The Study of Data Collecting Based on Kprobe

Jian Sun,Zhan-huai Li,Xiao Zhang,Qin-lu He,Huifeng Wang
DOI: https://doi.org/10.1109/ISCID.2011.110
2011-01-01
Abstract:API traces have been used to analyze user behaviour and system software behaviour for years, which lead to advances in file system and storage technologies. We describe the implementation of a lightweight and dynamic API collecting tool which calls Trace_probe in this paper. Trace_probe can trace information of the kernels. It based on kprobe mechanism which is implemented in the 2.6 linux kernel and later versions. This tool is designed to be a mount/unmount module, and its characteristics are simple and lightweight. While it works, it will not affect the normal operations of the users. Further experiments show Trace_probe has some advantags in terms of application limitationen and performance degradation.
What problem does this paper attempt to address?