File: //opt/sentinelone/mount/tracing/events/kprobes/s1renameatenter/format
name: s1renameatenter
ID: 1050
format:
field:unsigned short common_type; offset:0; size:2; signed:0;
field:unsigned char common_flags; offset:2; size:1; signed:0;
field:unsigned char common_preempt_count; offset:3; size:1; signed:0;
field:int common_pid; offset:4; size:4; signed:1;
field:int common_lock_depth; offset:8; size:4; signed:1;
field:unsigned long __probe_ip; offset:16; size:8; signed:0;
field:s32 olddirfd; offset:24; size:4; signed:1;
field:__data_loc char[] oldname; offset:28; size:4; signed:1;
field:s32 newdirfd; offset:32; size:4; signed:1;
field:__data_loc char[] newname; offset:36; size:4; signed:1;
print fmt: "(%lx) olddirfd=%lx oldname=%lx newdirfd=%lx newname=%lx", REC->__probe_ip, REC->olddirfd, REC->oldname, REC->newdirfd, REC->newname