Documentation/trace/kprobes.rst

21   Appendix A: The kprobes debugfs interface
22   Appendix B: The kprobes sysctl interface
36 There are currently two types of probes: kprobes, and kretprobes
87 Since kprobes can probe into a running kernel code, it can change the
95 registers) in pre_handler, you must return !0 so that kprobes stops
297 that there are some functions where kprobes cannot probe. Probing
302 to (1) include linux/kprobes.h and (2) use NOKPROBE_SYMBOL() macro
355 samples/kprobes/ sub-directory for examples.
362 	#include <linux/kprobes.h>
389    4. With CISC architectures (such as i386 and x86_64), the kprobes code
397 	#include <linux/kprobes.h>
407 	#include <linux/kprobes.h>
420 	#include <linux/kprobes.h>
433 	#include <linux/kprobes.h>
459 	#include <linux/kprobes.h>
476 	#include <linux/kprobes.h>
498 	#include <linux/kprobes.h>
516 	#include <linux/kprobes.h>
528 	#include <linux/kprobes.h>
549 kernel/kprobes.c and ``arch/*/kernel/kprobes.c``, but also functions such
602 reason, Kprobes doesn't support return probes (or kprobes)
693 See samples/kprobes/kprobe_example.c
698 See samples/kprobes/kretprobe_example.c
732 The kprobes debugfs interface
736 With recent kernels (> 2.6.20) the list of registered kprobes is visible
737 under the /sys/kernel/debug/kprobes/ directory (assuming debugfs is mounted at //sys/kernel/debug).
739 /sys/kernel/debug/kprobes/list: Lists all registered probes on the system::
756 /sys/kernel/debug/kprobes/enabled: Turn kprobes ON/OFF forcibly.
758 Provides a knob to globally and forcibly turn registered kprobes ON or OFF.
759 By default, all kprobes are enabled. By echoing "0" to this file, all
761 file. Note that this knob just disarms and arms all kprobes and doesn't
762 change each probe's disabling state. This means that disabled kprobes (marked
763 [DISABLED]) will be not enabled if you turn ON all kprobes by this knob.
766 The kprobes sysctl interface
769 /proc/sys/debug/kprobes-optimization: Turn kprobes optimization ON/OFF.