Metadata-Version: 2.1
Name: ftrace
Version: 0.0.1
Summary: library for reading ftrace data
Home-page: https://github.com/manfred-kaiser/python-ftrace
Author: Manfred Kaiser
Author-email: manfred.kaiser@logfile.at
License: UNKNOWN
Description: # Python ftrace Library
        
        `ftrace` is a python library to read ftrace data from the Linux Kernel.
        
        At this time it is only compatible with Kernel Version <=4!
        
        
        ## Installation
        
        `pip install ftrace`
        
        
        ## Example
        
        When a new process is created the name, pid and parent pid will be printed.
        
        ```python
        import ftrace
        
        def main():
            processes = {}
        
            ftrace = ftrace.FTrace()
            ftrace.tracer = ftrace.tracers.NopTracer()
            ftrace.reset()
            ftrace.setup()
            ftrace.tracer.syscalls = [
                ftrace.syscalls.Sys_Execve(),
                ftrace.syscalls.Sched_Process_Fork()
            ]
        
            print("pid  ppid: name")
        
            try:
                for data in ftrace.get_output():
                    if (data is not None and data["kname"] == "sys_execve_kprobe"):
                        print("{} {}: {}".format(data["caller_pid"], processes[data["caller_pid"]] if (data["caller_pid"] in processes) else "----", data["filename"]))
                    elif (data["kname"] == "sched_process_fork"):
                        processes[data["called_pid"]] = data["caller_pid"]
            except KeyboardInterrupt:
                print("\nstopping...")
        
            ftrace.reset()
        
        
        if __name__ == "__main__":
            main()
        ```
        
Platform: UNKNOWN
Classifier: Programming Language :: Python :: 3
Classifier: License :: OSI Approved :: GNU Lesser General Public License v3 (LGPLv3)
Classifier: Operating System :: POSIX :: Linux
Classifier: Topic :: System :: Operating System Kernels :: Linux
Requires-Python: >= 3.5
Description-Content-Type: text/markdown
