/bookset.html
System Analysis Toolkit
/instr/about.html
User's Guide
/instr/about.html#id1
About This Guide
/instr/introduction.html#id1
Introduction
/instr/introduction.html#id3
What is the System Analysis Toolkit (SAT)?
/instr/introduction.html#id5
Why is the SAT needed?
/instr/introduction.html#id7
How the SAT works
/instr/introduction.html#id9
The Instrumented Kernel
/instr/introduction.html#id11
Kernel buffer management
/instr/introduction.html#id13
The data-capture program
/instr/introduction.html#id15
Data interpretation
/instr/parts.html#id1
What's in the SAT?
/instr/events.html#id1
Events and the Kernel
/instr/events.html#id3
What generates events
/instr/events.html#id5
Generating events: a typical scenario
/instr/events.html#id7
Multithreaded example:
/instr/events.html#id9
Thread context-switch time
/instr/events.html#id11
Thread restarting
/instr/buffers.html#id1
Kernel Buffer Management
/instr/buffers.html#id3
Instrumented Kernel and kernel buffer management
/instr/buffers.html#id5
Buffer specifications
/instr/buffers.html#id7
Circular linked lists
/instr/buffers.html#id9
Linked list size
/instr/buffers.html#id11
Full buffers and the high-water mark
/instr/buffers.html#id13
Buffer overruns
/instr/datacapture.html#id1
User Data Capture
/instr/datacapture.html#id3
Overview
/instr/datacapture.html#id5
What the data-capture utility does
/instr/datacapture.html#id7
Tracing settings
/instr/datacapture.html#id9
Normal mode and daemon mode
/instr/datacapture.html#id11
Simple and combine events
/instr/datacapture.html#id13
Wide mode and fast mode
/instr/datacapture.html#id15
Tracebuffer file
/instr/datacapture.html#id17
Configuring
/instr/datacapture.html#id19
Configuring the Instrumented Kernel
/instr/datacapture.html#id21
Configuring data capture
/instr/datainterpretation.html#id1
User Data Interpretation
/instr/datainterpretation.html#id3
Overview
/instr/datainterpretation.html#id5
The traceparser library
/instr/datainterpretation.html#id7
Interpreting events
/instr/datainterpretation.html#id9
Simple and combine events
/instr/datainterpretation.html#id11
The traceevent_t structure
/instr/datainterpretation.html#id13
Event interlacing
/instr/datainterpretation.html#id15
Timestamp
/instr/datainterpretation.html#id17
The traceprinter utility
/instr/filtering.html#id1
Filtering
/instr/filtering.html#id3
Overview
/instr/filtering.html#id5
Types of filters
/instr/filtering.html#id7
Tradeoffs
/instr/filtering.html#id9
The fast/wide mask
/instr/filtering.html#id11
The static rules filter
/instr/filtering.html#id13
The dynamic rules filter
/instr/filtering.html#id15
The post-processing facility
/instr/tutorial-intro.html#id1
Tutorial
/instr/tutorial-intro.html#id3
Starting out
/instr/tutorial-intro.html#id5
Setting up the Instrumented Kernel
/instr/tutorial-intro.html#id7
Tutorial overview
/instr/tutorial-intro.html#id9
The tracelogger in normal mode
/instr/tutorial-intro.html#INTERRUPTS
Interrupts, iterations, and events
/instr/tutorial-intro.html#SLOWSYSTEMS
Slow systems and busy systems
/instr/tutorial-intro.html#id13
The tracelogger in daemon mode
/instr/tutorial-intro.html#id15
Overview
/instr/tutorial-intro.html#id17
Normal mode vs. Daemon mode
/instr/tutorial-intro.html#id19
Understanding the tutorial format
/instr/tutorial-intro.html#ALL_CLASSES.C
Gathering all events from all classes
/instr/tutorial-intro.html#ONE_CLASS.C
Gathering all events from one class
/instr/tutorial-intro.html#FIVE_EVENTS.C
Gathering five events from four classes
/instr/tutorial-intro.html#KER_CALLS.C
Gathering kernel calls
/instr/tutorial-intro.html#EH_SIMPLE.C
Event handling - simple
/instr/tutorial-intro.html#USR_EVENT_SIMPLE.C
User event - simple
/instr/tutorial-intro.html#id27
Header file: instrex.h
/instr/tutorial-intro.html#allclasses
C File: all_classes.c
/instr/tutorial-intro.html#allclassesresults
Sample result file: all_classes.results.txt
/instr/tutorial-intro.html#oneclass
C File: one_class.c
/instr/tutorial-intro.html#oneclassresults
Sample result file: one_class.results.txt
/instr/tutorial-intro.html#fiveevents
C File: five_events.c
/instr/tutorial-intro.html#fiveeventsresults
Sample result file: five_events.results.txt
/instr/tutorial-intro.html#kercalls
C File: ker_calls.c
/instr/tutorial-intro.html#kercallsallresults
Sample result file: ker_calls.all.results.txt
/instr/tutorial-intro.html#kercalls14results
Sample result file: ker_calls.14.results.txt
/instr/tutorial-intro.html#ehsimple
C File: eh_simple.c
/instr/tutorial-intro.html#ehsimpleresults
Sample result file: eh_sample.results.txt
/instr/tutorial-intro.html#usreventsimple
C File: usr_event_simple.c
/instr/tutorial-intro.html#usereventsimpleresults
Sample result file: usr_event_simple.results.txt
/instr/hints.html#id1
Hints and Troubleshooting
/instr/hints.html#id3
How to check for the Instrumented Kernel mode
/instr/hints.html#id5
Run as root
/instr/hints.html#id7
Monitor diskspace
/instr/functions.html#id1
Functions
/instr/i/interrupthooktrace.html#id1
InterruptHookTrace
/instr/i/interrupthooktrace.html#id3
Synopsis:
/instr/i/interrupthooktrace.html#id5
Library:
/instr/i/interrupthooktrace.html#id7
Description:
/instr/i/interrupthooktrace.html#end
_NTO_INTR_FLAGS_END
/instr/i/interrupthooktrace.html#id10
Blocking states
/instr/i/interrupthooktrace.html#Returns
Returns:
/instr/i/interrupthooktrace.html#id13
Errors:
/instr/i/interrupthooktrace.html#id15
Classification:
/instr/i/interrupthooktrace.html#id16
Safety:
/instr/i/interrupthooktrace.html#id18
See also:
/instr/t/traceevent.html#id1
TraceEvent
/instr/t/traceevent.html#id3
Synopsis:
/instr/t/traceevent.html#id5
Library:
/instr/t/traceevent.html#id7
Description:
/instr/t/traceevent.html#BUFFERANDEXECUTIONCONTROL
Buffer and execution control
/instr/t/traceevent.html#NTO_TRACE_ALLOCBUFFER
_NTO_TRACE_ALLOCBUFFER, _NTO_TRACE_DEALLOCBUFFER
/instr/t/traceevent.html#NTO_TRACE_FLUSHBUFFER
_NTO_TRACE_FLUSHBUFFER
/instr/t/traceevent.html#NTO_TRACE_QUERYEVENTS
_NTO_TRACE_QUERYEVENTS
/instr/t/traceevent.html#NTO_TRACE_START
_NTO_TRACE_START, _NTO_TRACE_STARTNOSTATE, _NTO_TRACE_STOP
/instr/t/traceevent.html#NTO_TRACE_SETRINGMODE
_NTO_TRACE_SETRINGMODE
/instr/t/traceevent.html#NTO_TRACE_SETLINEARMODE
_NTO_TRACE_SETLINEARMODE
/instr/t/traceevent.html#FASTWIDEMASKCONFIGURATION
Fast/wide mask configuration
/instr/t/traceevent.html#NTO_TRACE_SETALLCLASSESFAST
_NTO_TRACE_SETALLCLASSESFAST, _NTO_TRACE_SETALLCLASSESWIDE
/instr/t/traceevent.html#NTO_TRACE_SETCLASSFAST
_NTO_TRACE_SETCLASSFAST, _NTO_TRACE_SETCLASSWIDE
/instr/t/traceevent.html#NTO_TRACE_SETEVENTFAST
_NTO_TRACE_SETEVENTFAST, _NTO_TRACE_SETEVENTWIDE
/instr/t/traceevent.html#STATICRULESFILTERCONFIGURATION
Static rules filter configuration
/instr/t/traceevent.html#NTO_TRACE_ADDALLCLASSES
_NTO_TRACE_ADDALLCLASSES, _NTO_TRACE_DELALLCLASSES
/instr/t/traceevent.html#NTO_TRACE_ADDCLASS
_NTO_TRACE_ADDCLASS, _NTO_TRACE_DELCLASS
/instr/t/traceevent.html#NTO_TRACE_ADDEVENT
_NTO_TRACE_ADDEVENT, _NTO_TRACE_DELEVENT
/instr/t/traceevent.html#NTO_TRACE_SETCLASSPID
_NTO_TRACE_SETCLASSPID, _NTO_TRACE_CLRCLASSPID, _NTO_TRACE_SETCLASSTID, _NTO_TRACE_CLRCLASSTID
/instr/t/traceevent.html#NTO_TRACE_SETEVENTPID
_NTO_TRACE_SETEVENTPID, _NTO_TRACE_CLREVENTPID, _NTO_TRACE_SETEVENTTID, _NTO_TRACE_CLREVENTTID,
/instr/t/traceevent.html#DYNAMICRULESFILTERCONFIGURATION
Dynamic rules filter configuration
/instr/t/traceevent.html#id27
Event Handler Data Access
/instr/t/traceevent.html#NTO_TRACE_ADDEVENTHANDLER
_NTO_TRACE_ADDEVENTHANDLER, _NTO_TRACE_DELEVENTHANDLER
/instr/t/traceevent.html#NTO_TRACE_ADDCLASSEVHANDLER
_NTO_TRACE_ADDCLASSEVHANDLER, _NTO_TRACE_DELCLASSEVHANDLER
/instr/t/traceevent.html#USERGENERATEDTRACEEVENTS
User-generated trace events
/instr/t/traceevent.html#NTO_TRACE_INSERTEVENT
_NTO_TRACE_INSERTEVENT
/instr/t/traceevent.html#NTO_TRACE_INSERTCUSEREVENT
_NTO_TRACE_INSERTSUSEREVENT, _NTO_TRACE_INSERTCUSEREVENT, _NTO_TRACE_INSERTUSRSTREVENT
/instr/t/traceevent.html#id34
mode
/instr/t/traceevent.html#id36
class
/instr/t/traceevent.html#eventarguments
event
/instr/t/traceevent.html#id39
p1...pn
/instr/t/traceevent.html#ArgumentDescriptions
Argument descriptions
/instr/t/traceevent.html#Returns
Returns:
/instr/t/traceevent.html#id44
Errors:
/instr/t/traceevent.html#id46
Classification:
/instr/t/traceevent.html#id47
Safety:
/instr/t/traceevent.html#id49
Caveats:
/instr/t/traceevent.html#id51
See also:
/instr/t/traceparser.html#id1
traceparser
/instr/t/traceparser.html#id3
Synopsis:
/instr/t/traceparser.html#id5
Library:
/instr/t/traceparser.html#id7
Description:
/instr/t/traceparser.html#id9
Returns:
/instr/t/traceparser.html#id11
Classification:
/instr/t/traceparser.html#id12
Safety:
/instr/t/traceparser.html#id14
See also:
/instr/t/traceparser_cs.html#id1
traceparser_cs
/instr/t/traceparser_cs.html#id3
Synopsis:
/instr/t/traceparser_cs.html#id5
Library:
/instr/t/traceparser_cs.html#id7
Description:
/instr/t/traceparser_cs.html#id9
Returns:
/instr/t/traceparser_cs.html#id11
Classification:
/instr/t/traceparser_cs.html#id12
Safety:
/instr/t/traceparser_cs.html#id14
See also:
/instr/t/traceparser_cs_range.html#id1
traceparser_cs_range
/instr/t/traceparser_cs_range.html#id3
Synopsis:
/instr/t/traceparser_cs_range.html#id5
Library:
/instr/t/traceparser_cs_range.html#id7
Description:
/instr/t/traceparser_cs_range.html#id9
Returns:
/instr/t/traceparser_cs_range.html#id11
Classification:
/instr/t/traceparser_cs_range.html#id12
Safety:
/instr/t/traceparser_cs_range.html#id14
See also:
/instr/t/traceparser_debug.html#id1
traceparser_debug
/instr/t/traceparser_debug.html#id3
Synopsis:
/instr/t/traceparser_debug.html#id5
Library:
/instr/t/traceparser_debug.html#id7
Description:
/instr/t/traceparser_debug.html#id9
Debug flags
/instr/t/traceparser_debug.html#id11
Returns:
/instr/t/traceparser_debug.html#id13
Classification:
/instr/t/traceparser_debug.html#id14
Safety:
/instr/t/traceparser_debug.html#id16
See also:
/instr/t/traceparser_destroy.html#id1
traceparser_destroy
/instr/t/traceparser_destroy.html#id3
Synopsis:
/instr/t/traceparser_destroy.html#id5
Library:
/instr/t/traceparser_destroy.html#id7
Description:
/instr/t/traceparser_destroy.html#id9
Classification:
/instr/t/traceparser_destroy.html#id10
Safety:
/instr/t/traceparser_destroy.html#id12
See also:
/instr/t/traceparser_get_info.html#id1
traceparser_get_info
/instr/t/traceparser_get_info.html#id3
Synopsis:
/instr/t/traceparser_get_info.html#id5
Library:
/instr/t/traceparser_get_info.html#id7
Description:
/instr/t/traceparser_get_info.html#id9
User info modes for info_modes
/instr/t/traceparser_get_info.html#id11
Other valid user info modes
/instr/t/traceparser_get_info.html#id13
Returns:
/instr/t/traceparser_get_info.html#id15
Classification:
/instr/t/traceparser_get_info.html#id16
Safety:
/instr/t/traceparser_get_info.html#id18
See also:
/instr/t/traceparser_init.html#id1
traceparser_init
/instr/t/traceparser_init.html#id3
Synopsis:
/instr/t/traceparser_init.html#id5
Library:
/instr/t/traceparser_init.html#id7
Description:
/instr/t/traceparser_init.html#id9
Returns:
/instr/t/traceparser_init.html#id11
Classification:
/instr/t/traceparser_init.html#id12
Safety:
/instr/t/traceparser_init.html#id14
See also:
/instr/utilities.html#id1
Utilities
/instr/t/tracelogger.html#id1
tracelogger
/instr/t/tracelogger.html#id3
Syntax:
/instr/t/tracelogger.html#id5
Runs on:
/instr/t/tracelogger.html#id7
Options:
/instr/t/tracelogger.html#id9
Description:
/instr/t/tracelogger.html#id11
Examples:
/instr/t/tracelogger.html#id13
Exit status:
/instr/t/tracelogger.html#id15
Errors:
/instr/t/tracelogger.html#id17
Caveats:
/instr/t/tracelogger.html#id19
See also:
/instr/t/traceprinter.html#id1
traceprinter
/instr/t/traceprinter.html#id3
Syntax:
/instr/t/traceprinter.html#id5
Runs on:
/instr/t/traceprinter.html#id7
Options:
/instr/t/traceprinter.html#id9
Description:
/instr/t/traceprinter.html#id11
Examples:
/instr/t/traceprinter.html#id13
Exit status:
/instr/t/traceprinter.html#id15
Errors:
/instr/t/traceprinter.html#id17
Caveats:
/instr/t/traceprinter.html#id19
See also:
/instr/kercall_table.html#id1
Kernel Call Arguments and Return Values
/instr/keywords-all.html
Keyword Index
/instr/keywords-B.html
B
/instr/keywords-C.html
C
/instr/keywords-D.html
D
/instr/keywords-E.html
E
/instr/keywords-F.html
F
/instr/keywords-I.html
I
/instr/keywords-K.html
K
/instr/keywords-L.html
L
/instr/keywords-N.html
N
/instr/keywords-P.html
P
/instr/keywords-S.html
S
/instr/keywords-T.html
T
/instr/keywords-U.html
U
/instr/keywords-W.html
W
