org/cgi-bin/mailman/listinfo/lttng-dev -- Mathieu Desnoyers EfficiOS Inc. http://www.efficios.com ___ lttng-dev mailing list lttng-dev@lists.lttng.org http://lists.lttng.org/cgi-bin/mailman/listinfo/lttng-dev
[lttng-dev] What are sys calls starting with compat?
Can someone kindly explain the difference between system calls starting with compat prefix and regular system calls? Compat system calls do not appear in the system call table: http://syscalls.kernelgrok.com/. However, I did found them in the source code of Linux. Thanks, Shariyar ___ lttng-dev mailing list lttng-dev@lists.lttng.org http://lists.lttng.org/cgi-bin/mailman/listinfo/lttng-dev
