#!/bin/bash
#
# functrace - trace kernel function calls matching specified wildcards.
#             Uses Linux ftrace.
#
# This is a proof of concept using Linux ftrace capabilities on older kernels.
#
# USAGE: functrace [-hH] [-p PID] [-L TID] [-d secs] funcstring
#    eg,
#        functrace '*sleep'	# trace all functions ending in "sleep"
#
# Run "functrace -h" for full usage.
#
# The output format is the same as the ftrace function trace format, described
# in the kernel source under Documentation/trace/ftrace.txt.
#
# The "-d duration" mode leaves the trace data in the kernel buffer, and
# only reads it at the end. If the trace data is large, beware of exhausting
# buffer space (/sys/kernel/debug/tracing/buffer_size_kb) and losing data.
#
# Also beware of feedback loops: tracing tcp* functions over an ssh session,
# or writing ext4* functions to an ext4 file system. For the former, tcp
# trace data could be redirected to a file (as in the usage message). For
# the latter, trace to the screen or a different file system.
#
# WARNING: This uses dynamic tracing of kernel functions, and could cause
# kernel panics or freezes. Test, and know what you are doing, before use.
#
# OVERHEADS: This can generate a lot of trace data quickly, depending on the
# frequency of the traced events. Such data will cause performance overheads.
# This also works without buffering by default, printing function events
# as they happen (uses trace_pipe), context switching and consuming CPU to do
# so. If needed, you can try the "-d secs" option, which buffers events
# instead, reducing overhead. If you think the buffer option is losing events,
# try increasing the buffer size (buffer_size_kb).
#
# From perf-tools: https://github.com/brendangregg/perf-tools
#
# COPYRIGHT: Copyright (c) 2014 Brendan Gregg.
#
#  This program is free software; you can redistribute it and/or
#  modify it under the terms of the GNU General Public License
#  as published by the Free Software Foundation; either version 2
#  of the License, or (at your option) any later version.
#
#  This program is distributed in the hope that it will be useful,
#  but WITHOUT ANY WARRANTY; without even the implied warranty of
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#  GNU General Public License for more details.
#
#  You should have received a copy of the GNU General Public License
#  along with this program; if not, write to the Free Software Foundation,
#  Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
#
#  (http://www.gnu.org/copyleft/gpl.html)
#
# 12-Jul-2014	Brendan Gregg	Created this.

### default variables
setglobal tracing = '/sys/kernel/debug/tracing'
setglobal flock = '/var/tmp/.ftrace-lock'
setglobal opt_duration = '0'; setglobal duration = ''; setglobal opt_pid = '0'; setglobal pid = ''; setglobal opt_tid = '0'; setglobal tid = ''; setglobal pidtext = ''
setglobal opt_headers = '0'
trap ':' INT QUIT TERM PIPE HUP	# sends execution to end tracing section

proc usage {
	cat << """ >&2
USAGE: functrace [-hH] [-p PID] [-L TID] [-d secs] funcstring
                 -d seconds      # trace duration, and use buffers
                 -h              # this usage message
                 -H              # include column headers
                 -p PID          # trace when this pid is on-CPU
                 -L TID          # trace when this thread is on-CPU
  eg,
       functrace do_nanosleep    # trace the do_nanosleep() function
       functrace '*sleep'        # trace functions ending in "sleep"
       functrace -p 198 'vfs*'   # trace "vfs*" funcs for PID 198
       functrace 'tcp*' > out    # trace all "tcp*" funcs to out file
       functrace -d 1 'tcp*' > out  # trace 1 sec, then write out file

See the man page and example file for more info.
"""
> !2
USAGE: functrace [-hH] [-p PID] [-L TID] [-d secs] funcstring
                 -d seconds      # trace duration, and use buffers
                 -h              # this usage message
                 -H              # include column headers
                 -p PID          # trace when this pid is on-CPU
                 -L TID          # trace when this thread is on-CPU
  eg,
       functrace do_nanosleep    # trace the do_nanosleep() function
       functrace '*sleep'        # trace functions ending in "sleep"
       functrace -p 198 'vfs*'   # trace "vfs*" funcs for PID 198
       functrace 'tcp*' > out    # trace all "tcp*" funcs to out file
       functrace -d 1 'tcp*' > out  # trace 1 sec, then write out file

See the man page and example file for more info.
END
	exit
}

proc warn {
	if ! eval @Argv {
		echo >&2 "WARNING: command failed \"$ifsjoin(Argv)> !2 "WARNING: command failed \"$@\""
	}
}

proc end {
	# disable tracing
	echo !2 >/dev/null
	echo "Ending tracing..." !2 >/dev/null
	cd $tracing
	warn "echo nop > current_tracer"
	sh-expr ' opt_pid || opt_tid ' && warn "echo > set_ftrace_pid"
	warn "echo > set_ftrace_filter"
	warn "echo > trace"
	sh-expr ' wroteflock ' && warn "rm $flock"
}

proc die {
	echo >&2 @Argv> !2 "$@"
	exit 1
}

proc edie {
	# die with a quiet end()
	echo >&2 @Argv> !2 "$@"
	exec >/dev/null !2 > !1
	end
	exit 1
}

### process options
while getopts d:hHp:L: opt
{
	match $opt {
	with d	setglobal opt_duration = '1'; setglobal duration = $OPTARG 
	with p	setglobal opt_pid = '1'; setglobal pid = $OPTARG 
	with L	setglobal opt_tid = '1'; setglobal tid = $OPTARG 
	with H	setglobal opt_headers = '1'; 
	with h|?	usage 
	}
}
shift $shExpr(' $OPTIND - 1 ')

### option logic
sh-expr ' $# == 0 ' && usage
sh-expr ' opt_pid && opt_tid ' && edie "ERROR: You can use -p or -L but not both."
setglobal funcs = $1
sh-expr ' opt_pid ' && setglobal pidtext = "" for PID $pid""
sh-expr ' opt_tid ' && setglobal pidtext = "" for TID $pid""
if sh-expr ' opt_duration ' {
	echo "Tracing \"$funcs\"$pidtext for $duration seconds..."
} else {
	echo "Tracing \"$funcs\"$pidtext... Ctrl-C to end."
}

### check permissions
cd $tracing || die "ERROR: accessing tracing. Root user? Kernel has FTRACE?
    debugfs mounted? (mount -t debugfs debugfs /sys/kernel/debug)"

### ftrace lock
[[ -e $flock ]] && die "ERROR: ftrace may be in use by PID $[cat $flock] $flock"
echo $Pid > $flock || die "ERROR: unable to write $flock."
setglobal wroteflock = '1'

### setup and commence tracing
sysctl -q kernel.ftrace_enabled=1	# doesn't set exit status
read mode < current_tracer
[[ "$mode" != "nop" ]] && edie "ERROR: ftrace active (current_tracer=$mode)"
if sh-expr ' opt_pid ' {
    echo > set_ftrace_pid
    # ftrace expects kernel pids, which are thread ids
    for tid in [/proc/$pid/task/*] {
        if ! echo $(tid##*/) >> set_ftrace_pid {
            edie "ERROR: setting -p $pid (PID exist?). Exiting."
        }
    }
}
if sh-expr ' opt_tid ' {
    if ! echo $tid > set_ftrace_pid {
        edie "ERROR: setting -L $tid (TID exist?). Exiting."
    }
}
if ! echo $funcs > set_ftrace_filter {
	edie "ERROR: enabling \"$funcs\". Exiting."
}
if ! echo function > current_tracer {
	edie "ERROR: setting current_tracer to \"function\". Exiting."
}

### print trace buffer
warn "echo > trace"
if sh-expr ' opt_duration ' {
	sleep $duration
	if sh-expr ' opt_headers ' {
		cat trace
	} else {
		grep -v '^#' trace
	}
} else {
	# trace_pipe lack headers, so fetch them from trace
	sh-expr ' opt_headers ' && cat trace
	cat trace_pipe
}

### end tracing
end