blob: 90ecdb13e6ac7f42d9731970e75c517c620c82dd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
|
// SPDX-License-Identifier: GPL-3.0-or-later
#ifndef NETDATA_EBPF_FD_H
#define NETDATA_EBPF_FD_H 1
// Module name & File description
#define NETDATA_EBPF_MODULE_NAME_FD "filedescriptor"
#define NETDATA_EBPF_FD_MODULE_DESC "Monitor when files are open and closed. This thread is integrated with apps and cgroup."
// Menu group
#define NETDATA_FILE_GROUP "file_access"
// Global chart name
#define NETDATA_FILE_OPEN_CLOSE_COUNT "file_descriptor"
#define NETDATA_FILE_OPEN_ERR_COUNT "file_error"
// Charts created on Apps submenu
#define NETDATA_SYSCALL_APPS_FILE_OPEN "file_open"
#define NETDATA_SYSCALL_APPS_FILE_CLOSED "file_closed"
#define NETDATA_SYSCALL_APPS_FILE_OPEN_ERROR "file_open_error"
#define NETDATA_SYSCALL_APPS_FILE_CLOSE_ERROR "file_close_error"
// Process configuration name
#define NETDATA_FD_CONFIG_FILE "fd.conf"
// Contexts
#define NETDATA_FS_FILEDESCRIPTOR_CONTEXT "filesystem.file_descriptor"
#define NETDATA_FS_FILEDESCRIPTOR_ERROR_CONTEXT "filesystem.file_error"
#define NETDATA_CGROUP_FD_OPEN_CONTEXT "cgroup.fd_open"
#define NETDATA_CGROUP_FD_OPEN_ERR_CONTEXT "cgroup.fd_open_error"
#define NETDATA_CGROUP_FD_CLOSE_CONTEXT "cgroup.fd_close"
#define NETDATA_CGROUP_FD_CLOSE_ERR_CONTEXT "cgroup.fd_close_error"
#define NETDATA_SYSTEMD_FD_OPEN_CONTEXT "systemd.service.fd_open"
#define NETDATA_SYSTEMD_FD_OPEN_ERR_CONTEXT "systemd.service.fd_open_error"
#define NETDATA_SYSTEMD_FD_CLOSE_CONTEXT "systemd.service.fd_close"
#define NETDATA_SYSTEMD_FD_CLOSE_ERR_CONTEXT "systemd.service.fd_close_error"
// ARAL name
#define NETDATA_EBPF_FD_ARAL_NAME "ebpf_fd"
typedef struct __attribute__((packed)) netdata_publish_fd_stat {
uint64_t ct;
uint32_t open_call; // Open syscalls (open and openat)
uint32_t close_call; // Close syscall (close)
// Errors
uint32_t open_err;
uint32_t close_err;
} netdata_publish_fd_stat_t;
typedef struct netdata_fd_stat {
uint64_t ct;
uint32_t tgid;
uint32_t uid;
uint32_t gid;
char name[TASK_COMM_LEN];
uint32_t open_call; // Open syscalls (open and openat)
uint32_t close_call; // Close syscall (close)
// Errors
uint32_t open_err;
uint32_t close_err;
} netdata_fd_stat_t;
enum fd_tables {
NETDATA_FD_PID_STATS,
NETDATA_FD_GLOBAL_STATS,
// Keep this as last and don't skip numbers as it is used as element counter
NETDATA_FD_CONTROLLER
};
enum fd_counters {
NETDATA_KEY_CALLS_DO_SYS_OPEN,
NETDATA_KEY_ERROR_DO_SYS_OPEN,
NETDATA_KEY_CALLS_CLOSE_FD,
NETDATA_KEY_ERROR_CLOSE_FD,
// Keep this as last and don't skip numbers as it is used as element counter
NETDATA_FD_COUNTER
};
enum fd_syscalls {
NETDATA_FD_SYSCALL_OPEN,
NETDATA_FD_SYSCALL_CLOSE,
// Do not insert nothing after this value
NETDATA_FD_SYSCALL_END
};
enum fd_close_syscall {
NETDATA_FD_CLOSE_FD,
NETDATA_FD___CLOSE_FD,
NETDATA_FD_CLOSE_END
};
#define NETDATA_EBPF_MAX_FD_TARGETS 2
void *ebpf_fd_thread(void *ptr);
void ebpf_fd_create_apps_charts(struct ebpf_module *em, void *ptr);
void ebpf_fd_release(netdata_fd_stat_t *stat);
extern struct config fd_config;
extern netdata_ebpf_targets_t fd_targets[];
#endif /* NETDATA_EBPF_FD_H */
|
