2 * Copyright (c) 1999-2016 Apple Inc. All rights reserved.
4 * @APPLE_LICENSE_HEADER_START@
6 * "Portions Copyright (c) 1999 Apple Computer, Inc. All Rights
7 * Reserved. This file contains Original Code and/or Modifications of
8 * Original Code as defined in and that are subject to the Apple Public
9 * Source License Version 1.0 (the 'License'). You may not use this file
10 * except in compliance with the License. Please obtain a copy of the
11 * License at http://www.apple.com/publicsource and read it before using
14 * The Original Code and all software distributed under the License are
15 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
16 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
17 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT. Please see the
19 * License for the specific language governing rights and limitations
22 * @APPLE_LICENSE_HEADER_END@
26 * SDKROOT=macosx.internal cc -I`xcrun -sdk macosx.internal --show-sdk-path`/System/Library/Frameworks/System.framework/Versions/B/PrivateHeaders -arch x86_64 -Os -lktrace -lutil -o fs_usage fs_usage.c
47 #include <sys/fcntl.h>
49 #include <sys/ioctl.h>
51 #include <sys/param.h>
52 #include <sys/socket.h>
53 #include <sys/syslimits.h>
55 #include <sys/types.h>
57 #import <mach/clock_types.h>
58 #import <mach/mach_time.h>
61 * MAXCOLS controls when extra data kicks in.
62 * MAX_WIDE_MODE_COLS controls -w mode to get even wider data in path.
65 #define MAX_WIDE_MODE_COLS 264
66 #define MAXWIDTH MAX_WIDE_MODE_COLS + 64
68 typedef struct th_info
{
72 /* this is needed for execve()/posix_spawn(), because the command name at the end probe is the new name, which we don't want */
73 char command
[MAXCOMLEN
+ 1];
76 * sometimes a syscall can cause multiple VFS_LOOKUPs of the same vnode with multiple paths
77 * (e.g., one absolute, one relative). traditional fs_usage behavior was to display the
78 * *first* lookup, so we need to save it off once we see it.
80 unsigned long vnodeid
; /* the vp of the VFS_LOOKUP we're currently in, 0 if we are not in one */
81 char pathname
[MAXPATHLEN
];
82 char pathname2
[MAXPATHLEN
];
83 char *newest_pathname
; /* points to pathname2 if it's filled, otherwise pathname if it's filled, otherwise NULL */
106 unsigned long iosize
;
107 unsigned long io_errno
;
108 unsigned long is_meta
;
110 uintptr_t issuing_thread
;
112 uintptr_t completion_thread
;
113 char issuing_command
[MAXCOMLEN
+ 1];
114 uint64_t issued_time
;
115 uint64_t completed_time
;
116 struct timeval completed_walltime
;
120 #define HASH_SIZE 1024
121 #define HASH_MASK (HASH_SIZE - 1)
123 void setup_ktrace_callbacks(void);
124 void extend_syscall(uintptr_t thread
, int type
, ktrace_event_t event
);
126 /* printing routines */
127 bool check_filter_mode(pid_t pid
, th_info_t ti
, unsigned long type
, int error
, int retval
, char *sc_name
);
128 void format_print(th_info_t ti
, char *sc_name
, ktrace_event_t event
, unsigned long type
, int format
, uint64_t now
, uint64_t stime
, int waited
, const char *pathname
, struct diskio
*dio
);
130 /* metadata info hash routines */
131 void meta_add_name(uint64_t blockno
, const char *pathname
);
132 const char *meta_find_name(uint64_t blockno
);
133 void meta_delete_all(void);
135 /* event ("thread info") routines */
136 void event_enter(int type
, ktrace_event_t event
);
137 void event_exit(char *sc_name
, int type
, ktrace_event_t event
, int format
);
138 th_info_t
event_find(uintptr_t thread
, int type
);
139 void event_delete(th_info_t ti_to_delete
);
140 void event_delete_all(void);
141 void event_mark_thread_waited(uintptr_t);
143 /* network fd set routines */
144 void fd_set_is_network(pid_t pid
, unsigned long fd
, bool set
);
145 bool fd_is_network(pid_t pid
, unsigned long fd
);
146 void fd_clear_pid(pid_t pid
);
147 void fd_clear_all(void);
149 /* shared region address lookup routines */
150 void init_shared_cache_mapping(void);
151 void lookup_name(uint64_t user_addr
, char **type
, char **name
);
153 /* disk I/O tracking routines */
154 struct diskio
*diskio_start(unsigned long type
, unsigned long bp
, unsigned long dev
, unsigned long blkno
, unsigned long iosize
, ktrace_event_t event
);
155 struct diskio
*diskio_find(unsigned long bp
);
156 struct diskio
*diskio_complete(unsigned long bp
, unsigned long io_errno
, unsigned long resid
, uintptr_t thread
, uint64_t curtime
, struct timeval curtime_wall
);
157 void diskio_print(struct diskio
*dio
);
158 void diskio_free(struct diskio
*dio
);
160 /* disk name routines */
163 char *generate_cs_disk_name(unsigned long dev
, char *s
);
164 char *find_disk_name(unsigned long dev
);
165 void cache_disk_names(void);
167 #define CLASS_MASK 0xff000000
168 #define CSC_MASK 0xffff0000
169 #define BSC_INDEX(type) ((type >> 2) & 0x3fff)
171 #define MACH_vmfault 0x01300008
172 #define MACH_pageout 0x01300004
173 #define MACH_sched 0x01400000
174 #define MACH_stkhandoff 0x01400008
175 #define MACH_idle 0x01400024
177 #define BSC_thread_terminate 0x040c05a4
179 #define HFS_update 0x3018000
180 #define HFS_modify_block_end 0x3018004
182 #define Throttled 0x3010184
183 #define SPEC_ioctl 0x3060000
184 #define SPEC_unmap_info 0x3060004
185 #define proc_exit 0x4010004
187 #define BC_IO_HIT 0x03070010
188 #define BC_IO_HIT_STALLED 0x03070020
189 #define BC_IO_MISS 0x03070040
190 #define BC_IO_MISS_CUT_THROUGH 0x03070080
191 #define BC_PLAYBACK_IO 0x03070100
192 #define BC_STR(s) ( \
193 (s == BC_IO_HIT) ? "HIT" : \
194 (s == BC_IO_HIT_STALLED) ? "STALL" : \
195 (s == BC_IO_MISS) ? "MISS" : \
196 (s == BC_IO_MISS_CUT_THROUGH) ? "CUT" : \
197 (s == BC_PLAYBACK_IO) ? "PLBK" : \
198 (s == 0x0) ? "NONE" : "UNKN" )
200 #define P_DISKIO_READ (DKIO_READ << 2)
201 #define P_DISKIO_ASYNC (DKIO_ASYNC << 2)
202 #define P_DISKIO_META (DKIO_META << 2)
203 #define P_DISKIO_PAGING (DKIO_PAGING << 2)
204 #define P_DISKIO_THROTTLE (DKIO_THROTTLE << 2)
205 #define P_DISKIO_PASSIVE (DKIO_PASSIVE << 2)
206 #define P_DISKIO_NOCACHE (DKIO_NOCACHE << 2)
207 #define P_DISKIO_TIER_MASK (DKIO_TIER_MASK << 2)
208 #define P_DISKIO_TIER_SHIFT (DKIO_TIER_SHIFT + 2)
209 #define P_DISKIO_TIER_UPGRADE (DKIO_TIER_UPGRADE << 2)
211 #define P_DISKIO (FSDBG_CODE(DBG_DKRW, 0))
212 #define P_DISKIO_DONE (P_DISKIO | (DKIO_DONE << 2))
213 #define P_DISKIO_TYPE (P_DISKIO | P_DISKIO_READ | P_DISKIO_META | P_DISKIO_PAGING)
214 #define P_DISKIO_MASK (CSC_MASK | 0x4)
216 #define P_WrData (P_DISKIO)
217 #define P_RdData (P_DISKIO | P_DISKIO_READ)
218 #define P_WrMeta (P_DISKIO | P_DISKIO_META)
219 #define P_RdMeta (P_DISKIO | P_DISKIO_META | P_DISKIO_READ)
220 #define P_PgOut (P_DISKIO | P_DISKIO_PAGING)
221 #define P_PgIn (P_DISKIO | P_DISKIO_PAGING | P_DISKIO_READ)
223 #define P_CS_Class 0x0a000000 // DBG_CORESTORAGE
224 #define P_CS_Type_Mask 0xfffffff0
225 #define P_CS_IO_Done 0x00000004
227 #define P_CS_ReadChunk 0x0a000200 // chopped up request
228 #define P_CS_WriteChunk 0x0a000210
229 #define P_CS_MetaRead 0x0a000300 // meta data
230 #define P_CS_MetaWrite 0x0a000310
231 #define P_CS_TransformRead 0x0a000500 // background transform
232 #define P_CS_TransformWrite 0x0a000510
233 #define P_CS_MigrationRead 0x0a000600 // composite disk block migration
234 #define P_CS_MigrationWrite 0x0a000610
235 #define P_CS_SYNC_DISK 0x0a010000
237 #define MSC_map_fd 0x010c00ac
239 #define BSC_BASE 0x040C0000
241 // Network related codes
242 #define BSC_recvmsg 0x040C006C
243 #define BSC_sendmsg 0x040C0070
244 #define BSC_recvfrom 0x040C0074
245 #define BSC_accept 0x040C0078
246 #define BSC_select 0x040C0174
247 #define BSC_socket 0x040C0184
248 #define BSC_connect 0x040C0188
249 #define BSC_bind 0x040C01A0
250 #define BSC_listen 0x040C01A8
251 #define BSC_sendto 0x040C0214
252 #define BSC_socketpair 0x040C021C
253 #define BSC_recvmsg_nocancel 0x040c0644
254 #define BSC_sendmsg_nocancel 0x040c0648
255 #define BSC_recvfrom_nocancel 0x040c064c
256 #define BSC_accept_nocancel 0x040c0650
257 #define BSC_connect_nocancel 0x040c0664
258 #define BSC_sendto_nocancel 0x040c0674
260 #define BSC_exit 0x040C0004
261 #define BSC_read 0x040C000C
262 #define BSC_write 0x040C0010
263 #define BSC_open 0x040C0014
264 #define BSC_close 0x040C0018
265 #define BSC_link 0x040C0024
266 #define BSC_unlink 0x040C0028
267 #define BSC_chdir 0x040c0030
268 #define BSC_fchdir 0x040c0034
269 #define BSC_mknod 0x040C0038
270 #define BSC_chmod 0x040C003C
271 #define BSC_chown 0x040C0040
272 #define BSC_getfsstat 0x040C0048
273 #define BSC_access 0x040C0084
274 #define BSC_chflags 0x040C0088
275 #define BSC_fchflags 0x040C008C
276 #define BSC_sync 0x040C0090
277 #define BSC_dup 0x040C00A4
278 #define BSC_ioctl 0x040C00D8
279 #define BSC_revoke 0x040C00E0
280 #define BSC_symlink 0x040C00E4
281 #define BSC_readlink 0x040C00E8
282 #define BSC_execve 0x040C00EC
283 #define BSC_umask 0x040C00F0
284 #define BSC_chroot 0x040C00F4
285 #define BSC_msync 0x040C0104
286 #define BSC_dup2 0x040C0168
287 #define BSC_fcntl 0x040C0170
288 #define BSC_fsync 0x040C017C
289 #define BSC_readv 0x040C01E0
290 #define BSC_writev 0x040C01E4
291 #define BSC_fchown 0x040C01EC
292 #define BSC_fchmod 0x040C01F0
293 #define BSC_rename 0x040C0200
294 #define BSC_flock 0x040C020C
295 #define BSC_mkfifo 0x040C0210
296 #define BSC_mkdir 0x040C0220
297 #define BSC_rmdir 0x040C0224
298 #define BSC_utimes 0x040C0228
299 #define BSC_futimes 0x040C022C
300 #define BSC_pread 0x040C0264
301 #define BSC_pwrite 0x040C0268
302 #define BSC_statfs 0x040C0274
303 #define BSC_fstatfs 0x040C0278
304 #define BSC_unmount 0x040C027C
305 #define BSC_mount 0x040C029C
306 #define BSC_fdatasync 0x040C02EC
307 #define BSC_stat 0x040C02F0
308 #define BSC_fstat 0x040C02F4
309 #define BSC_lstat 0x040C02F8
310 #define BSC_pathconf 0x040C02FC
311 #define BSC_fpathconf 0x040C0300
312 #define BSC_getdirentries 0x040C0310
313 #define BSC_mmap 0x040c0314
314 #define BSC_lseek 0x040c031c
315 #define BSC_truncate 0x040C0320
316 #define BSC_ftruncate 0x040C0324
317 #define BSC_undelete 0x040C0334
318 #define BSC_open_dprotected_np 0x040C0360
319 #define BSC_getattrlist 0x040C0370
320 #define BSC_setattrlist 0x040C0374
321 #define BSC_getdirentriesattr 0x040C0378
322 #define BSC_exchangedata 0x040C037C
323 #define BSC_checkuseraccess 0x040C0380
324 #define BSC_searchfs 0x040C0384
325 #define BSC_delete 0x040C0388
326 #define BSC_copyfile 0x040C038C
327 #define BSC_fgetattrlist 0x040C0390
328 #define BSC_fsetattrlist 0x040C0394
329 #define BSC_getxattr 0x040C03A8
330 #define BSC_fgetxattr 0x040C03AC
331 #define BSC_setxattr 0x040C03B0
332 #define BSC_fsetxattr 0x040C03B4
333 #define BSC_removexattr 0x040C03B8
334 #define BSC_fremovexattr 0x040C03BC
335 #define BSC_listxattr 0x040C03C0
336 #define BSC_flistxattr 0x040C03C4
337 #define BSC_fsctl 0x040C03C8
338 #define BSC_posix_spawn 0x040C03D0
339 #define BSC_ffsctl 0x040C03D4
340 #define BSC_open_extended 0x040C0454
341 #define BSC_umask_extended 0x040C0458
342 #define BSC_stat_extended 0x040C045C
343 #define BSC_lstat_extended 0x040C0460
344 #define BSC_fstat_extended 0x040C0464
345 #define BSC_chmod_extended 0x040C0468
346 #define BSC_fchmod_extended 0x040C046C
347 #define BSC_access_extended 0x040C0470
348 #define BSC_mkfifo_extended 0x040C048C
349 #define BSC_mkdir_extended 0x040C0490
350 #define BSC_aio_fsync 0x040C04E4
351 #define BSC_aio_return 0x040C04E8
352 #define BSC_aio_suspend 0x040C04EC
353 #define BSC_aio_cancel 0x040C04F0
354 #define BSC_aio_error 0x040C04F4
355 #define BSC_aio_read 0x040C04F8
356 #define BSC_aio_write 0x040C04FC
357 #define BSC_lio_listio 0x040C0500
358 #define BSC_sendfile 0x040C0544
359 #define BSC_stat64 0x040C0548
360 #define BSC_fstat64 0x040C054C
361 #define BSC_lstat64 0x040C0550
362 #define BSC_stat64_extended 0x040C0554
363 #define BSC_lstat64_extended 0x040C0558
364 #define BSC_fstat64_extended 0x040C055C
365 #define BSC_getdirentries64 0x040C0560
366 #define BSC_statfs64 0x040C0564
367 #define BSC_fstatfs64 0x040C0568
368 #define BSC_getfsstat64 0x040C056C
369 #define BSC_pthread_chdir 0x040C0570
370 #define BSC_pthread_fchdir 0x040C0574
371 #define BSC_lchown 0x040C05B0
373 #define BSC_read_nocancel 0x040c0630
374 #define BSC_write_nocancel 0x040c0634
375 #define BSC_open_nocancel 0x040c0638
376 #define BSC_close_nocancel 0x040c063c
377 #define BSC_msync_nocancel 0x040c0654
378 #define BSC_fcntl_nocancel 0x040c0658
379 #define BSC_select_nocancel 0x040c065c
380 #define BSC_fsync_nocancel 0x040c0660
381 #define BSC_readv_nocancel 0x040c066c
382 #define BSC_writev_nocancel 0x040c0670
383 #define BSC_pread_nocancel 0x040c0678
384 #define BSC_pwrite_nocancel 0x040c067c
385 #define BSC_aio_suspend_nocancel 0x40c0694
386 #define BSC_guarded_open_np 0x040c06e4
387 #define BSC_guarded_close_np 0x040c06e8
389 #define BSC_fsgetpath 0x040c06ac
391 #define BSC_getattrlistbulk 0x040c0734
393 #define BSC_openat 0x040c073c
394 #define BSC_openat_nocancel 0x040c0740
395 #define BSC_renameat 0x040c0744
396 #define BSC_chmodat 0x040c074c
397 #define BSC_chownat 0x040c0750
398 #define BSC_fstatat 0x040c0754
399 #define BSC_fstatat64 0x040c0758
400 #define BSC_linkat 0x040c075c
401 #define BSC_unlinkat 0x040c0760
402 #define BSC_readlinkat 0x040c0764
403 #define BSC_symlinkat 0x040c0768
404 #define BSC_mkdirat 0x040c076c
405 #define BSC_getattrlistat 0x040c0770
407 #define BSC_msync_extended 0x040e0104
408 #define BSC_pread_extended 0x040e0264
409 #define BSC_pwrite_extended 0x040e0268
410 #define BSC_mmap_extended 0x040e0314
411 #define BSC_mmap_extended2 0x040f0314
413 #define FMT_NOTHING -1
414 #define FMT_DEFAULT 0
421 #define FMT_CACHEHIT 7
425 #define FMT_FTRUNC 11
427 #define FMT_SELECT 13
429 #define FMT_AIO_FSYNC 15
430 #define FMT_AIO_RETURN 16
431 #define FMT_AIO_SUSPEND 17
432 #define FMT_AIO_CANCEL 18
434 #define FMT_LIO_LISTIO 20
437 #define FMT_ACCESS 23
439 #define FMT_FCHMOD 25
440 #define FMT_CHMOD_EXT 26
441 #define FMT_FCHMOD_EXT 27
442 #define FMT_CHFLAGS 28
443 #define FMT_FCHFLAGS 29
447 #define FMT_SENDFILE 33
448 #define FMT_IOCTL_SYNC 34
450 #define FMT_UNMOUNT 36
451 #define FMT_DISKIO_CS 37
452 #define FMT_SYNC_DISK_CS 38
453 #define FMT_IOCTL_UNMAP 39
454 #define FMT_UNMAP_INFO 40
455 #define FMT_HFS_update 41
458 #define FMT_CHMODAT 44
459 #define FMT_OPENAT 45
460 #define FMT_RENAMEAT 46
461 #define FMT_IOCTL_SYNCCACHE 47
463 #define DBG_FUNC_ALL (DBG_FUNC_START | DBG_FUNC_END)
465 #pragma mark global state
468 bool BC_flag
= false;
469 bool RAW_flag
= false;
470 bool wideflag
= false;
471 bool include_waited_flag
= false;
472 bool want_kernel_task
= true;
473 dispatch_source_t stop_timer
, sigquit_source
, sigpipe_source
, sighup_source
, sigterm_source
, sigwinch_source
;
474 uint64_t mach_time_of_first_event
;
475 uint64_t start_time_ns
= 0;
476 uint64_t end_time_ns
= UINT64_MAX
;
477 unsigned int columns
= 0;
480 * Network only or filesystem only output filter
481 * Default of zero means report all activity - no filtering
483 #define FILESYS_FILTER 0x01
484 #define NETWORK_FILTER 0x02
485 #define EXEC_FILTER 0x08
486 #define PATHNAME_FILTER 0x10
487 #define DISKIO_FILTER 0x20
488 #define DEFAULT_DO_NOT_FILTER 0x00
490 int filter_mode
= DEFAULT_DO_NOT_FILTER
;
491 bool show_cachehits
= false;
493 #pragma mark syscall lookup table
495 #define MAX_BSD_SYSCALL 526
502 #define NORMAL_SYSCALL(name) \
503 [BSC_INDEX(BSC_##name)] = {#name, FMT_DEFAULT}
505 #define SYSCALL(name, format) \
506 [BSC_INDEX(BSC_##name)] = {#name, format}
508 #define SYSCALL_NAMED(name, displayname, format) \
509 [BSC_INDEX(BSC_##name)] = {#displayname, format}
511 #define SYSCALL_WITH_NOCANCEL(name, format) \
512 [BSC_INDEX(BSC_##name)] = {#name, format}, \
513 [BSC_INDEX(BSC_##name##_nocancel)] = {#name, format}
515 const struct bsd_syscall bsd_syscalls
[MAX_BSD_SYSCALL
] = {
516 SYSCALL(sendfile
, FMT_FD
), /* this should be changed to FMT_SENDFILE once we add an extended info trace event */
517 SYSCALL_WITH_NOCANCEL(recvmsg
, FMT_FD_IO
),
518 SYSCALL_WITH_NOCANCEL(sendmsg
, FMT_FD_IO
),
519 SYSCALL_WITH_NOCANCEL(recvfrom
, FMT_FD_IO
),
520 SYSCALL_WITH_NOCANCEL(sendto
, FMT_FD_IO
),
521 SYSCALL_WITH_NOCANCEL(select
, FMT_SELECT
),
522 SYSCALL_WITH_NOCANCEL(accept
, FMT_FD_2
),
523 SYSCALL(socket
, FMT_SOCKET
),
524 SYSCALL_WITH_NOCANCEL(connect
, FMT_FD
),
525 SYSCALL(bind
, FMT_FD
),
526 SYSCALL(listen
, FMT_FD
),
527 SYSCALL(mmap
, FMT_MMAP
),
528 NORMAL_SYSCALL(socketpair
),
529 NORMAL_SYSCALL(getxattr
),
530 NORMAL_SYSCALL(setxattr
),
531 NORMAL_SYSCALL(removexattr
),
532 NORMAL_SYSCALL(listxattr
),
533 NORMAL_SYSCALL(stat
),
534 NORMAL_SYSCALL(stat64
),
535 NORMAL_SYSCALL(stat_extended
),
536 SYSCALL_NAMED(stat64_extended
, stat_extended64
, FMT_DEFAULT
), /* should be stat64_extended ? */
537 SYSCALL(mount
, FMT_MOUNT
),
538 SYSCALL(unmount
, FMT_UNMOUNT
),
539 NORMAL_SYSCALL(exit
),
540 NORMAL_SYSCALL(execve
),
541 NORMAL_SYSCALL(posix_spawn
),
542 SYSCALL_WITH_NOCANCEL(open
, FMT_OPEN
),
543 SYSCALL(open_extended
, FMT_OPEN
),
544 SYSCALL(guarded_open_np
, FMT_OPEN
),
545 SYSCALL_NAMED(open_dprotected_np
, open_dprotected
, FMT_OPEN
),
546 SYSCALL(dup
, FMT_FD_2
),
547 SYSCALL(dup2
, FMT_FD_2
),
548 SYSCALL_WITH_NOCANCEL(close
, FMT_FD
),
549 SYSCALL(guarded_close_np
, FMT_FD
),
550 SYSCALL_WITH_NOCANCEL(read
, FMT_FD_IO
),
551 SYSCALL_WITH_NOCANCEL(write
, FMT_FD_IO
),
552 SYSCALL(fgetxattr
, FMT_FD
),
553 SYSCALL(fsetxattr
, FMT_FD
),
554 SYSCALL(fremovexattr
, FMT_FD
),
555 SYSCALL(flistxattr
, FMT_FD
),
556 SYSCALL(fstat
, FMT_FD
),
557 SYSCALL(fstat64
, FMT_FD
),
558 SYSCALL(fstat_extended
, FMT_FD
),
559 SYSCALL(fstat64_extended
, FMT_FD
),
560 NORMAL_SYSCALL(lstat
),
561 NORMAL_SYSCALL(lstat64
),
562 NORMAL_SYSCALL(lstat_extended
),
563 SYSCALL_NAMED(lstat64_extended
, lstat_extended64
, FMT_DEFAULT
),
564 NORMAL_SYSCALL(link
),
565 NORMAL_SYSCALL(unlink
),
566 NORMAL_SYSCALL(mknod
),
567 SYSCALL(umask
, FMT_UMASK
),
568 SYSCALL(umask_extended
, FMT_UMASK
),
569 SYSCALL(chmod
, FMT_CHMOD
),
570 SYSCALL(chmod_extended
, FMT_CHMOD_EXT
),
571 SYSCALL(fchmod
, FMT_FCHMOD
),
572 SYSCALL(fchmod_extended
, FMT_FCHMOD_EXT
),
573 NORMAL_SYSCALL(chown
),
574 NORMAL_SYSCALL(lchown
),
575 SYSCALL(fchown
, FMT_FD
),
576 SYSCALL(access
, FMT_ACCESS
),
577 NORMAL_SYSCALL(access_extended
),
578 NORMAL_SYSCALL(chdir
),
579 NORMAL_SYSCALL(pthread_chdir
),
580 NORMAL_SYSCALL(chroot
),
581 NORMAL_SYSCALL(utimes
),
582 SYSCALL_NAMED(delete, delete-Carbon
, FMT_DEFAULT
),
583 NORMAL_SYSCALL(undelete
),
584 NORMAL_SYSCALL(revoke
),
585 NORMAL_SYSCALL(fsctl
),
586 SYSCALL(ffsctl
, FMT_FD
),
587 SYSCALL(chflags
, FMT_CHFLAGS
),
588 SYSCALL(fchflags
, FMT_FCHFLAGS
),
589 SYSCALL(fchdir
, FMT_FD
),
590 SYSCALL(pthread_fchdir
, FMT_FD
),
591 SYSCALL(futimes
, FMT_FD
),
592 NORMAL_SYSCALL(sync
),
593 NORMAL_SYSCALL(symlink
),
594 NORMAL_SYSCALL(readlink
),
595 SYSCALL_WITH_NOCANCEL(fsync
, FMT_FD
),
596 SYSCALL(fdatasync
, FMT_FD
),
597 SYSCALL_WITH_NOCANCEL(readv
, FMT_FD_IO
),
598 SYSCALL_WITH_NOCANCEL(writev
, FMT_FD_IO
),
599 SYSCALL_WITH_NOCANCEL(pread
, FMT_PREAD
),
600 SYSCALL_WITH_NOCANCEL(pwrite
, FMT_PREAD
),
601 NORMAL_SYSCALL(mkdir
),
602 NORMAL_SYSCALL(mkdir_extended
),
603 NORMAL_SYSCALL(mkfifo
),
604 NORMAL_SYSCALL(mkfifo_extended
),
605 NORMAL_SYSCALL(rmdir
),
606 NORMAL_SYSCALL(statfs
),
607 NORMAL_SYSCALL(statfs64
),
608 NORMAL_SYSCALL(getfsstat
),
609 NORMAL_SYSCALL(getfsstat64
),
610 SYSCALL(fstatfs
, FMT_FD
),
611 SYSCALL(fstatfs64
, FMT_FD
),
612 NORMAL_SYSCALL(pathconf
),
613 SYSCALL(fpathconf
, FMT_FD
),
614 SYSCALL(getdirentries
, FMT_FD_IO
),
615 SYSCALL(getdirentries64
, FMT_FD_IO
),
616 SYSCALL(lseek
, FMT_LSEEK
),
617 SYSCALL(truncate
, FMT_TRUNC
),
618 SYSCALL(ftruncate
, FMT_FTRUNC
),
619 SYSCALL(flock
, FMT_FLOCK
),
620 NORMAL_SYSCALL(getattrlist
),
621 NORMAL_SYSCALL(setattrlist
),
622 SYSCALL(fgetattrlist
, FMT_FD
),
623 SYSCALL(fsetattrlist
, FMT_FD
),
624 SYSCALL(getdirentriesattr
, FMT_FD
),
625 NORMAL_SYSCALL(exchangedata
),
626 NORMAL_SYSCALL(rename
),
627 NORMAL_SYSCALL(copyfile
),
628 NORMAL_SYSCALL(checkuseraccess
),
629 NORMAL_SYSCALL(searchfs
),
630 SYSCALL(aio_fsync
, FMT_AIO_FSYNC
),
631 SYSCALL(aio_return
, FMT_AIO_RETURN
),
632 SYSCALL_WITH_NOCANCEL(aio_suspend
, FMT_AIO_SUSPEND
),
633 SYSCALL(aio_cancel
, FMT_AIO_CANCEL
),
634 SYSCALL(aio_error
, FMT_AIO
),
635 SYSCALL(aio_read
, FMT_AIO
),
636 SYSCALL(aio_write
, FMT_AIO
),
637 SYSCALL(lio_listio
, FMT_LIO_LISTIO
),
638 SYSCALL_WITH_NOCANCEL(msync
, FMT_MSYNC
),
639 SYSCALL_WITH_NOCANCEL(fcntl
, FMT_FCNTL
),
640 SYSCALL(ioctl
, FMT_IOCTL
),
641 NORMAL_SYSCALL(fsgetpath
),
642 NORMAL_SYSCALL(getattrlistbulk
),
643 SYSCALL_WITH_NOCANCEL(openat
, FMT_OPENAT
), /* open_nocancel() was previously shown as "open_nocanel" (note spelling) */
644 SYSCALL(renameat
, FMT_RENAMEAT
),
645 SYSCALL(chmodat
, FMT_CHMODAT
),
646 SYSCALL(chownat
, FMT_AT
),
647 SYSCALL(fstatat
, FMT_AT
),
648 SYSCALL(fstatat64
, FMT_AT
),
649 SYSCALL(linkat
, FMT_AT
),
650 SYSCALL(unlinkat
, FMT_AT
),
651 SYSCALL(readlinkat
, FMT_AT
),
652 SYSCALL(symlinkat
, FMT_AT
),
653 SYSCALL(mkdirat
, FMT_AT
),
654 SYSCALL(getattrlistat
, FMT_AT
),
658 get_screenwidth(void)
664 if (isatty(STDOUT_FILENO
)) {
665 if (ioctl(1, TIOCGWINSZ
, &size
) != -1) {
666 columns
= size
.ws_col
;
668 if (columns
> MAXWIDTH
)
675 mach_to_nano(uint64_t mach
)
677 uint64_t nanoseconds
= 0;
678 assert(ktrace_convert_timestamp_to_nanoseconds(s
, mach
, &nanoseconds
) == 0);
688 myname
= getprogname();
690 fprintf(stderr
, "Usage: %s [-e] [-w] [-f mode] [-b] [-t seconds] [-R rawfile [-S start_time] [-E end_time]] [pid | cmd [pid | cmd] ...]\n", myname
);
691 fprintf(stderr
, " -e exclude the specified list of pids from the sample\n");
692 fprintf(stderr
, " and exclude fs_usage by default\n");
693 fprintf(stderr
, " -w force wider, detailed, output\n");
694 fprintf(stderr
, " -f output is based on the mode provided\n");
695 fprintf(stderr
, " mode = \"network\" Show network-related events\n");
696 fprintf(stderr
, " mode = \"filesys\" Show filesystem-related events\n");
697 fprintf(stderr
, " mode = \"pathname\" Show only pathname-related events\n");
698 fprintf(stderr
, " mode = \"exec\" Show only exec and spawn events\n");
699 fprintf(stderr
, " mode = \"diskio\" Show only disk I/O events\n");
700 fprintf(stderr
, " mode = \"cachehit\" In addition, show cache hits\n");
701 fprintf(stderr
, " -b annotate disk I/O events with BootCache info (if available)\n");
702 fprintf(stderr
, " -t specifies timeout in seconds (for use in automated tools)\n");
703 fprintf(stderr
, " -R specifies a raw trace file to process\n");
704 fprintf(stderr
, " -S if -R is specified, selects a start point in microseconds\n");
705 fprintf(stderr
, " -E if -R is specified, selects an end point in microseconds\n");
706 fprintf(stderr
, " pid selects process(s) to sample\n");
707 fprintf(stderr
, " cmd selects process(s) matching command string to sample\n");
708 fprintf(stderr
, "By default (no options) the following processes are excluded from the output:\n");
709 fprintf(stderr
, "fs_usage, Terminal, telnetd, sshd, rlogind, tcsh, csh, sh\n\n");
715 main(int argc
, char *argv
[])
719 bool exclude_pids
= false;
720 double time_limit
= 0.0;
724 s
= ktrace_session_create();
727 while ((ch
= getopt(argc
, argv
, "bewf:R:S:E:t:W")) != -1) {
735 columns
= MAX_WIDE_MODE_COLS
;
739 include_waited_flag
= true;
743 if (!strcmp(optarg
, "network"))
744 filter_mode
|= NETWORK_FILTER
;
745 else if (!strcmp(optarg
, "filesys"))
746 filter_mode
|= FILESYS_FILTER
;
747 else if (!strcmp(optarg
, "cachehit"))
748 show_cachehits
= true;
749 else if (!strcmp(optarg
, "exec"))
750 filter_mode
|= EXEC_FILTER
;
751 else if (!strcmp(optarg
, "pathname"))
752 filter_mode
|= PATHNAME_FILTER
;
753 else if (!strcmp(optarg
, "diskio"))
754 filter_mode
|= DISKIO_FILTER
;
763 time_limit
= atof(optarg
);
769 rv
= ktrace_set_file(s
, optarg
);
771 fprintf(stderr
, "ERROR: reading trace from '%s' failed (%s)\n", optarg
, strerror(errno
));
777 start_time_ns
= NSEC_PER_SEC
* atof(optarg
);
781 end_time_ns
= NSEC_PER_SEC
* atof(optarg
);
792 if (time_limit
> 0.0) {
794 fprintf(stderr
, "NOTE: time limit ignored when a raw file is specified\n");
796 stop_timer
= dispatch_source_create(DISPATCH_SOURCE_TYPE_TIMER
, 0, 0, dispatch_get_main_queue());
797 dispatch_source_set_timer(stop_timer
, dispatch_time(DISPATCH_TIME_NOW
, NSEC_PER_SEC
* time_limit
), DISPATCH_TIME_FOREVER
, 0);
798 dispatch_source_set_event_handler(stop_timer
, ^{
801 dispatch_resume(stop_timer
);
806 if (geteuid() != 0) {
807 fprintf(stderr
, "'fs_usage' must be run as root...\n");
812 * ktrace can't both *in*clude and *ex*clude pids, so: if we are
813 * already excluding pids, or if we are not explicitly including
814 * or excluding any pids, then exclude the defaults.
816 * if on the other hand we are explicitly including pids, we'll
817 * filter the defaults out naturally.
819 if (exclude_pids
|| argc
== 0) {
820 ktrace_exclude_process(s
, "fs_usage");
821 ktrace_exclude_process(s
, "Terminal");
822 ktrace_exclude_process(s
, "telnetd");
823 ktrace_exclude_process(s
, "telnet");
824 ktrace_exclude_process(s
, "sshd");
825 ktrace_exclude_process(s
, "rlogind");
826 ktrace_exclude_process(s
, "tcsh");
827 ktrace_exclude_process(s
, "csh");
828 ktrace_exclude_process(s
, "sh");
829 ktrace_exclude_process(s
, "zsh");
830 #if TARGET_OS_EMBEDDED
831 ktrace_exclude_process(s
, "dropbear");
832 #endif /* TARGET_OS_EMBEDDED */
837 * If we're *in*cluding processes, also *in*clude the kernel_task, which
838 * issues trace points when disk I/Os complete. But set a flag for us to
839 * avoid showing events attributed to the kernel_task.
841 * If the user actually wants to those events, we'll change that flag in
844 if (argc
> 0 && !exclude_pids
) {
845 ktrace_filter_pid(s
, 0);
846 want_kernel_task
= false;
850 * Process the list of specified pids, and in/exclude them as
859 pid
= (pid_t
)strtoul(name
, &endptr
, 10);
861 if (*name
!= '\0' && *endptr
== '\0') {
863 rv
= ktrace_exclude_pid(s
, pid
);
866 want_kernel_task
= true;
868 rv
= ktrace_filter_pid(s
, pid
);
872 rv
= ktrace_exclude_process(s
, name
);
874 if (!strcmp(name
, "kernel_task"))
875 want_kernel_task
= true;
877 rv
= ktrace_filter_process(s
, name
);
882 fprintf(stderr
, "ERROR: cannot both include and exclude simultaneously\n");
892 /* provides SIGINT, SIGHUP, SIGPIPE, SIGTERM handlers */
893 ktrace_set_signal_handler(s
);
895 ktrace_set_completion_handler(s
, ^{
899 signal(SIGWINCH
, SIG_IGN
);
900 sigwinch_source
= dispatch_source_create(DISPATCH_SOURCE_TYPE_SIGNAL
, SIGWINCH
, 0, dispatch_get_main_queue());
901 dispatch_source_set_event_handler(sigwinch_source
, ^{
905 dispatch_resume(sigwinch_source
);
907 init_shared_cache_mapping();
911 setup_ktrace_callbacks();
913 ktrace_set_dropped_events_handler(s
, ^{
914 fprintf(stderr
, "fs_usage: buffer overrun, events generated too quickly\n");
916 /* clear any state that is now potentially invalid */
923 ktrace_set_default_event_names_enabled(KTRACE_FEATURE_DISABLED
);
924 ktrace_set_execnames_enabled(s
, KTRACE_FEATURE_LAZY
);
925 ktrace_set_vnode_paths_enabled(s
, true);
927 rv
= ktrace_start(s
, dispatch_get_main_queue());
930 perror("ktrace_start");
940 setup_ktrace_callbacks(void)
942 ktrace_events_subclass(s
, DBG_MACH
, DBG_MACH_EXCP_SC
, ^(ktrace_event_t event
) {
945 type
= event
->debugid
& KDBG_EVENTID_MASK
;
947 if (type
== MSC_map_fd
) {
948 if (event
->debugid
& DBG_FUNC_START
) {
949 event_enter(type
, event
);
951 event_exit("map_fd", type
, event
, FMT_FD
);
956 ktrace_events_subclass(s
, DBG_MACH
, DBG_MACH_VM
, ^(ktrace_event_t event
) {
960 type
= event
->debugid
& KDBG_EVENTID_MASK
;
962 if (type
!= MACH_pageout
&& type
!= MACH_vmfault
)
965 if (event
->debugid
& DBG_FUNC_START
) {
966 event_enter(type
, event
);
971 event_exit("PAGE_OUT_ANON", type
, event
, FMT_PGOUT
);
973 event_exit("PAGE_OUT_FILE", type
, event
, FMT_PGOUT
);
978 if (event
->arg4
== DBG_PAGEIN_FAULT
)
979 event_exit("PAGE_IN", type
, event
, FMT_PGIN
);
980 else if (event
->arg4
== DBG_PAGEINV_FAULT
)
981 event_exit("PAGE_IN_FILE", type
, event
, FMT_PGIN
);
982 else if (event
->arg4
== DBG_PAGEIND_FAULT
)
983 event_exit("PAGE_IN_ANON", type
, event
, FMT_PGIN
);
984 else if (event
->arg4
== DBG_CACHE_HIT_FAULT
)
985 event_exit("CACHE_HIT", type
, event
, FMT_CACHEHIT
);
986 else if ((ti
= event_find(event
->threadid
, type
)))
997 if (include_waited_flag
|| RAW_flag
) {
998 ktrace_events_subclass(s
, DBG_MACH
, DBG_MACH_SCHED
, ^(ktrace_event_t event
) {
1001 type
= event
->debugid
& KDBG_EVENTID_MASK
;
1006 case MACH_stkhandoff
:
1007 event_mark_thread_waited(event
->threadid
);
1012 ktrace_events_subclass(s
, DBG_FSYSTEM
, DBG_FSRW
, ^(ktrace_event_t event
) {
1016 type
= event
->debugid
& KDBG_EVENTID_MASK
;
1019 case HFS_modify_block_end
:
1021 * the expected path here is as follows:
1023 * look up a path, which gets stored in ti->vnode / ti->pathname
1024 * modify a metadata block -- we assume the modification has something to do with the path that was looked up
1027 * later, someone writes that metadata block; the last path associated with it is attributed
1029 if ((ti
= event_find(event
->threadid
, 0))) {
1030 if (ti
->newest_pathname
)
1031 meta_add_name(event
->arg2
, ti
->newest_pathname
);
1037 if (event
->debugid
& DBG_FUNC_START
) {
1038 if ((ti
= event_find(event
->threadid
, 0)) && !ti
->vnodeid
) {
1039 ti
->vnodeid
= event
->arg1
;
1043 /* it can be both start and end */
1045 if (event
->debugid
& DBG_FUNC_END
) {
1046 if ((ti
= event_find(event
->threadid
, 0)) && ti
->vnodeid
) {
1047 const char *pathname
;
1049 pathname
= ktrace_get_path_for_vp(s
, ti
->vnodeid
);
1054 if (ti
->pathname
[0] == '\0') {
1055 strncpy(ti
->pathname
, pathname
, MAXPATHLEN
);
1056 ti
->newest_pathname
= ti
->pathname
;
1057 } else if (ti
->pathname2
[0] == '\0') {
1058 strncpy(ti
->pathname2
, pathname
, MAXPATHLEN
);
1059 ti
->newest_pathname
= ti
->pathname2
;
1068 if (type
!= Throttled
&& type
!= HFS_update
)
1071 if (event
->debugid
& DBG_FUNC_START
) {
1072 event_enter(type
, event
);
1076 event_exit(" THROTTLED", type
, event
, FMT_NOTHING
);
1080 event_exit(" HFS_update", type
, event
, FMT_HFS_update
);
1089 ktrace_events_subclass(s
, DBG_FSYSTEM
, DBG_DKRW
, ^(ktrace_event_t event
) {
1093 type
= event
->debugid
& KDBG_EVENTID_MASK
;
1095 if ((type
& P_DISKIO_MASK
) == P_DISKIO
) {
1096 diskio_start(type
, event
->arg1
, event
->arg2
, event
->arg3
, event
->arg4
, event
);
1097 } else if ((type
& P_DISKIO_MASK
) == P_DISKIO_DONE
) {
1098 if ((dio
= diskio_complete(event
->arg1
, event
->arg4
, event
->arg3
, event
->threadid
, event
->timestamp
, event
->walltime
))) {
1099 dio
->vnodeid
= event
->arg2
;
1106 ktrace_events_subclass(s
, DBG_FSYSTEM
, DBG_IOCTL
, ^(ktrace_event_t event
) {
1111 type
= event
->debugid
& KDBG_EVENTID_MASK
;
1114 case SPEC_unmap_info
:
1115 pid
= ktrace_get_pid_for_thread(s
, event
->threadid
);
1117 if (check_filter_mode(pid
, NULL
, SPEC_unmap_info
, 0, 0, "SPEC_unmap_info"))
1118 format_print(NULL
, " TrimExtent", event
, type
, FMT_UNMAP_INFO
, event
->timestamp
, event
->timestamp
, 0, "", NULL
);
1123 if (event
->debugid
& DBG_FUNC_START
) {
1124 event_enter(type
, event
);
1126 if (event
->arg2
== DKIOCSYNCHRONIZECACHE
)
1127 event_exit("IOCTL", type
, event
, FMT_IOCTL_SYNCCACHE
);
1128 else if (event
->arg2
== DKIOCUNMAP
)
1129 event_exit("IOCTL", type
, event
, FMT_IOCTL_UNMAP
);
1130 else if (event
->arg2
== DKIOCSYNCHRONIZE
&& (event
->debugid
& DBG_FUNC_ALL
) == DBG_FUNC_NONE
)
1131 event_exit("IOCTL", type
, event
, FMT_IOCTL_SYNC
);
1132 else if ((ti
= event_find(event
->threadid
, type
)))
1140 if (BC_flag
|| RAW_flag
) {
1141 ktrace_events_subclass(s
, DBG_FSYSTEM
, DBG_BOOTCACHE
, ^(ktrace_event_t event
) {
1145 type
= event
->debugid
& KDBG_EVENTID_MASK
;
1149 case BC_IO_HIT_STALLED
:
1151 case BC_IO_MISS_CUT_THROUGH
:
1152 case BC_PLAYBACK_IO
:
1153 if ((dio
= diskio_find(event
->arg1
)) != NULL
)
1154 dio
->bc_info
= type
;
1159 void (^bsd_sc_proc_cb
)(ktrace_event_t event
) = ^(ktrace_event_t event
) {
1163 type
= event
->debugid
& KDBG_EVENTID_MASK
;
1166 case BSC_exit
: /* see below */
1170 event
->arg1
= event
->arg2
>> 8;
1173 pid
= ktrace_get_pid_for_thread(s
, event
->threadid
);
1179 if (event
->arg4
& MAP_ANON
)
1185 if ((index
= BSC_INDEX(type
)) >= MAX_BSD_SYSCALL
)
1188 if (!bsd_syscalls
[index
].sc_name
)
1191 if (event
->debugid
& DBG_FUNC_START
) {
1192 event_enter(type
, event
);
1194 event_exit(bsd_syscalls
[index
].sc_name
, type
, event
, bsd_syscalls
[index
].sc_format
);
1198 ktrace_events_subclass(s
, DBG_BSD
, DBG_BSD_EXCP_SC
, bsd_sc_proc_cb
);
1199 ktrace_events_subclass(s
, DBG_BSD
, DBG_BSD_PROC
, bsd_sc_proc_cb
);
1201 ktrace_events_range(s
, KDBG_EVENTID(DBG_BSD
, DBG_BSD_SC_EXTENDED_INFO
, 0), KDBG_EVENTID(DBG_BSD
, DBG_BSD_SC_EXTENDED_INFO2
+ 1, 0), ^(ktrace_event_t event
) {
1202 extend_syscall(event
->threadid
, event
->debugid
& KDBG_EVENTID_MASK
, event
);
1205 ktrace_events_subclass(s
, DBG_CORESTORAGE
, DBG_CS_IO
, ^(ktrace_event_t event
) {
1206 // the usual DBG_FUNC_START/END does not work for i/o since it will
1207 // return on a different thread, this code uses the P_CS_IO_Done (0x4) bit
1208 // instead. the trace command doesn't know how handle either method
1209 // (unmatched start/end or 0x4) but works a little better this way.
1212 int cs_type
= event
->debugid
& P_CS_Type_Mask
; // strip out the done bit
1213 bool start
= (event
->debugid
& P_CS_IO_Done
) != P_CS_IO_Done
;
1216 case P_CS_ReadChunk
:
1217 case P_CS_WriteChunk
:
1219 case P_CS_MetaWrite
:
1221 diskio_start(cs_type
, event
->arg2
, event
->arg1
, event
->arg3
, event
->arg4
, event
);
1223 if ((dio
= diskio_complete(event
->arg2
, event
->arg4
, event
->arg3
, event
->threadid
, event
->timestamp
, event
->walltime
))) {
1230 case P_CS_TransformRead
:
1231 case P_CS_TransformWrite
:
1232 case P_CS_MigrationRead
:
1233 case P_CS_MigrationWrite
:
1235 diskio_start(cs_type
, event
->arg2
, CS_DEV
, event
->arg3
, event
->arg4
, event
);
1237 if ((dio
= diskio_complete(event
->arg2
, event
->arg4
, event
->arg3
, event
->threadid
, event
->timestamp
, event
->walltime
))) {
1247 ktrace_events_subclass(s
, DBG_CORESTORAGE
, 1 /* DBG_CS_SYNC */, ^(ktrace_event_t event
) {
1248 int cs_type
= event
->debugid
& P_CS_Type_Mask
; // strip out the done bit
1249 bool start
= (event
->debugid
& P_CS_IO_Done
) != P_CS_IO_Done
;
1251 if (cs_type
== P_CS_SYNC_DISK
) {
1253 event_enter(cs_type
, event
);
1255 event_exit(" SyncCacheCS", cs_type
, event
, FMT_SYNC_DISK_CS
);
1262 * Handle system call extended trace data.
1264 * Wipe out the kd args that were collected upon syscall_entry
1265 * because it is the extended info that we really want, and it
1266 * is all we really need.
1269 extend_syscall(uintptr_t thread
, int type
, ktrace_event_t event
)
1274 case BSC_mmap_extended
:
1275 if ((ti
= event_find(thread
, BSC_mmap
)) == NULL
)
1278 ti
->arg8
= ti
->arg3
; /* save protection */
1279 ti
->arg1
= event
->arg1
; /* the fd */
1280 ti
->arg3
= event
->arg2
; /* bottom half address */
1281 ti
->arg5
= event
->arg3
; /* bottom half size */
1284 case BSC_mmap_extended2
:
1285 if ((ti
= event_find(thread
, BSC_mmap
)) == NULL
)
1288 ti
->arg2
= event
->arg1
; /* top half address */
1289 ti
->arg4
= event
->arg2
; /* top half size */
1290 ti
->arg6
= event
->arg3
; /* top half file offset */
1291 ti
->arg7
= event
->arg4
; /* bottom half file offset */
1294 case BSC_msync_extended
:
1295 if ((ti
= event_find(thread
, BSC_msync
)) == NULL
) {
1296 if ((ti
= event_find(thread
, BSC_msync_nocancel
)) == NULL
)
1300 ti
->arg4
= event
->arg1
; /* top half address */
1301 ti
->arg5
= event
->arg2
; /* top half size */
1304 case BSC_pread_extended
:
1305 if ((ti
= event_find(thread
, BSC_pread
)) == NULL
) {
1306 if ((ti
= event_find(thread
, BSC_pread_nocancel
)) == NULL
)
1310 ti
->arg1
= event
->arg1
; /* the fd */
1311 ti
->arg2
= event
->arg2
; /* nbytes */
1312 ti
->arg3
= event
->arg3
; /* top half offset */
1313 ti
->arg4
= event
->arg4
; /* bottom half offset */
1316 case BSC_pwrite_extended
:
1317 if ((ti
= event_find(thread
, BSC_pwrite
)) == NULL
) {
1318 if ((ti
= event_find(thread
, BSC_pwrite_nocancel
)) == NULL
)
1322 ti
->arg1
= event
->arg1
; /* the fd */
1323 ti
->arg2
= event
->arg2
; /* nbytes */
1324 ti
->arg3
= event
->arg3
; /* top half offset */
1325 ti
->arg4
= event
->arg4
; /* bottom half offset */
1330 #pragma mark printing routines
1333 get_mode_nibble(char *buf
, unsigned long smode
, unsigned long special
, char x_on
, char x_off
)
1353 get_mode_string(unsigned long mode
, char *buf
)
1355 memset(buf
, '-', 9);
1358 get_mode_nibble(&buf
[6], mode
, (mode
& 01000), 't', 'T');
1359 get_mode_nibble(&buf
[3], (mode
>>3), (mode
& 02000), 's', 'S');
1360 get_mode_nibble(&buf
[0], (mode
>>6), (mode
& 04000), 's', 'S');
1364 clip_64bit(char *s
, uint64_t value
)
1368 if ( (value
& 0xff00000000000000LL
) )
1369 clen
= printf("%s0x%16.16qx", s
, value
);
1370 else if ( (value
& 0x00ff000000000000LL
) )
1371 clen
= printf("%s0x%14.14qx ", s
, value
);
1372 else if ( (value
& 0x0000ff0000000000LL
) )
1373 clen
= printf("%s0x%12.12qx ", s
, value
);
1374 else if ( (value
& 0x000000ff00000000LL
) )
1375 clen
= printf("%s0x%10.10qx ", s
, value
);
1377 clen
= printf("%s0x%8.8qx ", s
, value
);
1383 * ret = 1 means print the entry
1384 * ret = 0 means don't print the entry
1388 * meaning of filter flags:
1389 * cachehit turn on display of CACHE_HIT events (which are filtered out by default)
1391 * exec show exec/posix_spawn
1392 * pathname show events with a pathname and close()
1393 * diskio show disk I/Os
1394 * filesys show filesystem events
1395 * network show network events
1397 * filters may be combined; default is all filters on (except cachehit)
1400 check_filter_mode(pid_t pid
, th_info_t ti
, unsigned long type
, int error
, int retval
, char *sc_name
)
1403 int network_fd_isset
= 0;
1406 /* cachehit is special -- it's not on by default */
1407 if (sc_name
[0] == 'C' && !strcmp(sc_name
, "CACHE_HIT")) {
1408 return show_cachehits
;
1411 if (filter_mode
== DEFAULT_DO_NOT_FILTER
)
1414 if (filter_mode
& DISKIO_FILTER
) {
1415 if ((type
& P_DISKIO_MASK
) == P_DISKIO
)
1418 if (type
== Throttled
)
1422 if (filter_mode
& EXEC_FILTER
) {
1423 if (type
== BSC_execve
|| type
== BSC_posix_spawn
)
1427 if (filter_mode
& PATHNAME_FILTER
) {
1428 if (ti
&& ti
->pathname
[0])
1431 if (type
== BSC_close
|| type
== BSC_close_nocancel
||
1432 type
== BSC_guarded_close_np
)
1437 if (filter_mode
& FILESYS_FILTER
)
1445 case BSC_close_nocancel
:
1446 case BSC_guarded_close_np
:
1448 network_fd_isset
= fd_is_network(pid
, fd
);
1451 fd_set_is_network(pid
, fd
, false);
1453 if (network_fd_isset
) {
1454 if (filter_mode
& NETWORK_FILTER
)
1457 if (filter_mode
& FILESYS_FILTER
)
1465 case BSC_read_nocancel
:
1466 case BSC_write_nocancel
:
1468 * we don't care about error in these cases
1472 if (fd_is_network(pid
, fd
)) {
1473 if (filter_mode
& NETWORK_FILTER
)
1475 } else if (filter_mode
& FILESYS_FILTER
) {
1482 case BSC_accept_nocancel
:
1487 fd_set_is_network(pid
, fd
, true);
1489 if (filter_mode
& NETWORK_FILTER
)
1501 case BSC_sendto_nocancel
:
1502 case BSC_recvfrom_nocancel
:
1503 case BSC_recvmsg_nocancel
:
1504 case BSC_sendmsg_nocancel
:
1505 case BSC_connect_nocancel
:
1509 fd_set_is_network(pid
, fd
, true);
1511 if (filter_mode
& NETWORK_FILTER
)
1517 case BSC_select_nocancel
:
1518 case BSC_socketpair
:
1520 * Cannot determine info about file descriptors
1522 if (filter_mode
& NETWORK_FILTER
)
1530 * We track these cases for fd state only
1534 if (error
== 0 && fd_is_network(pid
, fd
)) {
1536 * then we are duping a socket descriptor
1538 fd
= retval
; /* the new fd */
1539 fd_set_is_network(pid
, fd
, true);
1545 if (filter_mode
& FILESYS_FILTER
)
1557 * exit_event() (syscalls etc.)
1558 * print_diskio() (disk I/Os)
1559 * block callback for TrimExtent
1562 format_print(th_info_t ti
, char *sc_name
, ktrace_event_t event
,
1563 unsigned long type
, int format
, uint64_t now
, uint64_t stime
,
1564 int waited
, const char *pathname
, struct diskio
*dio
)
1566 uint64_t secs
, usecs
;
1568 static time_t last_walltime_secs
= -1;
1569 const char *command_name
;
1574 unsigned long class;
1577 char *framework_name
;
1578 char *framework_type
;
1582 char cs_diskname
[32];
1583 unsigned long threadid
;
1584 struct timeval now_walltime
;
1586 static char timestamp
[32];
1587 static size_t timestamp_len
= 0;
1589 if (!mach_time_of_first_event
)
1590 mach_time_of_first_event
= now
;
1592 if (format
== FMT_DISKIO
|| format
== FMT_DISKIO_CS
) {
1597 if (format
!= FMT_UNMAP_INFO
)
1601 /* <rdar://problem/19852325> Filter out WindowServer/xcpm ioctls in fs_usage */
1602 if (type
== BSC_ioctl
&& ti
->arg2
== 0xffffffffc030581dUL
)
1605 /* honor -S and -E */
1607 uint64_t relative_time_ns
;
1609 relative_time_ns
= mach_to_nano(now
- mach_time_of_first_event
);
1611 if (relative_time_ns
< start_time_ns
|| relative_time_ns
> end_time_ns
)
1615 class = KDBG_EXTRACT_CLASS(type
);
1618 command_name
= dio
->issuing_command
;
1619 threadid
= dio
->issuing_thread
;
1620 pid
= dio
->issuing_pid
;
1621 now_walltime
= dio
->completed_walltime
;
1623 if (ti
&& ti
->command
[0] != '\0') {
1624 command_name
= ti
->command
;
1625 threadid
= ti
->thread
;
1628 command_name
= ktrace_get_execname_for_thread(s
, event
->threadid
);
1629 threadid
= event
->threadid
;
1630 pid
= ktrace_get_pid_for_thread(s
, event
->threadid
);
1633 now_walltime
= event
->walltime
;
1636 if (!want_kernel_task
&& pid
== 0)
1642 assert(now_walltime
.tv_sec
|| now_walltime
.tv_usec
);
1644 /* try and reuse the timestamp string */
1645 if (last_walltime_secs
!= now_walltime
.tv_sec
) {
1646 timestamp_len
= strftime(timestamp
, sizeof (timestamp
), "%H:%M:%S", localtime(&now_walltime
.tv_sec
));
1647 last_walltime_secs
= now_walltime
.tv_sec
;
1650 if (columns
> MAXCOLS
|| wideflag
) {
1651 tlen
= timestamp_len
;
1654 sprintf(×tamp
[tlen
], ".%06d", now_walltime
.tv_usec
);
1657 timestamp
[tlen
] = '\0';
1662 clen
= printf("%s %-17.17s", timestamp
, sc_name
);
1664 framework_name
= NULL
;
1666 if (columns
> MAXCOLS
|| wideflag
) {
1667 off_t offset_reassembled
= 0LL;
1671 clen
+= printf(" ");
1678 * pathname based system calls or
1679 * calls with no fd or pathname (i.e. sync)
1682 clen
+= printf(" [%3d] ", (int)event
->arg1
);
1684 clen
+= printf(" ");
1690 * fd based system call... no I/O
1693 clen
+= printf(" F=%-3d[%3d]", (int)ti
->arg1
, (int)event
->arg1
);
1695 clen
+= printf(" F=%-3d", (int)ti
->arg1
);
1704 clen
+= printf(" F=%-3d[%3d]", (int)ti
->arg1
, (int)event
->arg1
);
1706 clen
+= printf(" F=%-3d F=%-3d", (int)ti
->arg1
, (int)event
->arg2
);
1712 * system calls with fd's that return an I/O completion count
1715 clen
+= printf(" F=%-3d[%3d]", (int)ti
->arg1
, (int)event
->arg1
);
1717 clen
+= printf(" F=%-3d B=0x%-6lx", (int)ti
->arg1
, event
->arg2
);
1725 user_addr
= ((uint64_t)event
->arg1
<< 32) | (uint32_t)event
->arg2
;
1727 lookup_name(user_addr
, &framework_type
, &framework_name
);
1728 clen
+= clip_64bit(" A=", user_addr
);
1735 user_addr
= ((uint64_t)event
->arg1
<< 32) | (uint32_t)event
->arg2
;
1737 lookup_name(user_addr
, &framework_type
, &framework_name
);
1738 clen
+= clip_64bit(" A=", user_addr
);
1745 clen
+= printf(" B=0x%-8lx", event
->arg1
);
1748 case FMT_HFS_update
:
1750 static const struct {
1754 { DBG_HFS_UPDATE_SKIPPED
, 'S' },
1755 { DBG_HFS_UPDATE_FORCE
, 'F' },
1756 { DBG_HFS_UPDATE_MODIFIED
, 'M' },
1757 { DBG_HFS_UPDATE_MINOR
, 'N' },
1758 { DBG_HFS_UPDATE_DATEADDED
, 'd' },
1759 { DBG_HFS_UPDATE_CHGTIME
, 'c' },
1760 { DBG_HFS_UPDATE_ACCTIME
, 'a' },
1761 { DBG_HFS_UPDATE_MODTIME
, 'm' },
1766 int sflag
= (int)event
->arg2
;
1768 flagcount
= sizeof (hfsflags
) / sizeof (*hfsflags
);
1769 sbuf
= malloc(flagcount
+ 1);
1771 for (i
= 0; i
< flagcount
; i
++) {
1772 if (sflag
& hfsflags
[i
].flag
) {
1773 sbuf
[i
] = hfsflags
[i
].ch
;
1779 sbuf
[flagcount
] = '\0';
1781 clen
+= printf(" %*s(%s) ", 17 - flagcount
, "", sbuf
);
1785 pathname
= ktrace_get_path_for_vp(s
, event
->arg1
);
1799 if (dio
->io_errno
) {
1800 clen
+= printf(" D=0x%8.8lx [%3d]", dio
->blkno
, (int)dio
->io_errno
);
1803 clen
+= printf(" D=0x%8.8lx B=0x%-6lx BC:%s /dev/%s ", dio
->blkno
, dio
->iosize
, BC_STR(dio
->bc_info
), find_disk_name(dio
->dev
));
1805 clen
+= printf(" D=0x%8.8lx B=0x%-6lx /dev/%s ", dio
->blkno
, dio
->iosize
, find_disk_name(dio
->dev
));
1808 if (!(type
& P_DISKIO_READ
)) {
1809 pathname
= meta_find_name(dio
->blkno
);
1812 pathname
= ktrace_get_path_for_vp(s
, dio
->vnodeid
);
1828 clen
+= printf(" D=0x%8.8lx [%3lu]", dio
->blkno
, dio
->io_errno
);
1830 clen
+= printf(" D=0x%8.8lx B=0x%-6lx /dev/%s", dio
->blkno
, dio
->iosize
, generate_cs_disk_name(dio
->dev
, cs_diskname
));
1834 case FMT_SYNC_DISK_CS
:
1836 * physical disk sync cache
1838 clen
+= printf(" /dev/%s", generate_cs_disk_name(event
->arg1
, cs_diskname
));
1851 if (ti
->arg3
& MS_ASYNC
)
1852 mlen
+= sprintf(&buf
[mlen
], "MS_ASYNC | ");
1854 mlen
+= sprintf(&buf
[mlen
], "MS_SYNC | ");
1856 if (ti
->arg3
& MS_INVALIDATE
)
1857 mlen
+= sprintf(&buf
[mlen
], "MS_INVALIDATE | ");
1858 if (ti
->arg3
& MS_KILLPAGES
)
1859 mlen
+= sprintf(&buf
[mlen
], "MS_KILLPAGES | ");
1860 if (ti
->arg3
& MS_DEACTIVATE
)
1861 mlen
+= sprintf(&buf
[mlen
], "MS_DEACTIVATE | ");
1863 if (ti
->arg3
& ~(MS_ASYNC
| MS_SYNC
| MS_INVALIDATE
| MS_KILLPAGES
| MS_DEACTIVATE
))
1864 mlen
+= sprintf(&buf
[mlen
], "UNKNOWN | ");
1867 buf
[mlen
- 3] = '\0';
1870 clen
+= printf(" [%3d]", (int)event
->arg1
);
1872 user_addr
= (((off_t
)(unsigned int)(ti
->arg4
)) << 32) | (unsigned int)(ti
->arg1
);
1873 clen
+= clip_64bit(" A=", user_addr
);
1875 user_size
= (((off_t
)(unsigned int)(ti
->arg5
)) << 32) | (unsigned int)(ti
->arg2
);
1877 clen
+= printf(" B=0x%-16qx <%s>", user_size
, buf
);
1891 if (ti
->arg2
& LOCK_SH
)
1892 mlen
+= sprintf(&buf
[mlen
], "LOCK_SH | ");
1893 if (ti
->arg2
& LOCK_EX
)
1894 mlen
+= sprintf(&buf
[mlen
], "LOCK_EX | ");
1895 if (ti
->arg2
& LOCK_NB
)
1896 mlen
+= sprintf(&buf
[mlen
], "LOCK_NB | ");
1897 if (ti
->arg2
& LOCK_UN
)
1898 mlen
+= sprintf(&buf
[mlen
], "LOCK_UN | ");
1900 if (ti
->arg2
& ~(LOCK_SH
| LOCK_EX
| LOCK_NB
| LOCK_UN
))
1901 mlen
+= sprintf(&buf
[mlen
], "UNKNOWN | ");
1904 buf
[mlen
- 3] = '\0';
1907 clen
+= printf(" F=%-3d[%3d] <%s>", (int)ti
->arg1
, (int)event
->arg1
, buf
);
1909 clen
+= printf(" F=%-3d <%s>", (int)ti
->arg1
, buf
);
1923 clen
+= printf(" F=%-3d[%3d]", (int)ti
->arg1
, (int)event
->arg1
);
1925 clen
+= printf(" F=%-3d", (int)ti
->arg1
);
1988 case F_PATHPKG_CHECK
:
1989 p
= "PATHPKG_CHECK";
1995 if (event
->arg1
== 0)
1996 fd
= (int)event
->arg2
;
2003 case F_CHECK_OPENEVT
:
2004 p
= "CHECK_OPENEVT";
2014 case F_GLOBAL_NOCACHE
:
2016 p
= "CACHING OFF (GLOBAL)";
2018 p
= "CACHING ON (GLOBAL)";
2025 clen
+= printf(" <%s>", p
);
2027 clen
+= printf(" <%s> F=%d", p
, fd
);
2029 clen
+= printf(" <CMD=%d>", (int)ti
->arg2
);
2041 clen
+= printf(" F=%-3d[%3d]", (int)ti
->arg1
, (int)event
->arg1
);
2043 clen
+= printf(" F=%-3d", (int)ti
->arg1
);
2045 clen
+= printf(" <CMD=0x%x>", (int)ti
->arg2
);
2050 case FMT_IOCTL_SYNC
:
2055 clen
+= printf(" <DKIOCSYNCHRONIZE> B=%lu /dev/%s", event
->arg3
, find_disk_name(event
->arg1
));
2060 case FMT_IOCTL_SYNCCACHE
:
2065 clen
+= printf(" <DKIOCSYNCHRONIZECACHE> /dev/%s", find_disk_name(event
->arg1
));
2070 case FMT_IOCTL_UNMAP
:
2075 clen
+= printf(" <DKIOCUNMAP> /dev/%s", find_disk_name(event
->arg1
));
2080 case FMT_UNMAP_INFO
:
2082 clen
+= printf(" D=0x%8.8lx B=0x%-6lx /dev/%s", event
->arg2
, event
->arg3
, find_disk_name(event
->arg1
));
2092 clen
+= printf(" [%3d]", (int)event
->arg1
);
2094 clen
+= printf(" S=%-3d", (int)event
->arg2
);
2101 * pread, pwrite, lseek
2103 clen
+= printf(" F=%-3d", (int)ti
->arg1
);
2106 clen
+= printf("[%3d] ", (int)event
->arg1
);
2108 if (format
== FMT_PREAD
)
2109 clen
+= printf(" B=0x%-8lx ", event
->arg2
);
2111 clen
+= printf(" ");
2114 if (format
== FMT_PREAD
)
2115 offset_reassembled
= (((off_t
)(unsigned int)(ti
->arg3
)) << 32) | (unsigned int)(ti
->arg4
);
2118 offset_reassembled
= (((off_t
)(unsigned int)(arg2
)) << 32) | (unsigned int)(arg3
);
2120 offset_reassembled
= (((off_t
)(unsigned int)(event
->arg3
)) << 32) | (unsigned int)(event
->arg2
);
2123 clen
+= clip_64bit("O=", offset_reassembled
);
2125 if (format
== FMT_LSEEK
) {
2128 if (ti
->arg3
== SEEK_SET
)
2130 else if (ti
->arg3
== SEEK_CUR
)
2132 else if (ti
->arg3
== SEEK_END
)
2137 clen
+= printf(" <%s>", mode
);
2146 clen
+= printf(" F=%-3d ", (int)ti
->arg1
);
2149 clen
+= printf("[%3d] ", (int)event
->arg1
);
2151 user_addr
= (((off_t
)(unsigned int)(ti
->arg2
)) << 32) | (unsigned int)(ti
->arg3
);
2153 clen
+= clip_64bit("A=", user_addr
);
2155 offset_reassembled
= (((off_t
)(unsigned int)(ti
->arg6
)) << 32) | (unsigned int)(ti
->arg7
);
2157 clen
+= clip_64bit("O=", offset_reassembled
);
2159 user_size
= (((off_t
)(unsigned int)(ti
->arg4
)) << 32) | (unsigned int)(ti
->arg5
);
2161 clen
+= printf("B=0x%-16qx", user_size
);
2163 clen
+= printf(" <");
2165 if (ti
->arg8
& PROT_READ
)
2166 clen
+= printf("READ");
2168 if (ti
->arg8
& PROT_WRITE
)
2169 clen
+= printf("|WRITE");
2171 if (ti
->arg8
& PROT_EXEC
)
2172 clen
+= printf("|EXEC");
2174 clen
+= printf(">");
2182 * ftruncate, truncate
2184 if (format
== FMT_FTRUNC
)
2185 clen
+= printf(" F=%-3d", (int)ti
->arg1
);
2187 clen
+= printf(" ");
2190 clen
+= printf("[%3d]", (int)event
->arg1
);
2193 offset_reassembled
= (((off_t
)(unsigned int)(ti
->arg2
)) << 32) | (unsigned int)(ti
->arg3
);
2195 offset_reassembled
= (((off_t
)(unsigned int)(ti
->arg3
)) << 32) | (unsigned int)(ti
->arg2
);
2197 clen
+= clip_64bit(" O=", offset_reassembled
);
2210 if (format
== FMT_FCHFLAGS
) {
2212 clen
+= printf(" F=%-3d[%3d]", (int)ti
->arg1
, (int)event
->arg1
);
2214 clen
+= printf(" F=%-3d", (int)ti
->arg1
);
2217 clen
+= printf(" [%3d] ", (int)event
->arg1
);
2223 if (ti
->arg2
& UF_NODUMP
)
2224 mlen
+= sprintf(&buf
[mlen
], "UF_NODUMP | ");
2225 if (ti
->arg2
& UF_IMMUTABLE
)
2226 mlen
+= sprintf(&buf
[mlen
], "UF_IMMUTABLE | ");
2227 if (ti
->arg2
& UF_APPEND
)
2228 mlen
+= sprintf(&buf
[mlen
], "UF_APPEND | ");
2229 if (ti
->arg2
& UF_OPAQUE
)
2230 mlen
+= sprintf(&buf
[mlen
], "UF_OPAQUE | ");
2231 if (ti
->arg2
& SF_ARCHIVED
)
2232 mlen
+= sprintf(&buf
[mlen
], "SF_ARCHIVED | ");
2233 if (ti
->arg2
& SF_IMMUTABLE
)
2234 mlen
+= sprintf(&buf
[mlen
], "SF_IMMUTABLE | ");
2235 if (ti
->arg2
& SF_APPEND
)
2236 mlen
+= sprintf(&buf
[mlen
], "SF_APPEND | ");
2239 mlen
+= sprintf(&buf
[mlen
], "CLEAR_ALL_FLAGS | ");
2240 else if (ti
->arg2
& ~(UF_NODUMP
| UF_IMMUTABLE
| UF_APPEND
| SF_ARCHIVED
| SF_IMMUTABLE
| SF_APPEND
))
2241 mlen
+= sprintf(&buf
[mlen
], "UNKNOWN | ");
2250 memset(&buf
[mlen
], ' ', 19 - mlen
);
2255 clen
+= printf("%s", buf
);
2263 case FMT_FCHMOD_EXT
:
2269 * fchmod, fchmod_extended, chmod, chmod_extended
2273 if (format
== FMT_FCHMOD
|| format
== FMT_FCHMOD_EXT
) {
2275 clen
+= printf(" F=%-3d[%3d] ", (int)ti
->arg1
, (int)event
->arg1
);
2277 clen
+= printf(" F=%-3d ", (int)ti
->arg1
);
2280 clen
+= printf(" [%3d] ", (int)event
->arg1
);
2282 clen
+= printf(" ");
2285 if (format
== FMT_UMASK
)
2287 else if (format
== FMT_FCHMOD
|| format
== FMT_CHMOD
|| format
== FMT_CHMODAT
)
2292 get_mode_string(mode
, &buf
[0]);
2294 if (event
->arg1
== 0)
2295 clen
+= printf("<%s> ", buf
);
2297 clen
+= printf("<%s>", buf
);
2308 memset(mode
, '_', 4);
2311 if (ti
->arg2
& R_OK
)
2313 if (ti
->arg2
& W_OK
)
2315 if (ti
->arg2
& X_OK
)
2317 if (ti
->arg2
== F_OK
)
2321 clen
+= printf(" [%3d] (%s) ", (int)event
->arg1
, mode
);
2323 clen
+= printf(" (%s) ", mode
);
2332 clen
+= printf(" [%3d] <FLGS=0x%lx> ", (int)event
->arg1
, ti
->arg3
);
2334 clen
+= printf(" <FLGS=0x%lx> ", ti
->arg3
);
2344 if (ti
->arg2
& MNT_FORCE
)
2345 mountflag
= "<FORCE>";
2350 clen
+= printf(" [%3d] %s ", (int)event
->arg1
, mountflag
);
2352 clen
+= printf(" %s ", mountflag
);
2366 memset(mode
, '_', 6);
2369 if (ti
->arg2
& O_RDWR
) {
2372 } else if (ti
->arg2
& O_WRONLY
) {
2378 if (ti
->arg2
& O_CREAT
)
2381 if (ti
->arg2
& O_APPEND
)
2384 if (ti
->arg2
& O_TRUNC
)
2387 if (ti
->arg2
& O_EXCL
)
2391 clen
+= printf(" [%3d] (%s) ", (int)event
->arg1
, mode
);
2393 clen
+= printf(" F=%-3d (%s) ", (int)event
->arg2
, mode
);
2426 domain
= "AF_IMPLINK";
2436 type
= "SOCK_STREAM";
2439 type
= "SOCK_DGRAM";
2450 clen
+= printf(" [%3d] <%s, %s, 0x%lx>", (int)event
->arg1
, domain
, type
, ti
->arg3
);
2452 clen
+= printf(" F=%-3d <%s, %s, 0x%lx>", (int)event
->arg2
, domain
, type
, ti
->arg3
);
2460 * aio_fsync [errno] AIOCBP OP
2464 if (ti
->arg1
== O_SYNC
|| ti
->arg1
== 0)
2467 else if (ti
->arg1
== O_DSYNC
)
2474 clen
+= printf(" [%3d] P=0x%8.8lx <%s>", (int)event
->arg1
, ti
->arg2
, op
);
2476 clen
+= printf(" P=0x%8.8lx <%s>", ti
->arg2
, op
);
2481 case FMT_AIO_RETURN
:
2483 * aio_return [errno] AIOCBP IOSIZE
2486 clen
+= printf(" [%3d] P=0x%8.8lx", (int)event
->arg1
, ti
->arg1
);
2488 clen
+= printf(" P=0x%8.8lx B=0x%-8lx", ti
->arg1
, event
->arg2
);
2492 case FMT_AIO_SUSPEND
:
2494 * aio_suspend [errno] NENTS
2497 clen
+= printf(" [%3d] N=%d", (int)event
->arg1
, (int)ti
->arg2
);
2499 clen
+= printf(" N=%d", (int)ti
->arg2
);
2503 case FMT_AIO_CANCEL
:
2505 * aio_cancel [errno] FD or AIOCBP (if non-null)
2509 clen
+= printf(" [%3d] P=0x%8.8lx", (int)event
->arg1
, ti
->arg2
);
2511 clen
+= printf(" P=0x%8.8lx", ti
->arg2
);
2514 clen
+= printf(" F=%-3d[%3d]", (int)ti
->arg1
, (int)event
->arg1
);
2516 clen
+= printf(" F=%-3d", (int)ti
->arg1
);
2523 * aio_error, aio_read, aio_write [errno] AIOCBP
2526 clen
+= printf(" [%3d] P=0x%8.8lx", (int)event
->arg1
, ti
->arg1
);
2528 clen
+= printf(" P=0x%8.8lx", ti
->arg1
);
2532 case FMT_LIO_LISTIO
: {
2534 * lio_listio [errno] NENTS MODE
2538 if (ti
->arg1
== LIO_NOWAIT
)
2540 else if (ti
->arg1
== LIO_WAIT
)
2546 clen
+= printf(" [%3d] N=%d <%s>", (int)event
->arg1
, (int)ti
->arg3
, op
);
2548 clen
+= printf(" N=%d <%s>", (int)ti
->arg3
, op
);
2556 * Calculate space available to print pathname
2558 if (columns
> MAXCOLS
|| wideflag
)
2559 clen
= columns
- (clen
+ 14 + 20 + 11);
2561 clen
= columns
- (clen
+ 14 + 12);
2566 if (framework_name
) {
2567 len
= sprintf(&buf
[0], " %s %s ", framework_type
, framework_name
);
2568 } else if (*pathname
!= '\0') {
2573 len
= sprintf(&buf
[0], " [%d]/%s ", (int)ti
->arg1
, pathname
);
2576 len
= sprintf(&buf
[0], " [%d]/%s ", (int)ti
->arg3
, pathname
);
2579 len
= sprintf(&buf
[0], " %s ", pathname
);
2582 if (format
== FMT_MOUNT
&& ti
->pathname2
[0] != '\0') {
2585 memset(&buf
[len
], ' ', 2);
2587 len2
= sprintf(&buf
[len
+2], " %s ", ti
->pathname2
);
2588 len
= len
+ 2 + len2
;
2596 * Add null padding if column length
2597 * is wider than the pathname length.
2599 memset(&buf
[len
], ' ', clen
- len
);
2603 } else if (clen
== len
) {
2605 } else if ((clen
> 0) && (clen
< len
)) {
2607 * This prints the tail end of the pathname
2609 buf
[len
-clen
] = ' ';
2611 pathname
= &buf
[len
- clen
];
2617 * fudge some additional system call overhead
2618 * that currently isn't tracked... this also
2619 * insures that we see a minimum of 1 us for
2622 usecs
= (mach_to_nano(now
- stime
) + (NSEC_PER_USEC
- 1)) / NSEC_PER_USEC
;
2623 secs
= usecs
/ USEC_PER_SEC
;
2624 usecs
-= secs
* USEC_PER_SEC
;
2636 if (columns
> MAXCOLS
|| wideflag
)
2637 printf("%s%s %3llu.%06llu%s %s.%lu\n", p1
, pathname
, secs
, usecs
, p2
, command_name
, threadid
);
2639 printf("%s%s %3llu.%06llu%s %-12.12s\n", p1
, pathname
, secs
, usecs
, p2
, command_name
);
2645 #pragma mark metadata info hash routines
2647 #define VN_HASH_SIZE 16384
2648 #define VN_HASH_MASK (VN_HASH_SIZE - 1)
2650 typedef struct meta_info
{
2651 struct meta_info
*m_next
;
2653 char m_name
[MAXPATHLEN
];
2656 meta_info_t m_info_hash
[VN_HASH_SIZE
];
2659 meta_add_name(uint64_t blockno
, const char *pathname
)
2664 hashid
= blockno
& VN_HASH_MASK
;
2666 for (mi
= m_info_hash
[hashid
]; mi
; mi
= mi
->m_next
) {
2667 if (mi
->m_blkno
== blockno
)
2672 mi
= malloc(sizeof (struct meta_info
));
2674 mi
->m_next
= m_info_hash
[hashid
];
2675 m_info_hash
[hashid
] = mi
;
2676 mi
->m_blkno
= blockno
;
2679 strncpy(mi
->m_name
, pathname
, sizeof (mi
->m_name
));
2683 meta_find_name(uint64_t blockno
)
2688 hashid
= blockno
& VN_HASH_MASK
;
2690 for (mi
= m_info_hash
[hashid
]; mi
; mi
= mi
->m_next
) {
2691 if (mi
->m_blkno
== blockno
)
2699 meta_delete_all(void)
2701 meta_info_t mi
, next
;
2704 for (i
= 0; i
< HASH_MASK
; i
++) {
2705 for (mi
= m_info_hash
[i
]; mi
; mi
= next
) {
2711 m_info_hash
[i
] = NULL
;
2715 #pragma mark event ("thread info") routines
2717 th_info_t th_info_hash
[HASH_SIZE
];
2718 th_info_t th_info_freelist
;
2721 add_event(ktrace_event_t event
, int type
)
2725 unsigned long eventid
;
2727 if ((ti
= th_info_freelist
))
2728 th_info_freelist
= ti
->next
;
2730 ti
= malloc(sizeof (struct th_info
));
2732 bzero(ti
, sizeof (struct th_info
));
2734 hashid
= event
->threadid
& HASH_MASK
;
2736 ti
->next
= th_info_hash
[hashid
];
2737 th_info_hash
[hashid
] = ti
;
2739 eventid
= event
->debugid
& KDBG_EVENTID_MASK
;
2741 if (eventid
== BSC_execve
|| eventid
== BSC_posix_spawn
) {
2742 const char *command
;
2744 command
= ktrace_get_execname_for_thread(s
, event
->threadid
);
2749 strncpy(ti
->command
, command
, sizeof (ti
->command
));
2750 ti
->command
[MAXCOMLEN
] = '\0';
2753 ti
->thread
= event
->threadid
;
2760 event_find(uintptr_t thread
, int type
)
2765 hashid
= thread
& HASH_MASK
;
2767 for (ti
= th_info_hash
[hashid
]; ti
; ti
= ti
->next
) {
2768 if (ti
->thread
== thread
) {
2769 if (type
== ti
->type
)
2781 event_delete(th_info_t ti_to_delete
)
2787 hashid
= ti_to_delete
->thread
& HASH_MASK
;
2789 if ((ti
= th_info_hash
[hashid
])) {
2790 if (ti
== ti_to_delete
)
2791 th_info_hash
[hashid
] = ti
->next
;
2795 for (ti
= ti
->next
; ti
; ti
= ti
->next
) {
2796 if (ti
== ti_to_delete
) {
2797 ti_prev
->next
= ti
->next
;
2804 ti
->next
= th_info_freelist
;
2805 th_info_freelist
= ti
;
2811 event_delete_all(void)
2814 th_info_t ti_next
= 0;
2817 for (i
= 0; i
< HASH_SIZE
; i
++) {
2819 for (ti
= th_info_hash
[i
]; ti
; ti
= ti_next
) {
2821 ti
->next
= th_info_freelist
;
2822 th_info_freelist
= ti
;
2824 th_info_hash
[i
] = 0;
2829 event_enter(int type
, ktrace_event_t event
)
2840 case P_CS_SYNC_DISK
:
2850 if ((type
& CSC_MASK
) == BSC_BASE
) {
2851 if ((index
= BSC_INDEX(type
)) < MAX_BSD_SYSCALL
&& bsd_syscalls
[index
].sc_name
)
2858 if ((ti
= add_event(event
, type
)) == NULL
)
2861 ti
->stime
= event
->timestamp
;
2862 ti
->arg1
= event
->arg1
;
2863 ti
->arg2
= event
->arg2
;
2864 ti
->arg3
= event
->arg3
;
2865 ti
->arg4
= event
->arg4
;
2869 event_exit(char *sc_name
, int type
, ktrace_event_t event
, int format
)
2874 if ((ti
= event_find(event
->threadid
, type
)) == NULL
)
2877 pid
= ktrace_get_pid_for_thread(s
, event
->threadid
);
2879 if (check_filter_mode(pid
, ti
, type
, (int)event
->arg1
, (int)event
->arg2
, sc_name
)) {
2880 const char *pathname
;
2884 /* most things are just interested in the first lookup */
2885 if (ti
->pathname
[0] != '\0')
2886 pathname
= ti
->pathname
;
2891 format_print(ti
, sc_name
, event
, type
, format
, event
->timestamp
, ti
->stime
, ti
->waited
, pathname
, NULL
);
2898 event_mark_thread_waited(uintptr_t thread
)
2903 hashid
= thread
& HASH_MASK
;
2905 for (ti
= th_info_hash
[hashid
]; ti
; ti
= ti
->next
) {
2906 if (ti
->thread
== thread
)
2911 #pragma mark network fd set routines
2914 struct pid_fd_set
*next
;
2917 size_t setsize
; /* number of *bytes*, not bits */
2920 struct pid_fd_set
*pfs_hash
[HASH_SIZE
];
2922 static struct pid_fd_set
*
2925 struct pid_fd_set
*pfs
;
2930 hashid
= pid
& HASH_MASK
;
2932 for (pfs
= pfs_hash
[hashid
]; pfs
; pfs
= pfs
->next
) {
2933 if (pfs
->pid
== pid
) {
2938 pfs
= calloc(1, sizeof (struct pid_fd_set
));
2943 pfs
->next
= pfs_hash
[hashid
];
2944 pfs_hash
[hashid
] = pfs
;
2950 fd_clear_pid(pid_t pid
)
2952 struct pid_fd_set
*pfs
, *prev
;
2958 hashid
= pid
& HASH_MASK
;
2960 pfs
= pfs_hash
[hashid
];
2964 if (pfs
->pid
== pid
) {
2966 prev
->next
= pfs
->next
;
2968 pfs_hash
[hashid
] = pfs
->next
;
2985 struct pid_fd_set
*pfs
, *next
;
2988 for (i
= 0; i
< HASH_SIZE
; i
++) {
2989 for (pfs
= pfs_hash
[i
]; pfs
; pfs
= next
) {
3001 fd_set_is_network(pid_t pid
, unsigned long fd
, bool set
)
3003 struct pid_fd_set
*pfs
;
3012 if (fd
>= pfs
->setsize
* CHAR_BIT
) {
3017 newsize
= MAX((fd
+ CHAR_BIT
) / CHAR_BIT
, 2 * pfs
->setsize
);
3018 pfs
->set
= reallocf(pfs
->set
, newsize
);
3019 assert(pfs
->set
!= NULL
);
3021 bzero(pfs
->set
+ pfs
->setsize
, newsize
- pfs
->setsize
);
3022 pfs
->setsize
= newsize
;
3026 setbit(pfs
->set
, fd
);
3028 clrbit(pfs
->set
, fd
);
3032 fd_is_network(pid_t pid
, unsigned long fd
)
3034 struct pid_fd_set
*pfs
;
3041 if (fd
>= pfs
->setsize
* CHAR_BIT
) {
3045 return isset(pfs
->set
, fd
);
3048 #pragma mark shared region address lookup routines
3050 #define MAXINDEX 2048
3052 struct library_range
{
3057 struct library_info
{
3064 struct library_range framework32
= {0, 0};
3065 struct library_range framework64
= {0, 0};
3066 struct library_range framework64h
= {0, 0};
3068 struct library_info library_infos
[MAXINDEX
];
3069 int num_libraries
= 0;
3077 #define LINKEDIT_R 6
3080 sort_library_addresses(void)
3082 library_infos
[num_libraries
].b_address
= library_infos
[num_libraries
- 1].b_address
+ 0x800000;
3083 library_infos
[num_libraries
].e_address
= library_infos
[num_libraries
].b_address
;
3084 library_infos
[num_libraries
].name
= NULL
;
3086 qsort_b(library_infos
, num_libraries
, sizeof (struct library_info
), ^int(const void *aa
, const void *bb
) {
3087 struct library_info
*a
= (struct library_info
*)aa
;
3088 struct library_info
*b
= (struct library_info
*)bb
;
3090 if (a
->b_address
< b
->b_address
) return -1;
3091 if (a
->b_address
== b
->b_address
) return 0;
3097 scanline(char *inputstring
, char **argv
, int maxtokens
)
3100 char **ap
= argv
, *p
, *val
;
3102 for (p
= inputstring
; n
< maxtokens
&& p
!= NULL
; ) {
3103 while ((val
= strsep(&p
, " \t")) != NULL
&& *val
== '\0') ;
3115 read_shared_cache_map(const char *path
, struct library_range
*lr
, char *linkedit_name
)
3117 uint64_t b_address
, e_address
;
3119 char *fnp
, *fn_tofree
;
3121 char frameworkName
[256];
3125 int linkedit_found
= 0;
3126 char *substring
, *ptr
;
3128 bzero(buf
, sizeof(buf
));
3129 bzero(tokens
, sizeof(tokens
));
3134 if ((fd
= fopen(path
, "r")) == 0)
3137 while (fgets(buf
, 1023, fd
)) {
3138 if (strncmp(buf
, "mapping", 7))
3142 buf
[strlen(buf
)-1] = 0;
3144 frameworkName
[0] = 0;
3148 * Extract lib name from path name
3150 if ((substring
= strrchr(buf
, '.'))) {
3152 * There is a ".": name is whatever is between the "/" around the "."
3154 while ( *substring
!= '/') /* find "/" before "." */
3159 strncpy(frameworkName
, substring
, 256); /* copy path from "/" */
3160 frameworkName
[255] = 0;
3161 substring
= frameworkName
;
3163 while ( *substring
!= '/' && *substring
) /* find "/" after "." and stop string there */
3169 * No ".": take segment after last "/"
3176 substring
= ptr
+ 1;
3180 strncpy(frameworkName
, substring
, 256);
3181 frameworkName
[255] = 0;
3184 fnp
= malloc(strlen(frameworkName
) + 1);
3186 strcpy(fnp
, frameworkName
);
3188 while (fgets(buf
, 1023, fd
) && num_libraries
< (MAXINDEX
- 2)) {
3192 buf
[strlen(buf
)-1] = 0;
3194 ntokens
= scanline(buf
, tokens
, 64);
3199 if (strncmp(tokens
[0], "__TEXT", 6) == 0)
3201 else if (strncmp(tokens
[0], "__DATA", 6) == 0)
3203 else if (strncmp(tokens
[0], "__OBJC", 6) == 0)
3205 else if (strncmp(tokens
[0], "__IMPORT", 8) == 0)
3207 else if (strncmp(tokens
[0], "__UNICODE", 9) == 0)
3209 else if (strncmp(tokens
[0], "__IMAGE", 7) == 0)
3211 else if (strncmp(tokens
[0], "__LINKEDIT", 10) == 0)
3216 if (type
== LINKEDIT_R
&& linkedit_found
)
3220 b_address
= strtoull(tokens
[1], 0, 16);
3221 e_address
= strtoull(tokens
[3], 0, 16);
3223 library_infos
[num_libraries
].b_address
= b_address
;
3224 library_infos
[num_libraries
].e_address
= e_address
;
3225 library_infos
[num_libraries
].r_type
= type
;
3227 if (type
== LINKEDIT_R
) {
3228 library_infos
[num_libraries
].name
= linkedit_name
;
3231 library_infos
[num_libraries
].name
= fnp
;
3235 printf("%s(%d): %qx-%qx\n", frameworkInfo
[numFrameworks
].name
, type
, b_address
, e_address
);
3237 if (lr
->b_address
== 0 || b_address
< lr
->b_address
)
3238 lr
->b_address
= b_address
;
3240 if (lr
->e_address
== 0 || e_address
> lr
->e_address
)
3241 lr
->e_address
= e_address
;
3246 if (type
== LINKEDIT_R
)
3252 if (fgets(buf
, 1023, fd
) == 0)
3255 buf
[strlen(buf
)-1] = 0;
3261 printf("%s range, %qx-%qx\n", path
, lr
->b_address
, lr
->e_address
);
3267 init_shared_cache_mapping(void)
3269 read_shared_cache_map("/var/db/dyld/dyld_shared_cache_i386.map", &framework32
, "/var/db/dyld/dyld_shared_cache_i386");
3271 if (0 == read_shared_cache_map("/var/db/dyld/dyld_shared_cache_x86_64h.map", &framework64h
, "/var/db/dyld/dyld_shared_cache_x86_64h")) {
3272 read_shared_cache_map("/var/db/dyld/dyld_shared_cache_x86_64.map", &framework64
, "/var/db/dyld/dyld_shared_cache_x86_64");
3275 sort_library_addresses();
3279 lookup_name(uint64_t user_addr
, char **type
, char **name
)
3284 static char *frameworkType
[] = {
3297 if (num_libraries
) {
3298 if ((user_addr
>= framework32
.b_address
&& user_addr
< framework32
.e_address
) ||
3299 (user_addr
>= framework64
.b_address
&& user_addr
< framework64
.e_address
) ||
3300 (user_addr
>= framework64h
.b_address
&& user_addr
< framework64h
.e_address
)) {
3303 last
= num_libraries
;
3305 for (i
= num_libraries
/ 2; start
< last
; i
= start
+ ((last
- start
) / 2)) {
3306 if (user_addr
> library_infos
[i
].e_address
)
3312 if (start
< num_libraries
&&
3313 user_addr
>= library_infos
[start
].b_address
&& user_addr
< library_infos
[start
].e_address
) {
3314 *type
= frameworkType
[library_infos
[start
].r_type
];
3315 *name
= library_infos
[start
].name
;
3321 #pragma mark disk I/O tracking routines
3323 struct diskio
*free_diskios
= NULL
;
3324 struct diskio
*busy_diskios
= NULL
;
3327 diskio_start(unsigned long type
, unsigned long bp
, unsigned long dev
,
3328 unsigned long blkno
, unsigned long iosize
, ktrace_event_t event
)
3330 const char *command
;
3333 if ((dio
= free_diskios
)) {
3334 free_diskios
= dio
->next
;
3336 dio
= malloc(sizeof (struct diskio
));
3345 dio
->iosize
= iosize
;
3346 dio
->issued_time
= event
->timestamp
;
3347 dio
->issuing_thread
= event
->threadid
;
3348 dio
->issuing_pid
= ktrace_get_pid_for_thread(s
, event
->threadid
);
3352 command
= ktrace_get_execname_for_thread(s
, event
->threadid
);
3357 strncpy(dio
->issuing_command
, command
, MAXCOMLEN
);
3358 dio
->issuing_command
[MAXCOMLEN
] = '\0';
3360 dio
->next
= busy_diskios
;
3363 dio
->next
->prev
= dio
;
3371 diskio_find(unsigned long bp
)
3375 for (dio
= busy_diskios
; dio
; dio
= dio
->next
) {
3384 diskio_complete(unsigned long bp
, unsigned long io_errno
, unsigned long resid
,
3385 uintptr_t thread
, uint64_t curtime
, struct timeval curtime_wall
)
3389 if ((dio
= diskio_find(bp
)) == NULL
) return NULL
;
3391 if (dio
== busy_diskios
) {
3392 if ((busy_diskios
= dio
->next
))
3393 dio
->next
->prev
= NULL
;
3396 dio
->next
->prev
= dio
->prev
;
3397 dio
->prev
->next
= dio
->next
;
3400 dio
->iosize
-= resid
;
3401 dio
->io_errno
= io_errno
;
3402 dio
->completed_time
= curtime
;
3403 dio
->completed_walltime
= curtime_wall
;
3404 dio
->completion_thread
= thread
;
3410 diskio_free(struct diskio
*dio
)
3412 dio
->next
= free_diskios
;
3417 diskio_print(struct diskio
*dio
)
3422 int format
= FMT_DISKIO
;
3428 if ((type
& P_CS_Class
) == P_CS_Class
) {
3430 case P_CS_ReadChunk
:
3433 format
= FMT_DISKIO_CS
;
3435 case P_CS_WriteChunk
:
3438 format
= FMT_DISKIO_CS
;
3443 format
= FMT_DISKIO_CS
;
3445 case P_CS_MetaWrite
:
3448 format
= FMT_DISKIO_CS
;
3450 case P_CS_TransformRead
:
3454 case P_CS_TransformWrite
:
3458 case P_CS_MigrationRead
:
3462 case P_CS_MigrationWrite
:
3472 strncpy(buf
, p
, len
);
3474 switch (type
& P_DISKIO_TYPE
) {
3507 strncpy(buf
, p
, len
);
3511 if (type
& P_DISKIO_ASYNC
)
3516 if (type
& P_DISKIO_NOCACHE
)
3519 int tier
= (type
& P_DISKIO_TIER_MASK
) >> P_DISKIO_TIER_SHIFT
;
3523 if (tier
> 0 && tier
< 10)
3524 buf
[len
++] = '0' + tier
;
3526 if (type
& P_DISKIO_TIER_UPGRADE
) {
3531 if (type
& P_DISKIO_PASSIVE
)
3539 if (check_filter_mode(-1, NULL
, type
, 0, 0, buf
))
3540 format_print(NULL
, buf
, NULL
, type
, format
, dio
->completed_time
, dio
->issued_time
, 1, "", dio
);
3543 #pragma mark disk name routines
3546 struct diskrec
*next
;
3551 struct diskrec
*disk_list
= NULL
;
3554 cache_disk_names(void)
3559 struct diskrec
*dnp
;
3561 if ((dirp
= opendir("/dev")) == NULL
)
3564 while ((dir
= readdir(dirp
)) != NULL
) {
3565 char nbuf
[MAXPATHLEN
];
3567 if (dir
->d_namlen
< 5 || strncmp("disk", dir
->d_name
, 4))
3570 snprintf(nbuf
, MAXPATHLEN
, "%s/%s", "/dev", dir
->d_name
);
3572 if (stat(nbuf
, &st
) < 0)
3575 if ((dnp
= malloc(sizeof(struct diskrec
))) == NULL
)
3578 if ((dnp
->diskname
= malloc(dir
->d_namlen
+ 1)) == NULL
) {
3582 strncpy(dnp
->diskname
, dir
->d_name
, dir
->d_namlen
);
3583 dnp
->diskname
[dir
->d_namlen
] = 0;
3584 dnp
->dev
= st
.st_rdev
;
3586 dnp
->next
= disk_list
;
3594 recache_disk_names(void)
3596 struct diskrec
*dnp
, *next_dnp
;
3598 for (dnp
= disk_list
; dnp
; dnp
= next_dnp
) {
3599 next_dnp
= dnp
->next
;
3601 free(dnp
->diskname
);
3610 find_disk_name(unsigned long dev
)
3612 struct diskrec
*dnp
;
3621 for (i
= 0; i
< 2; i
++) {
3622 for (dnp
= disk_list
; dnp
; dnp
= dnp
->next
) {
3623 if (dnp
->dev
== dev
)
3624 return (dnp
->diskname
);
3626 recache_disk_names();
3633 generate_cs_disk_name(unsigned long dev
, char *s
)
3638 sprintf(s
, "disk%lus%lu", (dev
>> 16) & 0xffff, dev
& 0xffff);