X7ROOT File Manager
Current Path:
/usr/share/systemtap/tapset/linux
usr
/
share
/
systemtap
/
tapset
/
linux
/
📁
..
📁
arm
📁
arm64
📄
atomic.stp
(1.53 KB)
📄
aux_syscalls.stp
(143.78 KB)
📄
context-caller.stp
(3.07 KB)
📄
context-envvar.stp
(1.72 KB)
📄
context-symbols.stp
(11.99 KB)
📄
context-unwind.stp
(2.81 KB)
📄
context.stp
(18.57 KB)
📄
context.stpm
(125 B)
📄
conversions-guru.stp
(5.74 KB)
📄
conversions.stp
(15.34 KB)
📄
ctime.stp
(5.54 KB)
📄
dentry.stp
(10.11 KB)
📄
dev.stp
(1.9 KB)
📄
endian.stp
(602 B)
📄
guru-delay.stp
(1.2 KB)
📄
guru-signal.stp
(1.07 KB)
📁
i386
📁
ia64
📄
inet.stp
(1.42 KB)
📄
inet.stpm
(383 B)
📄
inet_sock.stp
(1.25 KB)
📄
ioblock.stp
(15.04 KB)
📄
ioscheduler.stp
(11.89 KB)
📄
ip.stp
(5.35 KB)
📄
ipmib-filter-default.stp
(965 B)
📄
ipmib.stp
(12.68 KB)
📄
irq.stp
(5 KB)
📄
json.stp
(8.98 KB)
📄
json.stpm
(6.11 KB)
📄
kprocess.stp
(4.4 KB)
📄
kretprobe.stp
(2.1 KB)
📄
linuxmib-filter-default.stp
(876 B)
📄
linuxmib.stp
(3.63 KB)
📄
loadavg.stp
(1.95 KB)
📄
logging.stp
(2.12 KB)
📄
memory.stp
(18.74 KB)
📁
mips
📄
netfilter.stp
(35.49 KB)
📄
networking.stp
(9.37 KB)
📄
nfs.stp
(38.06 KB)
📄
nfs_proc.stp
(55.46 KB)
📄
nfs_proc.stpm
(1.18 KB)
📄
nfsd.stp
(46.27 KB)
📄
nfsderrno.stp
(11.7 KB)
📄
panic.stp
(1.07 KB)
📄
perf.stp
(5.16 KB)
📁
powerpc
📄
proc_mem.stp
(12.05 KB)
📄
pstrace.stp
(773 B)
📄
rcu.stp
(928 B)
📄
rlimit.stp
(1.35 KB)
📄
rpc.stp
(37.67 KB)
📁
s390
📄
scheduler.stp
(11.36 KB)
📄
scsi.stp
(9.47 KB)
📄
signal.stp
(28.69 KB)
📄
socket.stp
(34.2 KB)
📄
sysc_accept.stp
(7.32 KB)
📄
sysc_accept4.stp
(7.24 KB)
📄
sysc_access.stp
(2.45 KB)
📄
sysc_acct.stp
(2.18 KB)
📄
sysc_add_key.stp
(2.91 KB)
📄
sysc_adjtimex.stp
(5.28 KB)
📄
sysc_alarm.stp
(2.52 KB)
📄
sysc_bdflush.stp
(2.75 KB)
📄
sysc_bind.stp
(6.43 KB)
📄
sysc_bpf.stp
(2.33 KB)
📄
sysc_brk.stp
(2.33 KB)
📄
sysc_capget.stp
(2.71 KB)
📄
sysc_capset.stp
(2.71 KB)
📄
sysc_chdir.stp
(2.23 KB)
📄
sysc_chmod.stp
(2.51 KB)
📄
sysc_chown.stp
(3.27 KB)
📄
sysc_chown16.stp
(2.61 KB)
📄
sysc_chroot.stp
(2.29 KB)
📄
sysc_clock_adjtime.stp
(4.72 KB)
📄
sysc_clock_getres.stp
(3.82 KB)
📄
sysc_clock_gettime.stp
(3.62 KB)
📄
sysc_clock_nanosleep.stp
(7.25 KB)
📄
sysc_clock_settime.stp
(5.02 KB)
📄
sysc_clone.stp
(6.19 KB)
📄
sysc_close.stp
(2.47 KB)
📄
sysc_connect.stp
(6.82 KB)
📄
sysc_copy_file_range.stp
(3.15 KB)
📄
sysc_creat.stp
(2.28 KB)
📄
sysc_delete_module.stp
(2.87 KB)
📄
sysc_dup.stp
(2.09 KB)
📄
sysc_dup2.stp
(2.63 KB)
📄
sysc_dup3.stp
(2.66 KB)
📄
sysc_epoll_create.stp
(5.29 KB)
📄
sysc_epoll_ctl.stp
(3.5 KB)
📄
sysc_epoll_pwait.stp
(3.49 KB)
📄
sysc_epoll_wait.stp
(4.33 KB)
📄
sysc_eventfd.stp
(4.86 KB)
📄
sysc_execve.stp
(6.11 KB)
📄
sysc_execveat.stp
(6.78 KB)
📄
sysc_exit.stp
(1.54 KB)
📄
sysc_exit_group.stp
(1.66 KB)
📄
sysc_faccessat.stp
(3.2 KB)
📄
sysc_fadvise64.stp
(7.43 KB)
📄
sysc_fallocate.stp
(3.29 KB)
📄
sysc_fanotify_init.stp
(3.02 KB)
📄
sysc_fanotify_mark.stp
(5.75 KB)
📄
sysc_fchdir.stp
(2.23 KB)
📄
sysc_fchmod.stp
(2.52 KB)
📄
sysc_fchmodat.stp
(3.2 KB)
📄
sysc_fchown.stp
(3.28 KB)
📄
sysc_fchown16.stp
(2.59 KB)
📄
sysc_fchownat.stp
(3.24 KB)
📄
sysc_fcntl.stp
(4.37 KB)
📄
sysc_fdatasync.stp
(2.39 KB)
📄
sysc_fgetxattr.stp
(2.94 KB)
📄
sysc_finit_module.stp
(2.86 KB)
📄
sysc_flistxattr.stp
(2.61 KB)
📄
sysc_flock.stp
(2.28 KB)
📄
sysc_fork.stp
(2.53 KB)
📄
sysc_fremovexattr.stp
(2.73 KB)
📄
sysc_fsetxattr.stp
(3.34 KB)
📄
sysc_fstat.stp
(5.76 KB)
📄
sysc_fstatat.stp
(5.21 KB)
📄
sysc_fstatfs.stp
(2.94 KB)
📄
sysc_fstatfs64.stp
(2.86 KB)
📄
sysc_fsync.stp
(2.18 KB)
📄
sysc_ftruncate.stp
(5.54 KB)
📄
sysc_futex.stp
(5.11 KB)
📄
sysc_futimesat.stp
(5.91 KB)
📄
sysc_get_mempolicy.stp
(4.1 KB)
📄
sysc_get_robust_list.stp
(4.12 KB)
📄
sysc_getcpu.stp
(2.63 KB)
📄
sysc_getcwd.stp
(2.43 KB)
📄
sysc_getdents.stp
(5.18 KB)
📄
sysc_getegid.stp
(3.46 KB)
📄
sysc_geteuid.stp
(3.4 KB)
📄
sysc_getgid.stp
(3.32 KB)
📄
sysc_getgroups.stp
(3.91 KB)
📄
sysc_gethostname.stp
(1.22 KB)
📄
sysc_getitimer.stp
(4.87 KB)
📄
sysc_getpeername.stp
(7.01 KB)
📄
sysc_getpgid.stp
(2.6 KB)
📄
sysc_getpgrp.stp
(2.04 KB)
📄
sysc_getpid.stp
(1.98 KB)
📄
sysc_getppid.stp
(2.06 KB)
📄
sysc_getpriority.stp
(2.62 KB)
📄
sysc_getrandom.stp
(2.72 KB)
📄
sysc_getresgid.stp
(3.73 KB)
📄
sysc_getresuid.stp
(3.54 KB)
📄
sysc_getrlimit.stp
(4.08 KB)
📄
sysc_getrusage.stp
(3.45 KB)
📄
sysc_getsid.stp
(2.26 KB)
📄
sysc_getsockname.stp
(7.03 KB)
📄
sysc_getsockopt.stp
(7.88 KB)
📄
sysc_gettid.stp
(2.01 KB)
📄
sysc_gettimeofday.stp
(3.7 KB)
📄
sysc_getuid.stp
(3.35 KB)
📄
sysc_getxattr.stp
(3 KB)
📄
sysc_init_module.stp
(2.76 KB)
📄
sysc_inotify_add_watch.stp
(3.25 KB)
📄
sysc_inotify_init.stp
(5.26 KB)
📄
sysc_inotify_rm_watch.stp
(2.89 KB)
📄
sysc_io_cancel.stp
(2.85 KB)
📄
sysc_io_destroy.stp
(2.5 KB)
📄
sysc_io_getevents.stp
(4.25 KB)
📄
sysc_io_setup.stp
(3.43 KB)
📄
sysc_io_submit.stp
(3.46 KB)
📄
sysc_ioctl.stp
(3.12 KB)
📄
sysc_ioperm.stp
(2.41 KB)
📄
sysc_ioprio_get.stp
(2.65 KB)
📄
sysc_ioprio_set.stp
(2.82 KB)
📄
sysc_kcmp.stp
(2.51 KB)
📄
sysc_kexec_file_load.stp
(3.35 KB)
📄
sysc_kexec_load.stp
(3.96 KB)
📄
sysc_keyctl.stp
(3.16 KB)
📄
sysc_kill.stp
(2.25 KB)
📄
sysc_lchown.stp
(3.34 KB)
📄
sysc_lchown16.stp
(2.66 KB)
📄
sysc_lgetxattr.stp
(3.05 KB)
📄
sysc_link.stp
(2.34 KB)
📄
sysc_linkat.stp
(3.26 KB)
📄
sysc_listen.stp
(6.17 KB)
📄
sysc_listxattr.stp
(2.72 KB)
📄
sysc_llistxattr.stp
(2.78 KB)
📄
sysc_llseek.stp
(2.81 KB)
📄
sysc_lookup_dcookie.stp
(3.39 KB)
📄
sysc_lremovexattr.stp
(3.11 KB)
📄
sysc_lseek.stp
(3.98 KB)
📄
sysc_lsetxattr.stp
(3.22 KB)
📄
sysc_lstat.stp
(5.91 KB)
📄
sysc_madvise.stp
(2.55 KB)
📄
sysc_mbind.stp
(3.69 KB)
📄
sysc_membarrier.stp
(2.65 KB)
📄
sysc_memfd_create.stp
(2.77 KB)
📄
sysc_migrate_pages.stp
(3.83 KB)
📄
sysc_mincore.stp
(2.47 KB)
📄
sysc_mkdir.stp
(2.38 KB)
📄
sysc_mkdirat.stp
(2.92 KB)
📄
sysc_mknod.stp
(2.45 KB)
📄
sysc_mknodat.stp
(3.07 KB)
📄
sysc_mlock.stp
(2.27 KB)
📄
sysc_mlock2.stp
(2.47 KB)
📄
sysc_mlockall.stp
(2.46 KB)
📄
sysc_mmap2.stp
(5.45 KB)
📄
sysc_modify_ldt.stp
(2.67 KB)
📄
sysc_mount.stp
(3.53 KB)
📄
sysc_move_pages.stp
(4.09 KB)
📄
sysc_mprotect.stp
(2.55 KB)
📄
sysc_mq_getsetattr.stp
(3.95 KB)
📄
sysc_mq_notify.stp
(3.51 KB)
📄
sysc_mq_open.stp
(4.54 KB)
📄
sysc_mq_timedreceive.stp
(5.18 KB)
📄
sysc_mq_timedsend.stp
(4.96 KB)
📄
sysc_mq_unlink.stp
(2.53 KB)
📄
sysc_mremap.stp
(3.01 KB)
📄
sysc_msgctl.stp
(7.35 KB)
📄
sysc_msgget.stp
(3.73 KB)
📄
sysc_msgrcv.stp
(9.48 KB)
📄
sysc_msgsnd.stp
(7.81 KB)
📄
sysc_msync.stp
(2.44 KB)
📄
sysc_munlock.stp
(2.39 KB)
📄
sysc_munlockall.stp
(2.29 KB)
📄
sysc_munmap.stp
(2.35 KB)
📄
sysc_name_to_handle_at.stp
(3.46 KB)
📄
sysc_nanosleep.stp
(5.22 KB)
📄
sysc_nfsservctl.stp
(2.23 KB)
📄
sysc_ni_syscall.stp
(1.4 KB)
📄
sysc_nice.stp
(2.15 KB)
📄
sysc_open.stp
(3.79 KB)
📄
sysc_open_by_handle_at.stp
(3.8 KB)
📄
sysc_openat.stp
(3.34 KB)
📄
sysc_pause.stp
(2.5 KB)
📄
sysc_perf_event_open.stp
(3.24 KB)
📄
sysc_personality.stp
(2.74 KB)
📄
sysc_pipe.stp
(9.86 KB)
📄
sysc_pivot_root.stp
(2.71 KB)
📄
sysc_poll.stp
(2.35 KB)
📄
sysc_ppoll.stp
(5.38 KB)
📄
sysc_prctl.stp
(2.48 KB)
📄
sysc_pread.stp
(4.51 KB)
📄
sysc_preadv.stp
(4.12 KB)
📄
sysc_preadv2.stp
(4.48 KB)
📄
sysc_prlimit64.stp
(2.97 KB)
📄
sysc_process_vm_readv.stp
(4.08 KB)
📄
sysc_process_vm_writev.stp
(4.13 KB)
📄
sysc_pselect6.stp
(5.62 KB)
📄
sysc_pselect7.stp
(3.58 KB)
📄
sysc_ptrace.stp
(3.18 KB)
📄
sysc_pwrite.stp
(6.27 KB)
📄
sysc_pwritev.stp
(4.23 KB)
📄
sysc_pwritev2.stp
(4.58 KB)
📄
sysc_quotactl.stp
(4 KB)
📄
sysc_read.stp
(3.29 KB)
📄
sysc_readahead.stp
(3.02 KB)
📄
sysc_readdir.stp
(3.6 KB)
📄
sysc_readlink.stp
(2.59 KB)
📄
sysc_readlinkat.stp
(3.24 KB)
📄
sysc_readv.stp
(3.07 KB)
📄
sysc_reboot.stp
(2.77 KB)
📄
sysc_recv.stp
(6.7 KB)
📄
sysc_recvfrom.stp
(7.82 KB)
📄
sysc_recvmmsg.stp
(5.84 KB)
📄
sysc_recvmsg.stp
(10.35 KB)
📄
sysc_remap_file_pages.stp
(3.37 KB)
📄
sysc_removexattr.stp
(2.75 KB)
📄
sysc_rename.stp
(2.48 KB)
📄
sysc_renameat.stp
(3.3 KB)
📄
sysc_renameat2.stp
(3.61 KB)
📄
sysc_request_key.stp
(3.23 KB)
📄
sysc_restart_syscall.stp
(2.5 KB)
📄
sysc_rmdir.stp
(2.25 KB)
📄
sysc_rt_sigaction.stp
(6.2 KB)
📄
sysc_rt_sigpending.stp
(4.35 KB)
📄
sysc_rt_sigprocmask.stp
(7.87 KB)
📄
sysc_rt_sigqueueinfo.stp
(4.26 KB)
📄
sysc_rt_sigreturn.stp
(1.6 KB)
📄
sysc_rt_sigsuspend.stp
(3.45 KB)
📄
sysc_rt_sigtimedwait.stp
(5.08 KB)
📄
sysc_rt_tgsigqueueinfo.stp
(3.92 KB)
📄
sysc_sched_get_priority_max.stp
(3.26 KB)
📄
sysc_sched_get_priority_min.stp
(3.26 KB)
📄
sysc_sched_getaffinity.stp
(3.62 KB)
📄
sysc_sched_getattr.stp
(3.05 KB)
📄
sysc_sched_getparam.stp
(2.84 KB)
📄
sysc_sched_getscheduler.stp
(2.94 KB)
📄
sysc_sched_rr_get_interval.stp
(4.41 KB)
📄
sysc_sched_setaffinity.stp
(3.49 KB)
📄
sysc_sched_setattr.stp
(2.98 KB)
📄
sysc_sched_setparam.stp
(2.83 KB)
📄
sysc_sched_setscheduler.stp
(3.2 KB)
📄
sysc_sched_yield.stp
(2.26 KB)
📄
sysc_seccomp.stp
(2.76 KB)
📄
sysc_select.stp
(5.55 KB)
📄
sysc_semctl.stp
(7.22 KB)
📄
sysc_semget.stp
(3.79 KB)
📄
sysc_semop.stp
(4.73 KB)
📄
sysc_semtimedop.stp
(8.8 KB)
📄
sysc_send.stp
(6.81 KB)
📄
sysc_sendfile.stp
(4.38 KB)
📄
sysc_sendmmsg.stp
(8.61 KB)
📄
sysc_sendmsg.stp
(11.48 KB)
📄
sysc_sendto.stp
(7.66 KB)
📄
sysc_set_mempolicy.stp
(3.69 KB)
📄
sysc_set_robust_list.stp
(3.92 KB)
📄
sysc_set_tid_address.stp
(2.83 KB)
📄
sysc_setdomainname.stp
(3.04 KB)
📄
sysc_setfsgid.stp
(4.43 KB)
📄
sysc_setfsuid.stp
(4.48 KB)
📄
sysc_setgid.stp
(4.23 KB)
📄
sysc_setgroups.stp
(4.1 KB)
📄
sysc_sethostname.stp
(2.72 KB)
📄
sysc_setitimer.stp
(5.61 KB)
📄
sysc_setns.stp
(2.34 KB)
📄
sysc_setpgid.stp
(2.41 KB)
📄
sysc_setpriority.stp
(2.79 KB)
📄
sysc_setregid.stp
(5.84 KB)
📄
sysc_setresgid.stp
(6.12 KB)
📄
sysc_setresuid.stp
(6.13 KB)
📄
sysc_setreuid.stp
(5.84 KB)
📄
sysc_setrlimit.stp
(3.61 KB)
📄
sysc_setsid.stp
(2.05 KB)
📄
sysc_setsockopt.stp
(7.77 KB)
📄
sysc_settimeofday.stp
(6.01 KB)
📄
sysc_setuid.stp
(4.23 KB)
📄
sysc_setxattr.stp
(3.12 KB)
📄
sysc_sgetmask.stp
(2.12 KB)
📄
sysc_shmat.stp
(5.88 KB)
📄
sysc_shmctl.stp
(7.23 KB)
📄
sysc_shmdt.stp
(3.36 KB)
📄
sysc_shmget.stp
(3.7 KB)
📄
sysc_shutdown.stp
(6.46 KB)
📄
sysc_sigaction.stp
(5.2 KB)
📄
sysc_sigaltstack.stp
(3.83 KB)
📄
sysc_signal.stp
(2.5 KB)
📄
sysc_signalfd.stp
(11.53 KB)
📄
sysc_sigpending.stp
(3.19 KB)
📄
sysc_sigprocmask.stp
(3.69 KB)
📄
sysc_sigreturn.stp
(1.43 KB)
📄
sysc_sigsuspend.stp
(4.22 KB)
📄
sysc_socket.stp
(6.92 KB)
📄
sysc_socketpair.stp
(7.68 KB)
📄
sysc_splice.stp
(2.78 KB)
📄
sysc_ssetmask.stp
(2.49 KB)
📄
sysc_stat.stp
(5.91 KB)
📄
sysc_statfs.stp
(3.02 KB)
📄
sysc_statfs64.stp
(2.93 KB)
📄
sysc_statx.stp
(3.4 KB)
📄
sysc_stime.stp
(2.76 KB)
📄
sysc_swapoff.stp
(2.41 KB)
📄
sysc_swapon.stp
(2.6 KB)
📄
sysc_symlink.stp
(2.52 KB)
📄
sysc_symlinkat.stp
(3.28 KB)
📄
sysc_sync.stp
(1.88 KB)
📄
sysc_sync_file_range.stp
(4.76 KB)
📄
sysc_syncfs.stp
(2.27 KB)
📄
sysc_sysctl.stp
(2.78 KB)
📄
sysc_sysfs.stp
(3.22 KB)
📄
sysc_sysinfo.stp
(2.95 KB)
📄
sysc_syslog.stp
(2.41 KB)
📄
sysc_tee.stp
(2.3 KB)
📄
sysc_tgkill.stp
(2.48 KB)
📄
sysc_time.stp
(3.18 KB)
📄
sysc_timer_create.stp
(4.39 KB)
📄
sysc_timer_delete.stp
(2.61 KB)
📄
sysc_timer_getoverrun.stp
(2.86 KB)
📄
sysc_timer_gettime.stp
(4.15 KB)
📄
sysc_timer_settime.stp
(5.33 KB)
📄
sysc_timerfd.stp
(1.79 KB)
📄
sysc_timerfd_create.stp
(2.99 KB)
📄
sysc_timerfd_gettime.stp
(3.79 KB)
📄
sysc_timerfd_settime.stp
(4.71 KB)
📄
sysc_times.stp
(2.84 KB)
📄
sysc_tkill.stp
(2.35 KB)
📄
sysc_truncate.stp
(5.25 KB)
📄
sysc_tux.stp
(1.04 KB)
📄
sysc_umask.stp
(2.22 KB)
📄
sysc_umount.stp
(4.5 KB)
📄
sysc_uname.stp
(4.77 KB)
📄
sysc_unlink.stp
(2.38 KB)
📄
sysc_unlinkat.stp
(2.79 KB)
📄
sysc_unshare.stp
(2.48 KB)
📄
sysc_uselib.stp
(2.39 KB)
📄
sysc_userfaultfd.stp
(2.68 KB)
📄
sysc_ustat.stp
(4.77 KB)
📄
sysc_utime.stp
(5.37 KB)
📄
sysc_utimensat.stp
(6.16 KB)
📄
sysc_utimes.stp
(5.29 KB)
📄
sysc_vfork.stp
(1.98 KB)
📄
sysc_vhangup.stp
(2.08 KB)
📄
sysc_vmsplice.stp
(5.56 KB)
📄
sysc_wait4.stp
(4.55 KB)
📄
sysc_waitid.stp
(3.68 KB)
📄
sysc_waitpid.stp
(3.02 KB)
📄
sysc_write.stp
(3.5 KB)
📄
sysc_writev.stp
(3.22 KB)
📄
syscall_any.stp
(1.52 KB)
📄
syscall_table.stp
(1.44 KB)
📄
syscalls.stpm
(13.78 KB)
📄
syscalls_cfg_trunc.stp
(111 B)
📄
target_set.stp
(1.73 KB)
📄
task.stp
(22.21 KB)
📄
task.stpm
(253 B)
📄
task_ancestry.stp
(1.58 KB)
📄
task_time.stp
(7.68 KB)
📄
tcp.stp
(22.11 KB)
📄
tcpmib-filter-default.stp
(885 B)
📄
tcpmib.stp
(10.57 KB)
📄
timestamp.stp
(1.72 KB)
📄
timestamp_gtod.stp
(1.59 KB)
📄
timestamp_monotonic.stp
(5.46 KB)
📄
tty.stp
(7.18 KB)
📄
tzinfo.stp
(803 B)
📄
ucontext-symbols.stp
(8.63 KB)
📄
ucontext-unwind.stp
(3.64 KB)
📄
ucontext.stp
(2.18 KB)
📄
udp.stp
(5.95 KB)
📄
utrace.stp
(1.33 KB)
📄
vfs.stp
(32.43 KB)
📁
x86_64
Editing: tcp.stp
// TCP tapset // Copyright (C) 2006 IBM Corp. // Copyright (C) 2006 Intel Corporation. // Copyright (C) 2007, 2010, 2012-2018 Red Hat, Inc. // // This file is part of systemtap, and is free software. You can // redistribute it and/or modify it under the terms of the GNU General // Public License (GPL); either version 2, or (at your option) any // later version. // <tapsetdescription> // This family of probe points is used to probe events that occur in the TCP layer, // </tapsetdescription> // See the BZ1546179 block comment in tapset/linux/networking.stp for // an explanation of the try/catch statements around sk_buff structure // accesses. %{ #include <linux/version.h> #include <net/sock.h> #include <net/tcp.h> #include <net/ip.h> #include <linux/skbuff.h> %} // Get retransmission timeout in usecs. RTO is initialized from default // retransmission time, but can be adjusted (increased) each time we // retransmit. It should always be less than the max value of TCP retransmission // timeout (TCP_RTO_MAX) function tcp_get_info_rto:long(sock:long) %{ /* pure */ struct sock *sk = (struct sock *)(uintptr_t) STAP_ARG_sock; #if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,10) struct tcp_opt *tp = tcp_sk(sk); STAP_RETVALUE = (int64_t) jiffies_to_usecs(kread(&(tp->rto))); #else const struct inet_connection_sock *icsk = inet_csk(sk); STAP_RETVALUE = (int64_t) jiffies_to_usecs(kread(&(icsk->icsk_rto))); #endif CATCH_DEREF_FAULT(); %} //Get congestion window segment size. Initial value of congestion window size //typically set to one segment (i.e., slow start algorithm, each segment can be 512 bytes). //This congestion window size can be dynamically increased based on whether TCP //is performing slow start or congestion avoidance. function tcp_get_info_snd_cwnd:long(sock:long) %{ /* pure */ struct sock *sk = (struct sock *)(uintptr_t) STAP_ARG_sock; #if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,10) struct tcp_opt *tp = tcp_sk(sk); #else struct tcp_sock *tp = tcp_sk(sk); #endif STAP_RETVALUE = (int64_t) kread(&(tp->snd_cwnd)); CATCH_DEREF_FAULT(); %} // //Definitions of the TCP protocol sk_state field listed below. // // TCP_ESTABLISHED = 1, Normal data transfer // TCP_SYN_SENT = 2, App. has started to open a connection // TCP_SYN_RECV = 3, A connection request has arrived; wait for ACK // TCP_FIN_WAIT1 = 4, App. has said it is finished // TCP_FIN_WAIT2 = 5, The other side has agreed to close // TCP_TIME_WAIT = 6, Wait for all packets to die off // TCP_CLOSE = 7, No connection is active or pending // TCP_CLOSE_WAIT = 8, The other side has initiated a release // TCP_LAST_ACK = 9, Last ACK, wait for all packets to die off // TCP_LISTEN = 10, Waiting for incoming call // TCP_CLOSING = 11, Both sides have tried to close simultaneously // TCP_MAX_STATES = 12 Max states number // function tcp_ts_get_info_state:long(sock:long) %{ /* pure */ struct sock *sk = (struct sock *)(uintptr_t) STAP_ARG_sock; STAP_RETVALUE = (int64_t) kread(&(sk->sk_state)); CATCH_DEREF_FAULT(); %} /* return the TCP destination port for a given sock */ function __tcp_sock_dport:long (sock:long) { port = @choose_defined(@inet_sock_cast(sock)->sk->__sk_common->skc_dport, # kernel >= 3.8 @choose_defined(@inet_sock_cast(sock)->inet_dport, # kernel >= 2.6.33 @choose_defined(@inet_sock_cast(sock)->dport, # kernel >= 2.6.11 @inet_sock_cast(sock)->inet->dport))) return ntohs(port) } /* returns the TCP header for recent (<2.6.21) kernel */ @__private30 function __get_skb_tcphdr_new:long(skb:long) %{ /* pure */ struct sk_buff *skb; skb = (struct sk_buff *)(uintptr_t)STAP_ARG_skb; /* as done by skb_transport_header() */ #ifdef NET_SKBUFF_DATA_USES_OFFSET STAP_RETVALUE = (long)(kread(&(skb->head)) + kread(&(skb->transport_header))); #else STAP_RETVALUE = (long)kread(&(skb->transport_header)); #endif CATCH_DEREF_FAULT(); %} /* returns the TCP header for a given sk_buff structure */ function __get_skb_tcphdr:long(skb:long) { %( kernel_v < "2.6.21" %? tcphdr = @cast(skb, "sk_buff")->h->raw return tcphdr %: return __get_skb_tcphdr_new(skb) %) } /* returns TCP URG flag for a given sk_buff structure */ function __tcp_skb_urg:long (tcphdr:long) { return @cast(tcphdr, "tcphdr", "kernel<linux/tcp.h>")->urg } /* returns TCP ACK flag for a given sk_buff structure */ function __tcp_skb_ack:long (tcphdr:long) { return @cast(tcphdr, "tcphdr", "kernel<linux/tcp.h>")->ack } /* returns TCP PSH flag for a given sk_buff structure */ function __tcp_skb_psh:long (tcphdr:long) { return @cast(tcphdr, "tcphdr", "kernel<linux/tcp.h>")->psh } /* returns TCP RST flag for a given sk_buff structure */ function __tcp_skb_rst:long (tcphdr:long) { return @cast(tcphdr, "tcphdr", "kernel<linux/tcp.h>")->rst } /* returns TCP SYN flag for a given sk_buff structure */ function __tcp_skb_syn:long (tcphdr:long) { return @cast(tcphdr, "tcphdr", "kernel<linux/tcp.h>")->syn } /* returns TCP FIN flag for a given sk_buff structure */ function __tcp_skb_fin:long (tcphdr:long) { return @cast(tcphdr, "tcphdr", "kernel<linux/tcp.h>")->fin } /* returns TCP source port for a given sk_buff structure */ function __tcp_skb_sport:long (tcphdr:long) { return ntohs(@cast(tcphdr, "tcphdr", "kernel<linux/tcp.h>")->source) } /* returns TCP destination port for a given sk_buff structure */ function __tcp_skb_dport:long (tcphdr:long){ return ntohs(@cast(tcphdr, "tcphdr", "kernel<linux/tcp.h>")->dest) } /* return the TCP source port for a given sock */ function __tcp_sock_sport:long (sock:long) { port = @choose_defined(@inet_sock_cast(sock)->inet_sport, # kernel >= 2.6.33 @choose_defined(@inet_sock_cast(sock)->sport, # kernel >= 2.6.11 @inet_sock_cast(sock)->inet->sport)) return ntohs(port) } @__private30 global sockstate[12] probe init { sockstate[1] = "TCP_ESTABLISHED" sockstate[2] = "TCP_SYN_SENT" sockstate[3] = "TCP_SYN_RECV" sockstate[4] = "TCP_FIN_WAIT1" sockstate[5] = "TCP_FIN_WAIT2" sockstate[6] = "TCP_TIME_WAIT" sockstate[7] = "TCP_CLOSE" sockstate[8] = "TCP_CLOSE_WAIT" sockstate[9] = "TCP_LAST_ACK" sockstate[10] = "TCP_LISTEN" sockstate[11] = "TCP_CLOSING" sockstate[12] = "TCP_MAX_STATES" } function tcp_sockstate_str:string (state:long) { return (state in sockstate ? sockstate[state] : "UNDEF") } // Get slow start threshold size. If cwnd size is less than or equal to // threshold size, then TCP is in slow start; otherwise TCP is in congestion // avoidance. function tcp_ts_get_info_snd_ssthresh:long(sock:long) %{ /* pure */ struct sock *sk = (struct sock *)(uintptr_t) STAP_ARG_sock; #if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,10) struct tcp_opt *tp = tcp_sk(sk); #else struct tcp_sock *tp = tcp_sk(sk); #endif STAP_RETVALUE = (int64_t) kread(&(tp->snd_ssthresh)); CATCH_DEREF_FAULT(); %} // Get receiver's advertised segment size. TCP typically never sends more // than what receiver can accept. function tcp_ts_get_info_rcv_mss:long(sock:long) %{ /* pure */ struct sock *sk = (struct sock *)(uintptr_t) STAP_ARG_sock; #if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,10) struct tcp_opt *tp = tcp_sk(sk); STAP_RETVALUE = (int64_t) kread(&(tp->ack.rcv_mss)); #else const struct inet_connection_sock *icsk = inet_csk(sk); STAP_RETVALUE = (int64_t) kread(&(icsk->icsk_ack.rcv_mss)); #endif CATCH_DEREF_FAULT(); %} %{ // Define newer IPv4 sockopt constants for older kernels. #ifndef TCP_CONGESTION #define TCP_CONGESTION 0 #endif #ifndef TCP_MD5SIG #define TCP_MD5SIG 0 #endif #ifndef TCP_COOKIE_TRANSACTIONS #define TCP_COOKIE_TRANSACTIONS 0 #endif #ifndef TCP_THIN_LINEAR_TIMEOUTS #define TCP_THIN_LINEAR_TIMEOUTS 0 #endif #ifndef TCP_THIN_DUPACK #define TCP_THIN_DUPACK 0 #endif #ifndef TCP_USER_TIMEOUT #define TCP_USER_TIMEOUT 0 #endif %} @__private30 global __sockopt[18] probe init { __sockopt[@const("TCP_NODELAY")] = "TCP_NODELAY" __sockopt[@const("TCP_MAXSEG")] = "TCP_MAXSEG" __sockopt[@const("TCP_CORK")] = "TCP_CORK" __sockopt[@const("TCP_KEEPIDLE")] = "TCP_KEEPIDLE" __sockopt[@const("TCP_KEEPINTVL")] = "TCP_KEEPINTVL" __sockopt[@const("TCP_KEEPCNT")] = "TCP_KEEPCNT" __sockopt[@const("TCP_SYNCNT")] = "TCP_SYNCNT" __sockopt[@const("TCP_LINGER2")] = "TCP_LINGER2" __sockopt[@const("TCP_DEFER_ACCEPT")] = "TCP_DEFER_ACCEPT" __sockopt[@const("TCP_WINDOW_CLAMP")] = "TCP_WINDOW_CLAMP" __sockopt[@const("TCP_INFO")] = "TCP_INFO" __sockopt[@const("TCP_QUICKACK")] = "TCP_QUICKACK" if (@const("TCP_CONGESTION") > 0) __sockopt[@const("TCP_CONGESTION")] = "TCP_CONGESTION" if (@const("TCP_MD5SIG") > 0) __sockopt[@const("TCP_MD5SIG")] = "TCP_MD5SIG" if (@const("TCP_COOKIE_TRANSACTIONS") > 0) __sockopt[@const("TCP_COOKIE_TRANSACTIONS")] = "TCP_COOKIE_TRANSACTIONS" if (@const("TCP_THIN_LINEAR_TIMEOUTS") > 0) __sockopt[@const("TCP_THIN_LINEAR_TIMEOUTS")] = "TCP_THIN_LINEAR_TIMEOUTS" if (@const("TCP_THIN_DUPACK") > 0) __sockopt[@const("TCP_THIN_DUPACK")] = "TCP_THIN_DUPACK" if (@const("TCP_USER_TIMEOUT") > 0) __sockopt[@const("TCP_USER_TIMEOUT")] = "TCP_USER_TIMEOUT" } function tcp_sockopt_str:string (optname:long) { return (optname in __sockopt ? __sockopt[optname] : sprintf("UNDEF_SOCKOPT(%d)", optname)) } %{ // Define newer IPv6 sockopt constants for older kernels. #include <linux/in6.h> #ifndef IPV6_2292PKTINFO #define IPV6_2292PKTINFO 0 #endif #ifndef IPV6_2292HOPOPTS #define IPV6_2292HOPOPTS 0 #endif #ifndef IPV6_2292DSTOPTS #define IPV6_2292DSTOPTS 0 #endif #ifndef IPV6_2292RTHDR #define IPV6_2292RTHDR 0 #endif #ifndef IPV6_2292PKTOPTIONS #define IPV6_2292PKTOPTIONS 0 #endif #ifndef IPV6_2292HOPLIMIT #define IPV6_2292HOPLIMIT 0 #endif #ifndef IPV6_RECVPKTINFO #define IPV6_RECVPKTINFO 0 #endif #ifndef IPV6_RECVHOPLIMIT #define IPV6_RECVHOPLIMIT 0 #endif #ifndef IPV6_RECVHOPOPTS #define IPV6_RECVHOPOPTS 0 #endif #ifndef IPV6_RTHDRDSTOPTS #define IPV6_RTHDRDSTOPTS 0 #endif #ifndef IPV6_RECVRTHDR #define IPV6_RECVRTHDR 0 #endif #ifndef IPV6_RECVDSTOPTS #define IPV6_RECVDSTOPTS 0 #endif #ifndef IPV6_RECVPATHMTU #define IPV6_RECVPATHMTU 0 #endif #ifndef IPV6_PATHMTU #define IPV6_PATHMTU 0 #endif #ifndef IPV6_DONTFRAG #define IPV6_DONTFRAG 0 #endif #ifndef IPV6_ADDR_PREFERENCES #define IPV6_ADDR_PREFERENCES 0 #endif #ifndef IPV6_MINHOPCOUNT #define IPV6_MINHOPCOUNT 0 #endif #ifndef IPV6_RECVORIGDSTADDR #define IPV6_RECVORIGDSTADDR 0 #endif #ifndef IPV6_TRANSPARENT #define IPV6_TRANSPARENT 0 #endif %} @__private30 global __ipv6_sockopt[55] probe init { __ipv6_sockopt[@const("IPV6_ADDRFORM")] = "IPV6_ADDRFORM" if (@const("IPV6_2292PKTINFO") > 0) __ipv6_sockopt[@const("IPV6_2292PKTINFO")] = "IPV6_2292PKTINFO" if (@const("IPV6_2292HOPOPTS") > 0) __ipv6_sockopt[@const("IPV6_2292HOPOPTS")] = "IPV6_2292HOPOPTS" if (@const("IPV6_2292DSTOPTS") > 0) __ipv6_sockopt[@const("IPV6_2292DSTOPTS")] = "IPV6_2292DSTOPTS" if (@const("IPV6_2292RTHDR") > 0) __ipv6_sockopt[@const("IPV6_2292RTHDR")] = "IPV6_2292RTHDR" if (@const("IPV6_2292PKTOPTIONS") > 0) __ipv6_sockopt[@const("IPV6_2292PKTOPTIONS")] = "IPV6_2292PKTOPTIONS" __ipv6_sockopt[@const("IPV6_CHECKSUM")] = "IPV6_CHECKSUM" if (@const("IPV6_2292HOPLIMIT") > 0) __ipv6_sockopt[@const("IPV6_2292HOPLIMIT")] = "IPV6_2292HOPLIMIT" __ipv6_sockopt[@const("IPV6_NEXTHOP")] = "IPV6_NEXTHOP" __ipv6_sockopt[@const("IPV6_AUTHHDR")] = "IPV6_AUTHHDR" __ipv6_sockopt[@const("IPV6_FLOWINFO")] = "IPV6_FLOWINFO" __ipv6_sockopt[@const("IPV6_UNICAST_HOPS")] = "IPV6_UNICAST_HOPS" __ipv6_sockopt[@const("IPV6_MULTICAST_IF")] = "IPV6_MULTICAST_IF" __ipv6_sockopt[@const("IPV6_MULTICAST_HOPS")] = "IPV6_MULTICAST_HOPS" __ipv6_sockopt[@const("IPV6_MULTICAST_LOOP")] = "IPV6_MULTICAST_LOOP" __ipv6_sockopt[@const("IPV6_ADD_MEMBERSHIP")] = "IPV6_ADD_MEMBERSHIP" __ipv6_sockopt[@const("IPV6_DROP_MEMBERSHIP")] = "IPV6_DROP_MEMBERSHIP" __ipv6_sockopt[@const("IPV6_ROUTER_ALERT")] = "IPV6_ROUTER_ALERT" __ipv6_sockopt[@const("IPV6_MTU_DISCOVER")] = "IPV6_MTU_DISCOVER" __ipv6_sockopt[@const("IPV6_MTU")] = "IPV6_MTU" __ipv6_sockopt[@const("IPV6_RECVERR")] = "IPV6_RECVERR" __ipv6_sockopt[@const("IPV6_V6ONLY")] = "IPV6_V6ONLY" __ipv6_sockopt[@const("IPV6_JOIN_ANYCAST")] = "IPV6_JOIN_ANYCAST" __ipv6_sockopt[@const("IPV6_LEAVE_ANYCAST")] = "IPV6_LEAVE_ANYCAST" __ipv6_sockopt[@const("IPV6_FLOWLABEL_MGR")] = "IPV6_FLOWLABEL_MGR" __ipv6_sockopt[@const("IPV6_FLOWINFO_SEND")] = "IPV6_FLOWINFO_SEND" __ipv6_sockopt[@const("IPV6_IPSEC_POLICY")] = "IPV6_IPSEC_POLICY" __ipv6_sockopt[@const("IPV6_XFRM_POLICY")] = "IPV6_XFRM_POLICY" __ipv6_sockopt[@const("MCAST_JOIN_GROUP")] = "MCAST_JOIN_GROUP" __ipv6_sockopt[@const("MCAST_BLOCK_SOURCE")] = "MCAST_BLOCK_SOURCE" __ipv6_sockopt[@const("MCAST_UNBLOCK_SOURCE")] = "MCAST_UNBLOCK_SOURCE" __ipv6_sockopt[@const("MCAST_LEAVE_GROUP")] = "MCAST_LEAVE_GROUP" __ipv6_sockopt[@const("MCAST_JOIN_SOURCE_GROUP")] = "MCAST_JOIN_SOURCE_GROUP" __ipv6_sockopt[@const("MCAST_LEAVE_SOURCE_GROUP")] = "MCAST_LEAVE_SOURCE_GROUP" __ipv6_sockopt[@const("MCAST_MSFILTER")] = "MCAST_MSFILTER" if (@const("IPV6_RECVPKTINFO") > 0) __ipv6_sockopt[@const("IPV6_RECVPKTINFO")] = "IPV6_RECVPKTINFO" __ipv6_sockopt[@const("IPV6_PKTINFO")] = "IPV6_PKTINFO" if (@const("IPV6_RECVHOPLIMIT") > 0) __ipv6_sockopt[@const("IPV6_RECVHOPLIMIT")] = "IPV6_RECVHOPLIMIT" __ipv6_sockopt[@const("IPV6_HOPLIMIT")] = "IPV6_HOPLIMIT" if (@const("IPV6_RECVHOPOPTS") > 0) __ipv6_sockopt[@const("IPV6_RECVHOPOPTS")] = "IPV6_RECVHOPOPTS" __ipv6_sockopt[@const("IPV6_HOPOPTS")] = "IPV6_HOPOPTS" if (@const("IPV6_RTHDRDSTOPTS") > 0) __ipv6_sockopt[@const("IPV6_RTHDRDSTOPTS")] = "IPV6_RTHDRDSTOPTS" if (@const("IPV6_RECVRTHDR") > 0) __ipv6_sockopt[@const("IPV6_RECVRTHDR")] = "IPV6_RECVRTHDR" __ipv6_sockopt[@const("IPV6_RTHDR")] = "IPV6_RTHDR" if (@const("IPV6_RECVDSTOPTS") > 0) __ipv6_sockopt[@const("IPV6_RECVDSTOPTS")] = "IPV6_RECVDSTOPTS" __ipv6_sockopt[@const("IPV6_DSTOPTS")] = "IPV6_DSTOPTS" if (@const("IPV6_RECVPATHMTU") > 0) __ipv6_sockopt[@const("IPV6_RECVPATHMTU")] = "IPV6_RECVPATHMTU" if (@const("IPV6_PATHMTU") > 0) __ipv6_sockopt[@const("IPV6_PATHMTU")] = "IPV6_PATHMTU" if (@const("IPV6_DONTFRAG") > 0) __ipv6_sockopt[@const("IPV6_DONTFRAG")] = "IPV6_DONTFRAG" __ipv6_sockopt[@const("IPV6_RECVTCLASS")] = "IPV6_RECVTCLASS" __ipv6_sockopt[@const("IPV6_TCLASS")] = "IPV6_TCLASS" if (@const("IPV6_ADDR_PREFERENCES") > 0) __ipv6_sockopt[@const("IPV6_ADDR_PREFERENCES")] = "IPV6_ADDR_PREFERENCES" if (@const("IPV6_MINHOPCOUNT") > 0) __ipv6_sockopt[@const("IPV6_MINHOPCOUNT")] = "IPV6_MINHOPCOUNT" if (@const("IPV6_RECVORIGDSTADDR") > 0) __ipv6_sockopt[@const("IPV6_RECVORIGDSTADDR")] = "IPV6_RECVORIGDSTADDR" if (@const("IPV6_TRANSPARENT") > 0) __ipv6_sockopt[@const("IPV6_TRANSPARENT")] = "IPV6_TRANSPARENT" } function tcp_ipv6_sockopt_str:string (optname:long) { return (optname in __ipv6_sockopt ? __ipv6_sockopt[optname] : sprintf("UNDEF_SOCKOPT(%d)", optname)) } /** * probe tcp.sendmsg - Sending a tcp message * @name: Name of this probe * @sock: Network socket * @family: IP address family * @size: Number of bytes to send * * Context: * The process which sends a tcp message */ probe tcp.sendmsg = kernel.function("tcp_sendmsg") { name = "tcp.sendmsg" sock = (@defined($sock) ? $sock->sk : $sk) family = __ip_sock_family(@defined($sock) ? $sock->sk : $sk) size = $size } /** * probe tcp.sendmsg.return - Sending TCP message is done * @name: Name of this probe * @size: Number of bytes sent or error code if an error occurred. * * Context: * The process which sends a tcp message */ probe tcp.sendmsg.return = kernel.function("tcp_sendmsg").return { name = "tcp.sendmsg" size = $return } /** * probe tcp.recvmsg - Receiving TCP message * @name: Name of this probe * @sock: Network socket * @size: Number of bytes to be received * @family: IP address family * @saddr: A string representing the source IP address * @daddr: A string representing the destination IP address * @sport: TCP source port * @dport: TCP destination port * Context: * The process which receives a tcp message */ probe tcp.recvmsg = kernel.function("tcp_recvmsg") { name = "tcp.recvmsg" sock = $sk size = $len family = __ip_sock_family($sk) saddr = format_ipaddr(__ip_sock_saddr($sk), __ip_sock_family($sk)) daddr = format_ipaddr(__ip_sock_daddr($sk), __ip_sock_family($sk)) sport = __tcp_sock_sport($sk) dport = __tcp_sock_dport($sk) } /** * probe tcp.recvmsg.return - Receiving TCP message complete * @name: Name of this probe * @size: Number of bytes received or error code if an error occurred. * @family: IP address family * @saddr: A string representing the source IP address * @daddr: A string representing the destination IP address * @sport: TCP source port * @dport: TCP destination port * * Context: * The process which receives a tcp message */ probe tcp.recvmsg.return = kernel.function("tcp_recvmsg").return { name = "tcp.recvmsg" size = $return family = __ip_sock_family(@entry($sk)) saddr = format_ipaddr(__ip_sock_saddr(@entry($sk)), __ip_sock_family(@entry($sk))) daddr = format_ipaddr(__ip_sock_daddr(@entry($sk)), __ip_sock_family(@entry($sk))) sport = __tcp_sock_sport(@entry($sk)) dport = __tcp_sock_dport(@entry($sk)) } /** * probe tcp.disconnect - TCP socket disconnection * @name: Name of this probe * @sock: Network socket * @family: IP address family * @flags: TCP flags (e.g. FIN, etc) * @saddr: A string representing the source IP address * @daddr: A string representing the destination IP address * @sport: TCP source port * @dport: TCP destination port * * Context: * The process which disconnects tcp */ probe tcp.disconnect = kernel.function("tcp_disconnect") { name = "tcp.disconnect" sock = $sk family = __ip_sock_family($sk) flags = $flags saddr = format_ipaddr(__ip_sock_saddr($sk), __ip_sock_family($sk)) daddr = format_ipaddr(__ip_sock_daddr($sk), __ip_sock_family($sk)) sport = __tcp_sock_sport($sk) dport = __tcp_sock_dport($sk) } /** * probe tcp.disconnect.return - TCP socket disconnection complete * @name: Name of this probe * @ret: Error code (0: no error) * * Context: * The process which disconnects tcp */ probe tcp.disconnect.return = kernel.function("tcp_disconnect").return { name = "tcp.disconnect" ret = $return } /** * probe tcp.setsockopt - Call to setsockopt() * @name: Name of this probe * @sock: Network socket * @family: IP address family * @level: The level at which the socket options will be manipulated * @optname: TCP socket options (e.g. TCP_NODELAY, TCP_MAXSEG, etc) * @optstr: Resolves optname to a human-readable format * @optlen: Used to access values for setsockopt() * * Context: * The process which calls setsockopt */ probe tcp.setsockopt = tcp.ipv4.setsockopt, tcp.ipv6.setsockopt { } probe tcp.ipv4.setsockopt = kernel.function("tcp_setsockopt") { name = "tcp.ipv4.setsockopt" sock = $sk family = __ip_sock_family($sk) level = $level optname = $optname optstr = tcp_sockopt_str($optname) optlen = $optlen } probe tcp.ipv6.setsockopt = kernel.function("ipv6_setsockopt")!, module("ipv6").function("ipv6_setsockopt") { name = "tcp.ipv6.setsockopt" sock = $sk family = __ip_sock_family($sk) level = $level optname = $optname optstr = tcp_ipv6_sockopt_str($optname) optlen = $optlen } /** * probe tcp.setsockopt.return - Return from setsockopt() * @name: Name of this probe * @ret: Error code (0: no error) * * Context: * The process which calls setsockopt */ probe tcp.setsockopt.return = tcp.ipv4.setsockopt.return, tcp.ipv6.setsockopt.return { } probe tcp.ipv4.setsockopt.return = kernel.function("tcp_setsockopt").return { name = "tcp.ipv4.setsockopt" ret = $return } probe tcp.ipv6.setsockopt.return = kernel.function("ipv6_setsockopt").return!, module("ipv6").function("ipv6_setsockopt").return { name = "tcp.ipv6.setsockopt" ret = $return } /** * probe tcp.receive - Called when a TCP packet is received * @name: Name of the probe point * @iphdr: IP header address * @protocol: Packet protocol from driver * @family: IP address family * @saddr: A string representing the source IP address * @daddr: A string representing the destination IP address * @sport: TCP source port * @dport: TCP destination port * @urg: TCP URG flag * @ack: TCP ACK flag * @psh: TCP PSH flag * @rst: TCP RST flag * @syn: TCP SYN flag * @fin: TCP FIN flag */ probe tcp.receive = tcp.ipv4.receive, tcp.ipv6.receive { } probe tcp.ipv4.receive = kernel.function("tcp_v4_rcv") { name = "tcp.ipv4.receive" # If we're here, by definition we're doing AF_INET, not AF_INET6. family = @const("AF_INET") try { iphdr = __get_skb_iphdr($skb) saddr = format_ipaddr(__ip_skb_saddr(iphdr), @const("AF_INET")) daddr = format_ipaddr(__ip_skb_daddr(iphdr), @const("AF_INET")) protocol = __ip_skb_proto(iphdr) } catch { } try { tcphdr = __get_skb_tcphdr($skb) dport = __tcp_skb_dport(tcphdr) sport = __tcp_skb_sport(tcphdr) urg = __tcp_skb_urg(tcphdr) ack = __tcp_skb_ack(tcphdr) psh = __tcp_skb_psh(tcphdr) rst = __tcp_skb_rst(tcphdr) syn = __tcp_skb_syn(tcphdr) fin = __tcp_skb_fin(tcphdr) } catch { } } probe tcp.ipv6.receive = kernel.function("tcp_v6_rcv")!, module("ipv6").function("tcp_v6_rcv") { name = "tcp.ipv6.receive" # If we're here, by definition we're doing AF_INET6, not AF_INET. family = @const("AF_INET6") try { iphdr = __get_skb_iphdr(@choose_defined($skb, kernel_pointer($pskb))) saddr = format_ipaddr(&@cast(iphdr, "ipv6hdr", "kernel<linux/ipv6.h>")->saddr, @const("AF_INET6")) daddr = format_ipaddr(&@cast(iphdr, "ipv6hdr", "kernel<linux/ipv6.h>")->daddr, @const("AF_INET6")) } catch { } # If we're here, by definition we're doing IPPROTO_TCP. There # isn't a protocol field in 'struct ipv6hdr'. There is one in # 'struct sk_buff', but that protocol field is an Ethernet # Procol ID (ETH_P_*), not an IP protocol ID (IPPROTO_*). protocol = @const("IPPROTO_TCP") try { tcphdr = __get_skb_tcphdr(@choose_defined($skb, kernel_pointer($pskb))) dport = __tcp_skb_dport(tcphdr) sport = __tcp_skb_sport(tcphdr) urg = __tcp_skb_urg(tcphdr) ack = __tcp_skb_ack(tcphdr) psh = __tcp_skb_psh(tcphdr) rst = __tcp_skb_rst(tcphdr) syn = __tcp_skb_syn(tcphdr) fin = __tcp_skb_fin(tcphdr) } catch { } }
Upload File
Create Folder