Chapter 16. Kernel Process Tapset

Table of Contents

function::target_set_pid - Does pid descend from target process?
function::target_set_report - Print a report about the target set
probe::kprocess.create - Fires whenever a new process or thread is successfully created
probe::kprocess.exec - Attempt to exec to a new program
probe::kprocess.exec_complete - Return from exec to a new program
probe::kprocess.exit - Exit from process
probe::kprocess.release - Process released
probe::kprocess.start - Starting new process

This family of probe points is used to probe process-related activities. It contains the following probe points: