| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-05-23 | 5c remove tracepoint ID adjacency dependency from aggregate pairing | Paul Buetow | |
| Generated exit handlers now pass the explicit enter trace ID (SYS_ENTER_X) to ior_on_syscall_exit instead of relying on the implicit enter_id == exit_id + 1 arithmetic invariant. filter.c compares directly against the passed enter ID. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> | |||
| 2026-05-23 | ac table-drive BPF extra-code generation away from switches | Paul Buetow | |
| Replace the large switch in generateExtra with an extraEmitters registry (map[TracepointKind]extraEmitter) and convert six inner switch-on-name helpers to table-driven lookups: - generateExtraMem -> memFieldOverrides table - generateExtraEventfd -> eventfdFlagsExpr table - generateExtraTwoFd -> twoFdOverrides + twoFdDefault - generateExtraPoll -> pollOverrides + pollTimeoutBody(style) - generateExtraSleep -> sleepTimespecPtr table - generateExtraKeyctl -> keyctlOverrides table Adding a new syscall kind or variant now requires only a table entry instead of editing switch arms with raw C string literals. Generated BPF C output is behaviorally equivalent; all existing tests pass unchanged. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> | |||
| 2026-05-23 | 8c extract aggregate draining and filter gating from eventLoop | Paul Buetow | |
| Move aggregate drain scheduling, filter compatibility policy, trace-ID allowlisting, and warning construction into a dedicated aggregateDrainer type. eventLoop now only creates and ticks it. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> | |||
| 2026-05-22 | 3c table-drive name-only syscall classification | Paul Buetow | |
| 2026-05-22 | 4c extract event kind runtime registry | Paul Buetow | |
| 2026-05-22 | xb make syscall aggregates per-cpu deltas | Paul Buetow | |
| 2026-05-22 | yb reject aggregate rows for pid tid filters | Paul Buetow | |
| 2026-05-21 | wb add docs drift tests for syscall coverage | Paul Buetow | |
| 2026-05-21 | vb add data-driven name-only kind mapping table | Paul Buetow | |
| 2026-05-21 | o7 classify landlock add-rule and restrict-self as fd | Paul Buetow | |
| 2026-05-21 | m7 classify time and posix timer syscalls | Paul Buetow | |
| 2026-05-21 | k7 classify process control and prctl syscalls | Paul Buetow | |
| 2026-05-21 | j7 add futex kind and aggregate-only defaults | Paul Buetow | |
| 2026-05-21 | l7 classify numa and process memory syscalls | Paul Buetow | |
| 2026-05-21 | h7 classify additional memory syscalls | Paul Buetow | |
| 2026-05-21 | 57 add bpf syscall kind classification | Paul Buetow | |
| 2026-05-21 | 37 classify clone family as proc kind | Paul Buetow | |
| 2026-05-21 | b7 classify sysv ipc ids and ops | Paul Buetow | |
| 2026-05-21 | e7 classify acct pathname and misc null syscalls | Paul Buetow | |
| 2026-05-21 | a7 make sched and rlimit null-classification explicit | Paul Buetow | |
| 2026-05-21 | 97 make identity null-classification explicit | Paul Buetow | |
| 2026-05-21 | 87 make signal null-classification explicit | Paul Buetow | |
| 2026-05-21 | 67 add seccomp and module trace kinds | Paul Buetow | |
| 2026-05-21 | i7 classify memory P3 syscalls as mem kind | Paul Buetow | |
| 2026-05-21 | g7 classify fd-from-air eventfd users | Paul Buetow | |
| 2026-05-21 | n7 classify pidfd and misc tail syscalls | Paul Buetow | |
| 2026-05-21 | f7 wire eventfd kind for fd-from-air IPC syscalls | Paul Buetow | |
| 2026-05-21 | p7 add attach-time trace dimension gating | Paul Buetow | |
| 2026-05-21 | task-47: fix execveat dirfd codegen fallback | Paul Buetow | |
| 2026-05-20 | task-47: add KindExec for execve paths | Paul Buetow | |
| 2026-05-20 | feat: add keyctl ptrace perf_event_open tracing (task 77) | Paul Buetow | |
| 2026-05-20 | d7: add POSIX mq syscall kind/classification and coverage | Paul Buetow | |
| 2026-05-20 | feat: add mount/fs management syscall tracing for c7 | Paul Buetow | |
| 2026-05-20 | task 27: assert non-zero requested_sleep_ns in CSV export test | Paul Buetow | |
| 2026-05-20 | task 27: add KindSleep and requested sleep metric | Paul Buetow | |
| 2026-05-20 | test(task-17): assert aggregate-only stats surfacing path | Paul Buetow | |
| 2026-05-20 | fix(task-17): prevent aggregate double-count and flush on shutdown | Paul Buetow | |
| 2026-05-20 | feat: add syscall aggregate sampling infrastructure (task 17) | Paul Buetow | |
| 2026-05-20 | task 07: assert mmap address-space accounting end-to-end | Paul Buetow | |
| 2026-05-20 | task 07: add KindMem and separate address-space byte accounting | Paul Buetow | |
| 2026-05-19 | z6: add KindPoll wiring for poll/select ready counts | Paul Buetow | |
| 2026-05-19 | y6: add epoll ctl/wait tracing and ready-count coverage | Paul Buetow | |
| 2026-05-19 | x6: add pipe/eventfd fd-from-air syscall support | Paul Buetow | |
| 2026-05-19 | w6: extend KindFd socket introspection coverage | Paul Buetow | |
| 2026-05-19 | v6: cover plain accept integration and filter path | Paul Buetow | |
| 2026-05-19 | v6: add KindAccept and wire accept/accept4 | Paul Buetow | |
| 2026-05-19 | u6: fix socketpair exit fd capture and socket filtering | Paul Buetow | |
| 2026-05-19 | u6: add socket/socketpair kind scaffolding and wiring | Paul Buetow | |
| 2026-05-19 | t6 stabilize family recording integration | Paul Buetow | |
| 2026-05-19 | t6 address family recording review | Paul Buetow | |
