summaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
authorPaul Buetow <paul@buetow.org>2026-05-18 19:13:59 +0300
committerPaul Buetow <paul@buetow.org>2026-05-18 19:13:59 +0300
commit65599ad9b87b1c61cb6d8232200da88952370e96 (patch)
tree862e20468835255ed06544a2df2470678d3b97dc /docs
parenta92cb0283b1ba8735a6697a8f94911397534131f (diff)
t6 add syscall family dashboard aggregation
Diffstat (limited to 'docs')
-rw-r--r--docs/parquet-querying.md1
-rw-r--r--docs/tutorial/tutorial.md9
2 files changed, 8 insertions, 2 deletions
diff --git a/docs/parquet-querying.md b/docs/parquet-querying.md
index 4c49baf..783c4e0 100644
--- a/docs/parquet-querying.md
+++ b/docs/parquet-querying.md
@@ -76,6 +76,7 @@ comm String
pid UInt32
tid UInt32
syscall String
+family String
fd Int32
ret Int64
bytes UInt64
diff --git a/docs/tutorial/tutorial.md b/docs/tutorial/tutorial.md
index 01201a2..4c556e0 100644
--- a/docs/tutorial/tutorial.md
+++ b/docs/tutorial/tutorial.md
@@ -58,7 +58,7 @@ The same picker can be re-opened later from the dashboard with `p`.
## Touring the dashboard tabs
-The dashboard has seven tabs, addressable by number key. The default landing tab is **Flamegraph**. `tab` / `shift+tab` step forward / back.
+The dashboard has eight tabs, addressable by number key. The default landing tab is **Flamegraph**. `tab` / `shift+tab` step forward / back.
| Key | Tab | What it shows |
|-----|-------------------|--------------------------------------------------------------------------|
@@ -69,6 +69,7 @@ The dashboard has seven tabs, addressable by number key. The default landing tab
| `5` | Processes (`Pro`) | Per-process / per-comm counters |
| `6` | Latency (`Lat`) | Latency + inter-syscall gap histograms |
| `7` | Stream (`Str`) | Live tail of individual traced events |
+| `8` | Non-IO (`NIO`) | Broad non-file syscall family counters |
### 1 · Flamegraph (default landing tab)
@@ -108,10 +109,14 @@ Press `6`. Two histograms: syscall **latency** (how long the syscall ran) and th
### 7 · Stream
-Press `7`. A live tail of every traced event row: comm, PID, TID, syscall, file, FD, return value, bytes, latency, gap. This is the workhorse view; the next section explores it in depth.
+Press `7`. A live tail of every traced event row: comm, PID, TID, syscall, family, file, FD, return value, bytes, latency, gap. This is the workhorse view; the next section explores it in depth.
![Stream tab live-tailing rows](./assets/07-stream-live.gif)
+### 8 · Non-IO
+
+Press `8`. This groups traced non-file syscall activity by broad family: network, memory, signals, scheduler, IPC, time, process, security, polling, AIO, and miscellaneous.
+
## Mastering the Stream tab
Stream has two modes: **Live** (rows scroll past) and **Pause** (`space` toggles). Almost everything interesting happens in pause mode.