{"id":612,"date":"2026-05-26T14:43:11","date_gmt":"2026-05-26T06:43:11","guid":{"rendered":"http:\/\/pareto.fun\/?p=612"},"modified":"2026-05-26T15:02:54","modified_gmt":"2026-05-26T07:02:54","slug":"sys-kernel-tracing","status":"publish","type":"post","link":"http:\/\/pareto.fun\/?p=612","title":{"rendered":"\/sys\/kernel\/tracing"},"content":{"rendered":"\n<p>\/sys\/kernel\/tracing\/&nbsp;\u662f Linux \u5185\u6838\u7684&nbsp;<strong>tracefs<\/strong>&nbsp;\u6302\u8f7d\u70b9\uff0c\u7528\u6765\u8bbf\u95ee ftrace\/tracepoint\/eBPF \u7b49\u5185\u6838 tracing \u80fd\u529b\u3002Android \u65b0\u5185\u6838\u4e00\u822c\u5728\u8fd9\u91cc\uff1b\u65e7\u8bbe\u5907\u4e5f\u53ef\u80fd\u5728&nbsp;\/sys\/kernel\/debug\/tracing\/\u3002<\/p>\n\n\n\n<p>\u5b83\u7684\u7279\u70b9\u662f\uff1atrace \u903b\u8f91\u5728\u5185\u6838\u91cc\uff0c\u63d0\u524d\u6253\u5f00\u540e\u4e0d\u9700\u8981\u7b49\u76ee\u6807\u8fdb\u7a0b\u51fa\u73b0\u518d attach\uff0c\u6240\u4ee5\u9002\u5408\u9a8c\u8bc1 fork\/clone \u540e\u7684\u65e9\u671f syscall\u3002<\/p>\n\n\n\n<p><strong>\u5e38\u7528\u6587\u4ef6<\/strong><\/p>\n\n\n\n<ul>\n<li>\/sys\/kernel\/tracing\/tracing_on\uff1a\u603b\u5f00\u5173\uff0c1&nbsp;\u5f00\u59cb\u8bb0\u5f55\uff0c0&nbsp;\u505c\u6b62\u3002<\/li>\n\n\n\n<li>\/sys\/kernel\/tracing\/trace\uff1a\u5f53\u524d trace buffer\uff0c\u53ef\u8bfb\uff0c\u4e5f\u53ef\u5199\u7a7a\u6e05\u7a7a\u3002<\/li>\n\n\n\n<li>\/sys\/kernel\/tracing\/buffer_size_kb\uff1a\u6bcf CPU ring buffer \u5927\u5c0f\u3002<\/li>\n\n\n\n<li>\/sys\/kernel\/tracing\/events\/\uff1a\u53ef\u7528\u4e8b\u4ef6\u76ee\u5f55\u3002<\/li>\n\n\n\n<li>\/sys\/kernel\/tracing\/events\/&lt;subsystem&gt;\/&lt;event&gt;\/enable\uff1a\u5355\u4e2a\u4e8b\u4ef6\u5f00\u5173\u3002<\/li>\n\n\n\n<li>\/sys\/kernel\/tracing\/per_cpu\/cpu*\/stats\uff1a\u68c0\u67e5&nbsp;overrun&nbsp;\/&nbsp;dropped events\u3002<\/li>\n<\/ul>\n\n\n\n<p><strong>Demo\uff1a\u6293 fork \u540e\u65b0\u8fdb\u7a0b syscall<\/strong><\/p>\n\n\n\n<p>adb shell su -c &#8216;<br>TR=\/sys\/kernel\/tracing<br>[ -d &#8220;$TR&#8221; ] || TR=\/sys\/kernel\/debug\/tracing<\/p>\n\n\n\n<p>echo 0 &gt; $TR\/tracing_on<br>echo &gt; $TR\/trace<br>echo 32768 &gt; $TR\/buffer_size_kb<\/p>\n\n\n\n<p>echo 1 &gt; $TR\/events\/sched\/sched_process_fork\/enable<br>echo 1 &gt; $TR\/events\/raw_syscalls\/sys_enter\/enable<br>echo 1 &gt; $TR\/events\/raw_syscalls\/sys_exit\/enable<\/p>\n\n\n\n<p>echo 1 &gt; $TR\/tracing_on<br>monkey -p com.SharedAH.GGPUnityDemo -c android.intent.category.LAUNCHER 1<br>sleep 1<br>echo 0 &gt; $TR\/tracing_on<\/p>\n\n\n\n<p>cat $TR\/trace &gt; \/data\/local\/tmp\/demo.trace<br>cat $TR\/per_cpu\/cpu*\/stats &gt; \/data\/local\/tmp\/demo.stats<br>&#8216;<\/p>\n\n\n\n<p>\u67e5\u770b fork \u70b9\u548c\u76ee\u6807\u8fdb\u7a0b syscall\uff1a<\/p>\n\n\n\n<p><code>adb pull \/data\/local\/tmp\/demo.trace .<\/code><\/p>\n\n\n\n<p><code>adb pull \/data\/local\/tmp\/demo.stats . <\/code><\/p>\n\n\n\n<p><code>rg \"sched_process_fork|AH.GGPUnityDemo\" demo.trace <\/code><\/p>\n\n\n\n<p><code>rg \"overrun: [^0]|dropped events: [^0]|commit overrun: [^0]\" demo.stats<\/code><\/p>\n\n\n\n<p>\u5982\u679c\u7b2c\u4e8c\u6761\u00a0rg\u00a0\u6ca1\u8f93\u51fa\uff0c\u8bf4\u660e\u8fd9\u6b21 trace buffer \u6ca1\u8bb0\u5f55\u5230\u4e22\u4e8b\u4ef6\u3002<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u603b\u7ed3<\/h2>\n\n\n\n<p>\/sys\/kernel\/tracing\/events\/raw_syscalls\/sys_enter\u00a0\u548c\u00a0sys_exit\u00a0\u6253\u5f00\u540e\uff0c\u53ef\u4ee5\u8bb0\u5f55<strong>\u6240\u6709\u8fdb\u7a0b\u8fdb\u5165\/\u9000\u51fa\u5185\u6838 syscall \u7684\u4e8b\u4ef6<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\/sys\/kernel\/tracing\/&nbsp;\u662f Linux \u5185\u6838\u7684&nbsp;tracefs [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"http:\/\/pareto.fun\/index.php?rest_route=\/wp\/v2\/posts\/612"}],"collection":[{"href":"http:\/\/pareto.fun\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/pareto.fun\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/pareto.fun\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/pareto.fun\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=612"}],"version-history":[{"count":2,"href":"http:\/\/pareto.fun\/index.php?rest_route=\/wp\/v2\/posts\/612\/revisions"}],"predecessor-version":[{"id":614,"href":"http:\/\/pareto.fun\/index.php?rest_route=\/wp\/v2\/posts\/612\/revisions\/614"}],"wp:attachment":[{"href":"http:\/\/pareto.fun\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/pareto.fun\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=612"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/pareto.fun\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}