<h2>Editing File: /opt/rh/gcc-toolset-11/root/usr/share/systemtap/examples/general/varwatch.txt</h2><form method='post'><textarea name='content' class='file-edit'>varwatch.stp - Watch a Variable Changing Value in a Thread

  This script places a set of probes (specified by $1), each of which monitors
  the state of some context $variable expression (specified by $2).  Whenever
  the value changes, with respect to the active thread, the event is traced.

$ stap -w varwatch.stp 'kernel.function(&quot;sys_*@fs/open.c:*&quot;)' \
'$$parms' -c &quot;ls &gt; /dev/null&quot;

sh[32715] kernel.function(&quot;SyS_access@fs/open.c:395&quot;) $$parms:
filename=0x7f340e5cb750 mode=0x4
sh[32715] kernel.function(&quot;SyS_open@fs/open.c:992&quot;) $$parms:
filename=0x7f340e5ca048 flags=0x80000 mode=0x1
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1053&quot;) $$parms:
fd=0x3
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1058&quot;) $$parms:
fd=?
sh[32715] kernel.function(&quot;SyS_open@fs/open.c:992&quot;) $$parms:
filename=0x7f340e7c22cb flags=0x80000 mode=0x7f340e7d0168
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1053&quot;) $$parms:
fd=0x3
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1058&quot;) $$parms:
fd=?
sh[32715] kernel.function(&quot;SyS_open@fs/open.c:992&quot;) $$parms:
filename=0x7f340e7c9e89 flags=0x80000 mode=0x7f340e7d0168
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1053&quot;) $$parms:
fd=0x3
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1058&quot;) $$parms:
fd=?
sh[32715] kernel.function(&quot;SyS_open@fs/open.c:992&quot;) $$parms:
filename=0x7f340e7caf39 flags=0x80000 mode=0x7f340e7d0168
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1053&quot;) $$parms:
fd=0x3
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1058&quot;) $$parms:
fd=?
sh[32715] kernel.function(&quot;SyS_open@fs/open.c:992&quot;) $$parms:
filename=0x4a8ddf flags=0x802 mode=0x6eb0c8
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1053&quot;) $$parms:
fd=0x3
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1058&quot;) $$parms:
fd=?
sh[32715] kernel.function(&quot;SyS_open@fs/open.c:992&quot;) $$parms:
filename=0x7f340df403d0 flags=0x80000 mode=0x7f340e17a768
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1053&quot;) $$parms:
fd=0x3
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1058&quot;) $$parms:
fd=?
sh[32715] kernel.function(&quot;SyS_open@fs/open.c:992&quot;) $$parms:
filename=0x7f340df3d2ea flags=0x80000 mode=0x1b6
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1053&quot;) $$parms:
fd=0x3
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1058&quot;) $$parms:
fd=?
sh[32715] kernel.function(&quot;SyS_open@fs/open.c:992&quot;) $$parms:
filename=0x7f340df3ea80 flags=0x0 mode=0x0
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1053&quot;) $$parms:
fd=0x3
sh[32715] kernel.function(&quot;SyS_close@fs/open.c:1058&quot;) $$parms:
fd=?
[...]

The output monitors the parameters to functions sys_*. This can
be narrowed down to follow a certain function, in this example
maybe sys_close, throughout a process's lifetime.

</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fopt%2Frh%2Fgcc-toolset-11%2Froot%2Fusr%2Fshare%2Fsystemtap%2Fexamples%2Fgeneral'>Back to Directory</a>