<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi, I would like to add it is an insane amount of work.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I have documented some tracepoints. Maybe this can help. <a href="https://git.eclipse.org/c/tracecompass/org.eclipse.tracecompass.git/tree/analysis/org.eclipse.tracecompass.analysis.os.linux.core/src/org/eclipse/tracecompass/analysis/os/linux/core/trace/IKernelAnalysisEventLayout.java?id=01f2a5074ceebbc1ceaf2643c1aff5168a61ed4b" id="LPlnk606748">
https://git.eclipse.org/c/tracecompass/org.eclipse.tracecompass.git/tree/analysis/org.eclipse.tracecompass.analysis.os.linux.core/src/org/eclipse/tracecompass/analysis/os/linux/core/trace/IKernelAnalysisEventLayout.java</a></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
For the syscalls, take a look at this, it may help?</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<a href="https://git.eclipse.org/c/tracecompass/org.eclipse.tracecompass.git/tree/analysis/org.eclipse.tracecompass.analysis.os.linux.core/res/syscalls.tsv" id="LPlnk656261">https://git.eclipse.org/c/tracecompass/org.eclipse.tracecompass.git/tree/analysis/org.eclipse.tracecompass.analysis.os.linux.core/res/syscalls.tsv</a></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Also, if you feel like enhancing the list, we'd be thrilled. 😉</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
As the author of these doc patches, I can confirm, it's a lot of not rewarding work.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Cheers<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> lttng-dev <lttng-dev-bounces@lists.lttng.org> on behalf of Mathieu Desnoyers <mathieu.desnoyers@efficios.com><br>
<b>Sent:</b> Wednesday, November 20, 2019 9:32 AM<br>
<b>To:</b> 杨海 <hai.yang@magic-shield.com><br>
<b>Cc:</b> lttng-dev <lttng-dev@lists.lttng.org><br>
<b>Subject:</b> Re: [lttng-dev] documentation about CTF event payload</font>
<div> </div>
</div>
<div>
<div style="font-family:arial,helvetica,sans-serif; font-size:12pt; color:#000000">
<div>For the system call payload documentation, you might want to refer to the Linux system call<br>
</div>
<div>man pages.<br>
</div>
<div><br>
</div>
<div>For internal kernel tracepoints like sched_switch, there is no documentation of the meaning of<br>
</div>
<div>each field at the moment. This state is the same as the upstream Linux kernel trace event. You'll</div>
<div>have to figure it out on your own. Documenting each field of the ~500-1000 Linux kernel tracepoints</div>
<div>is no small task.<br>
</div>
<div><br>
</div>
<div>Thanks,<br>
</div>
<div><br>
</div>
<div>Mathieu<br>
</div>
<div><br>
</div>
<div><span id="x_zwchr">----- On Nov 19, 2019, at 9:25 PM, 杨海 <hai.yang@magic-shield.com> wrote:<br>
</span></div>
<div>
<blockquote style="border-left:2px solid #1010FF; margin-left:5px; padding-left:5px; color:#000; font-weight:normal; font-style:normal; text-decoration:none; font-family:Helvetica,Arial,sans-serif; font-size:12pt">
<div>To be more specific, I suppose we can refer to instrumentation\syscalls\3.10.0-rc7\x86-64-syscalls-3.10.0-rc7 for the payload format of syscall event. Is it exactly in the CTF syscall event?</div>
<br>
<div>Regards</div>
<div>Hai</div>
<div>
<div> </div>
<div style="font:'verdana' normal 14px; color:#000">
<div style="font-size:12px; font-family:'arial narrow'; padding:2px 0 2px 0">------------------ Original ------------------</div>
<div style="font-size:12px; background:#efefef; padding:8px">
<div><b>From: </b> "杨海"<hai.yang@magic-shield.com>;</div>
<div><b>Date: </b> Mon, Nov 18, 2019 09:54 AM</div>
<div><b>To: </b> "lttng-dev"<lttng-dev@lists.lttng.org>; </div>
<div><b>Subject: </b> documentation about CTF event payload</div>
</div>
<div> </div>
<div>
<div>Hi</div>
<br>
<div>As LTTng generated CTF and babeltrace parse it, we have the output as attached. We saw events such as sched_switch, but the payload cannot be understood easily. Where we can find the document to explain the LTTng payload and parameters?</div>
<br>
<div>Regards</div>
<div>Hai</div>
</div>
</div>
</div>
<br>
_______________________________________________<br>
lttng-dev mailing list<br>
lttng-dev@lists.lttng.org<br>
<a href="https://protect2.fireeye.com/v1/url?k=b57ee672-e9f43364-b57ea6e9-862f14a9365e-4edf64ec28cf8a82&q=1&e=f6fc5282-6aa8-47e6-b1ba-c0f4d8c08799&u=https%3A%2F%2Flists.lttng.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Flttng-dev">https://lists.lttng.org/cgi-bin/mailman/listinfo/lttng-dev</a><br>
</blockquote>
</div>
<div><br>
</div>
<div>-- <br>
</div>
<div>Mathieu Desnoyers<br>
EfficiOS Inc.<br>
<a href="https://protect2.fireeye.com/v1/url?k=0d1e3efa-5194ebec-0d1e7e61-862f14a9365e-4d330cf58530a29c&q=1&e=f6fc5282-6aa8-47e6-b1ba-c0f4d8c08799&u=http%3A%2F%2Fwww.efficios.com%2F">http://www.efficios.com</a></div>
</div>
</div>
</body>
</html>