[OpenIndiana-discuss] Missing dtrace probe syscall::exec:

[Chris Ridd]

On 24 Sep 2010, at 15:17, Alan Coopersmith wrote:

> Chris Ridd wrote:
>> On 24 Sep 2010, at 08:23, Ewald Ertl wrote:
>> 
>>> Hello,
>>> 
>>> I attempted to use the execsnoop script from the DTraceToolkit but the exec
>>> probe is missing.
>>> 
>>> probe description syscall::exec:return does not match any probes
>>> 
>>> 
>>> [ewer at solewer:~]$dtrace -l -P syscall | grep exec
>>> 21829    syscall                                               exece entry
>>> 21830    syscall                                               exece return
>>> 
>>> 
>>> There is "only" the exece available.
>>> Why is the exec dtrace probe missing_
>> 
>> Hm you're right - this happens on 32-bit and 64-bit kernels.
>> 
>> Could it be a deliberate change in onnv?
> 
> Appears to be:
> http://src.opensolaris.org/source/diff/onnv/onnv-gate/usr/src/uts/common/os/exec.c?r2=%252Fonnv%252Fonnv-gate%252Fusr%252Fsrc%252Futs%252Fcommon%252Fos%252Fexec.c%4011798%3A1e7f1f154004&r1=%252Fonnv%252Fonnv-gate%252Fusr%252Fsrc%252Futs%252Fcommon%252Fos%252Fexec.c%4011736%3A63a134e1f09c
> 
> Which is part of the putback a few months ago for:
> 
> PSARC 2009/657 delete obsolete system call traps
> http://arc.opensolaris.org/caselog/PSARC/2009/657/
> 
> 6906485 delete obsolete system call traps
> http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6906485

It sure looks like it, thanks for digging this out.

There seems to be no updated version of the DTrace Toolkit right now (perhaps the author's been busy on <http://blogs.sun.com/brendan/entry/dtrace_book_coming_soon>), but that's probably what needs fixing.

Cheers,

Chris