QUARK-BTF(8) | System Manager's Manual | QUARK-BTF(8) |
quark-btf
— query
quark BTF offsets
quark-btf |
[-bv ] [-f
btf_file] [targets ...] |
quark-btf |
[-bv ] -l
version |
quark-btf |
[-v ] -g
btf_file name version |
quark-btf |
-h |
quark-btf |
quark-btf
program prints out the kernel structures
offsets used by quark.
If operands are given, the output is curbed for those specified targets. The exit status is the number of failed targets.
The options are as follows:
-b
-f
btf_file-g
btf_file name versionThis option is only used to generate btfhub.c via genbtf.sh, chances are you'll never need this.
-h
-l
version-v
-V
quark-btf
exits with 1 if it can't resolve
all BTF symbols, 0 otherwise.
Running:
$ quark-btf
outputs:
cred.cap_ambient 80 cred.cap_bset 72 cred.cap_effective 64 cred.cap_inheritable 48 cred.cap_permitted 56 cred.egid 28 cred.euid 24 cred.gid 12 cred.sgid 20 cred.suid 16 cred.uid 8 cred.user 136 dentry.d_name.name 40 dentry.d_parent 24 fs_struct.pwd.dentry 48 fs_struct.pwd.mnt 40 fs_struct.root.dentry 32 mm_struct.(anon).start_stack 368 mount.mnt 32 mount.mnt_mountpoint 24 task_struct.comm 3008 task_struct.cred 2992 task_struct.exit_code 2364 task_struct.fs 3056 task_struct.mm 2336 task_struct.pid 2464 task_struct.start_boottime 2816 task_struct.tgid 2468 vfsmount.mnt_root 0
quark_event_dump(3), quark_process_lookup(3), quark_queue_block(3), quark_queue_close(3), quark_queue_get_epollfd(3), quark_queue_get_events(3), quark_queue_get_stats(3), quark_queue_open(3), quark-mon(8)
October 28, 2024 | Linux |