[dtrace-discuss] Help pid provider follow child processes

[broker5 at seznam.cz]

Seems it works well, thanks. If this is the way how to get complete program trace including
daemons and programs that spawns child processes and if there isn't easier way how to get it
(without creating 3 scripts and with two destructive stop()'s i in the way) than maybe it could be
added to DTraceTookit ?

Thanks, J.

> ------------ Původní zpráva ------------
> Od: Vladimir Marek <Vladimir.Marek at Sun.COM>
> Předmět: Re: [dtrace-discuss] Help pid provider follow child processes
> Datum: 07.5.2008 22:33:05
> ----------------------------------------
> > I just tried stop() as you suggested and I thing something bad is happening
> > when you are using this action. Please see following. Having this two very 
> > simple dtrace scripts:
> > 
> > #!/usr/sbin/dtrace -wqs
> > /*this is master.d dscript file*/
> > 
> > proc:::exec-success
> 
> My unqualified guess is that exec-success probe is executed right after
> the process image is replaced by new one, which is way before any
> symbols are loaded from any libraries. So setting in the second script
> pid$1:::entry sets probes only in symbols defined in the binary itself.
> 
> I tried to create another scenario with third dtrace script in the
> middle between master and helper and it seems to work as requested.
> 
> I'm attaching the scripts.
> 
> On the side note, if you don't want to see realtime linker in the
> output, you can try to run the binary with LD_BIND_NOW environment set
> (see man ld.so.1)
> 
> Hope this helps
> 
> -- 
> 	Vlad
> 
> 
>