#!/usr/sbin/dtrace -s /* * This file and its contents are supplied under the terms of the * Common Development and Distribution License ("CDDL"), version 1.0. * You may only use this file in accordance with the terms of version * 1.0 of the CDDL. * * A full copy of the text of the CDDL should have accompanied this * source. A copy of the CDDL is also available via the Internet at * http://www.illumos.org/license/CDDL. */ /* * Copyright 2014 Nexenta Systems, Inc. All rights reserved. */ /* * User-level dtrace for smbd. Watch everything it does. * Usage: dtrace -s smbd-all.d -p `pgrep smbd` */ #pragma D option flowindent self int trace; self int mask; /* * Trace everything in smbd */ pid$target:*smbd::entry, pid$target:libmlsvc.so.1::entry, pid$target:libmlrpc.so.1::entry, pid$target:libsmbns.so.1::entry, pid$target:libsmb.so.1::entry, pid$target:libads.so.1::entry { self->trace++; } /* * If traced and not masked, print entry/return */ pid$target:*smbd::entry, pid$target:libmlsvc.so.1::entry, pid$target:libmlrpc.so.1::entry, pid$target:libsmbns.so.1::entry, pid$target:libsmb.so.1::entry, pid$target:libads.so.1::entry /self->trace > 0 && self->mask == 0/ { printf("\t0x%x", arg0); printf("\t0x%x", arg1); printf("\t0x%x", arg2); printf("\t0x%x", arg3); printf("\t0x%x", arg4); printf("\t0x%x", arg5); } /* * Mask (don't print) all function calls below these functions. * These make many boring, repetitive function calls like * smb_mbtowc, smb_msgbuf_has_space, ... * * Also, libmlrpc has rather deep call stacks, particularly under * ndr_encode_decode_common(), so this stops traces below there. * Remove that from the mask actions to see the details. */ pid$target::ht_findfirst:entry, pid$target::ht_findnext:entry, pid$target::ndr_encode_decode_common:entry, pid$target::smb_msgbuf_decode:entry, pid$target::smb_msgbuf_encode:entry, pid$target::smb_strlwr:entry, pid$target::smb_strupr:entry, pid$target::smb_wcequiv_strlen:entry { self->mask++; } /* * Get some of the smbd debug messages, etc. */ pid$target:libsmb.so.1:smb_trace:entry /self->trace > 0 && self->mask == 0/ { printf("%s", copyinstr(arg0)); } pid$target:libsmb.so.1:smb_syslog:entry /self->trace > 0 && self->mask == 0/ { printf("%s", copyinstr(arg1)); } pid$target:libc_hwcap1.so.1:syslog:entry /self->trace > 0 && self->mask == 0/ { printf("%s", copyinstr(arg1)); } /* * Now inverses of above, unwind order. */ pid$target::ht_findfirst:return, pid$target::ht_findnext:return, pid$target::ndr_encode_decode_common:return, pid$target::smb_msgbuf_decode:return, pid$target::smb_msgbuf_encode:return, pid$target::smb_strlwr:return, pid$target::smb_strupr:return, pid$target::smb_wcequiv_strlen:return { self->mask--; } pid$target:*smbd::return, pid$target:libmlsvc.so.1::return, pid$target:libmlrpc.so.1::return, pid$target:libsmbns.so.1::return, pid$target:libsmb.so.1::return, pid$target:libads.so.1::return /self->trace > 0 && self->mask == 0/ { printf("\t0x%x", arg1); } pid$target:*smbd::return, pid$target:libmlsvc.so.1::return, pid$target:libmlrpc.so.1::return, pid$target:libsmbns.so.1::return, pid$target:libsmb.so.1::return, pid$target:libads.so.1::return { self->trace--; }