X7ROOT File Manager
Current Path:
/usr/share/systemtap/tapset/linux/x86_64
usr
/
share
/
systemtap
/
tapset
/
linux
/
x86_64
/
📁
..
📄
aux_syscalls.stp
(3.58 KB)
📄
sysc_arch_prctl.stp
(3.21 KB)
📄
sysc_compat_execve.stp
(1.59 KB)
📄
sysc_compat_fadvise64.stp
(6.92 KB)
📄
sysc_compat_fallocate.stp
(3.54 KB)
📄
sysc_compat_ftruncate64.stp
(3.34 KB)
📄
sysc_compat_lookup_dcookie.stp
(3.72 KB)
📄
sysc_compat_readahead.stp
(3.18 KB)
📄
sysc_compat_truncate64.stp
(3.45 KB)
📄
sysc_execve.stp
(1.62 KB)
📄
sysc_get_thread_area.stp
(3.18 KB)
📄
sysc_iopl.stp
(2.27 KB)
📄
sysc_mmap.stp
(4.04 KB)
📄
sysc_mmap2.stp
(2.62 KB)
📄
sysc_pipe32.stp
(1.54 KB)
📄
sysc_set_thread_area.stp
(3.13 KB)
📄
sysc_sigaltstack.stp
(2.24 KB)
📄
sysc_sysctl32.stp
(1.12 KB)
📄
sysc_vm86_warning.stp
(1.17 KB)
📄
syscall_num.stp
(53.77 KB)
Editing: sysc_sysctl32.stp
# sysctl _____________________________________________________ # # long sys32_sysctl(struct sysctl_ia32 __user *args32) # @define _SYSCALL_SYSCTL32_NAME %( name = "sysctl" %) @define _SYSCALL_SYSCTL32_ARGSTR %( argstr = sprintf("%p", args) %) probe syscall.sysctl32 = dw_syscall.sysctl32 !, nd_syscall.sysctl32 ? {} probe syscall.sysctl32.return = dw_syscall.sysctl32.return !, nd_syscall.sysctl32.return ? {} # dw_sysctl32 _____________________________________________________ probe dw_syscall.sysctl32 = kernel.function("sys32_sysctl") ? { @_SYSCALL_SYSCTL32_NAME args = $args32 @_SYSCALL_SYSCTL32_ARGSTR } probe dw_syscall.sysctl32.return = kernel.function("sys32_sysctl").return ? { @_SYSCALL_SYSCTL32_NAME @SYSC_RETVALSTR($return) } # nd_sysctl32 _____________________________________________________ probe nd_syscall.sysctl32 = kprobe.function("sys32_sysctl") ? { @_SYSCALL_SYSCTL32_NAME asmlinkage() args = pointer_arg(1) @_SYSCALL_SYSCTL32_ARGSTR } probe nd_syscall.sysctl32.return = kprobe.function("sys32_sysctl").return ? { @_SYSCALL_SYSCTL32_NAME @SYSC_RETVALSTR(returnval()) }
Upload File
Create Folder