[lttng-dev] lttng kretprobe issue

tarek slaymia tarek.slaymia at gmail.com
Thu May 29 15:53:10 EDT 2014

Hi all

when i replace a syscall function address for example sys_write using this
function in my LKM module :


In the normal case the content of sys_call_table[__NR_write] address
changes and it displays the address of my_own_write using debug technique .

I have an issue when tracing this change using lttng kretprobe :

lttng enable-event sys_write -k --function sys_write

 The ip value of sys_write ( the same address of sys_call_table[__NR_write]
) remains the same even after changing it by the new function address
(address of my_own_write)
Why the ip value of sys_write syscall displayed in lttng traces remains the
same even after changing it ?

Best regards.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lttng.org/pipermail/lttng-dev/attachments/20140529/cb47de0d/attachment.html>

More information about the lttng-dev mailing list