Sindbad~EG File Manager

Examples of accept2close-nd.stp, the Linux SystemTap version.


This shows accepted socket lifespans, by measuring the time from syscall
accept() to close() on the same file descriptor. Sessions are printed as they
occur, and a histogram summary is printed at the end. For example:

# ./accept2close-nd.stp
TIME                     PID    COMM           FD   DURATION
Sat Jan 31 05:31:14 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   2 ms
Sat Jan 31 05:31:15 2015 29042  node           11   3 ms
Sat Jan 31 05:31:15 2015 29042  node           11   2 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
Sat Jan 31 05:31:15 2015 29042  node           11   1 ms
[...]
Duration (ns):
   value |-------------------------------------------------- count
  131072 |                                                     0
  262144 |                                                     0
  524288 |                                                     1
 1048576 |@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     138
 2097152 |@@                                                   6
 4194304 |                                                     1
 8388608 |                                                     0
16777216 |                                                     0

Most of these sessions were between 1 and 2 milliseconds in lifespan.

The socket lifespan is expected to represent the time taken by a server to
respond to a request. This time may include cycles on-CPU, and cycles off-CPU
blocked on another resource. Note that HTTP keep-alive sessions may have long
durations which process multiple requests.


accept2close-nd.stp accepts an optional argument: a minimum lifespan threshold
in milliseconds. For example, socket sessions that are 5 milliseconds and
longer:

# ./accept2close-nd.stp 5
Only tracing events slower than 5 ms.
TIME                     PID    COMM           FD   DURATION
Sat Jan 31 05:36:23 2015 5236   node           11   5 ms
Sat Jan 31 05:37:39 2015 5236   node           11   5 ms
Sat Jan 31 05:37:50 2015 5236   node           11   9 ms
Sat Jan 31 05:38:09 2015 5236   node           11   7 ms
^C
Duration (ns):
   value |-------------------------------------------------- count
 1048576 |                                                   0
 2097152 |                                                   0
 4194304 |@@@                                                3
 8388608 |@                                                  1
16777216 |                                                   0
33554432 |                                                   0