I'm trying to attach to a kprobe event for purposes of tooling, but I'm not too familiar with kprobe events. I've read that the list of registered kprobes are available in /sys/kernel/debug/kprobes/list however sudo less /sys/kernel/debug/krpobes/list shows that there are no registered kprobes. I've confirmed that krpobes/enabled is 1. Am I doing something horribly wrong?
sys/kernel/debug/krpobes/list empty
1.8k Views Asked by byrnesj1 At
1
There are 1 best solutions below
Related Questions in KERNEL
- Simulate WeChat scanning short connection redirection, but the QQ display result is different from WeChat?
- Validating a client from kernel in Windows
- Yocto kernel patch fails with git am
- Nuke BlinkScript: Why does the convolution kernel scale down the image?
- EKS AMI kernel debug symbols
- Unexpected OS Shutdown
- create_ap wlan0: Could not connect to kernel driver
- QEMU i386 pmio addresses
- Simple programming of VGA cursor
- How to compile and install kernel modules with dependencies and device tree?
- android camera driver rotate 90°
- Is there any way to get the WiFi contention window (CW) min and max value in Linux 80211 subsystem?
- How to reduce cached memory used by Linux kernel on embedded linux platform
- How can I get current cpufreq in kernel code?
- Print Inode or file data, using path name
Related Questions in TRACE
- It seems to be a bug about "base::trace()" or "methods:::.TraceWithMethods()"?
- OpenTelemetry + Jaeger tracing "Warnings: invalid parent span IDs=XXXX; skipping clock skew adjustment"
- Opentelemetry manual traceparent creation
- Tracing costum tkinter is lagging
- some questions about posix_trace_* function
- Why does Tracerpt does not require any formatting information in form of any PDB or TMF file, while Traceview and Tracefmt do?
- Propagating & Managing TraceID across multiple events in Kafka
- Python get the line number of the execution code, where the code is on the string format
- How to print the caller method name as the caller name in the aspect
- Datadog ddtrace with async Google PubSub publishing
- I can't use telemetrygen to generate traces to Grafana tempo
- What replaces Page.Trace in ASP.net Core Razor Pages?
- How can I get the stack trace of a PythonFlask/ React app, when the exception is caught?
- why the static variable value is printed before the system start message in the output
- How to propagate traceId to other threads in one transaction for Spring Boot 3.x along with Micrometer
Related Questions in KPROBE
- Can Linux kprobes get disabled temporarily by the kernel?
- Kprobe handler is not triggered for some kernel symbols
- maximum number of uprobe /kprobe that can be attached using libbpf
- How to correctly read socket->sk from pt_regs* in ebpf program?
- get current kubernetes logged in user with kprobe
- tracepoint/syscalls/sys_enter_execve missing args
- BPF program attach failed
- Concurrent system calls handling by kprobes
- How to remove a eBPF function attached by BCC toolkit?
- Permission denied when using bpf_probe_read() in the ebpf program
- Kprobe BPF programs execution order
- eBPF vs non-eBPF tracepoint/kprobes
- Comparing ip addresses in bpftrace?
- Get return address of a function using kretprobe or bpf
- Can ebpf only use kprobe to monitor kernel functions?
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular # Hahtags
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
/sys/kernel/debug/kprobes/listhas the list of registered kprobes, not available kprobe hooks (cf. theThe kprobes debugfs interfacesection of the kprobes documentation).I don't think there's a list of available kprobe hooks somewhere. However,
/sys/kernel/debug/tracing/available_filter_functionshas a list of kprobe hooks available through ftrace. Most available functions should be in there. Otherwise, you can check the list of complete exposed functions in/proc/kallsymsand verify they are not blacklisted in/sys/kernel/debug/krpobes/blacklist. If a function is not in/proc/kallsyms, it's likely because is was inlined at compile time.So, no, nothing horrible :-)