ELF@@8@@@@PPP00$$PtdLLL44QtdRtd@@@GNUPTuٓ|tCN%p 4` L"!"aP@ @ HC@A @H.prstuvwxz|~z%u0X{]3+Ct[եހqc""i?bΕx| jsFBn *TKwwї|?x", iWnSu:&H88+ܖfM2v.N(\ ,{%jQfN"P <‘wNR# .8KNWG? T bCh co_F" X 5}T, ,wizYM22F)?}] &(o4J$ S6 `L c B( F pI| s e( TP% Kpd N\5 `wj bPF V FD}`h! DU0 E pP Qpv@W EP Y Kl 0KT `otz F I J XL OhU@ `tbX@ W n{ pN4 tU  @i R{ b  @u $n gP DD Y 4j,__gmon_start___ITM_deregisterTMCloneTable_ITM_registerTMCloneTable__cxa_finalizemetric_namesmetric_text_onelinemetric_text_longheadmallocstrstrstrncpyperf_buffer__freebpf_object__destroy_skeletonperf_buffer__pollstrcmpstrncmpputchar__stack_chk_guardbpf_prog_loadbpf_raw_tracepoint_open__stack_chk_failgetpid__snprintf_chkfopen__isoc23_fscanf__ctype_b_loc__memcpy_chkmkostempunlinkstderr__errno_locationstrerror__fprintf_chkfeoffclosefill_instids_log2pow__asprintf_chkfill_instidspmNotifyErrexitbpf_buffer__openbpf_map__fdring_buffer__newperf_buffer__newbpf_buffer__pollring_buffer__pollbpf_buffer__freering_buffer__freeksyms__freeksyms__loadcallocreallocmemcpystrlenqsortksyms__map_addrksyms__get_symbolbtf__freesyms_cache__newsyms_cache__freepartitions__freepartitions__loadfgets__isoc23_sscanfstrduppartitions__get_by_devpartitions__get_by_nameprint_log2_hist__printf_chkputsprint_linear_histget_ktime_nsclock_gettimeis_kernel_modulekprobe_existsfwritetracepoint_existsaccessvmlinux_btf_existsmodule_btf_existsfentry_can_attachbtf__parsebtf__find_by_name_kindbtf__parse_splitprobe_tp_btflibbpf_find_vmlinux_btf_idprobe_ringbufgetpagesizebpf_map_createbpf_buffer__newbpf_map__set_autocreatebpf_map__set_typebpf_map__set_key_sizebpf_map__set_value_sizeensure_core_btf_binary_min_core_btfs_tar_gz_startuname__getdelimmkstempfdopen_binary_min_core_btfs_tar_gz_endinflateInit2_inflateinflateEndferrorpmIniFileLookup__isoc23_strtolbpf_object__open_skeletonbpf_program__set_autoloadbpf_object__load_skeletonbpf_object__attach_skeletoncleanup_core_btfget_pid_binary_pathreadlinkget_pid_lib_pathstrrchrresolve_binary_pathpopenpcloseopen_elfelf_versionelf_beginelf_kindelf_endelf_errmsgopen_elf_by_fdclose_elfelf_nextscngelf_getshdrelf_getdatagelf_getsymelf_strptrbtf__add_strbtf__name_by_offsetsyms__map_addr_dsosyms__load_filegelf_getehdr__memset_chkbtf__new_emptyelf_getshdrstrndxsyms__load_pidsyms_cache__get_symsget_elf_func_offsetelf_getphdrnumgelf_getphdrdump_hashbpf_map_lookup_batchbpf_map_get_next_keybpf_map_lookup_elemall_modulesbpf_modulelibpcp_web.so.1libpcp.so.3libbpf.so.1libelf.so.1libz.so.1libm.so.6libc.so.6ld-linux-aarch64.so.1GLIBC_2.29PCP_WEB_1.8PCP_3.22GLIBC_2.17GLIBC_2.38ELFUTILS_1.5ELFUTILS_1.6ELFUTILS_1.0LIBBPF_0.8.0LIBBPF_0.3.0LIBBPF_0.6.0LIBBPF_0.0.4LIBBPF_0.0.9LIBBPF_0.0.6LIBBPF_0.0.7LIBBPF_0.1.0LIBBPF_0.2.0LIBBPF_0.0.1             X   db    0 '  @ 2  ?  L  P~0Y Ps0f P0s Tv0 Yv0 Vv0 Wv0 Pu0 Pt0 Qv0 @p6H 688`hpx(8P`hx666d7^;<867 Ђ(080@HHhPxX`hpx0Ѓhx 0@P&(36 (0 8 @ H P X`hpx !"#$%&')* +(,0-8.@/H0P1X2`4h5p7x89:;<=>?@ABCDEFGHIJKL M(N0O8P@QHRPSXT`UhVpWxXYZ[\]^_`abcdefghijkl m(n0o {{_{G?    @ @"  @B @b @ @ @ @ "@ &@" *@B .@b 2@ 6@ :@ >@ B@ F@" J@B N@b R@ V@ Z@ ^@ b@ f@" j@B n@b r@ v@ z@ ~@ @ @" @B @b @ @ @ @ @ @" @B @b @ @ @ @ @ @" @B @b @ @ @ @ @ @" @B @b @ @ @ @ A A"  AB Ab A A A A "A &A" *AB .Ab 2A 6A :A >A BA FA" JAB NAb RA VA ZA ^A bA fA" jAB nAb rA vA zA ~A A A" AB Ab A A A G@_   `!`?T!Ga_`!`!"A !ABGb_ { `bS9@7GA R`b9 @{¨_     ?#{R{#_ _$!G?#{ X`{#_  ?#{ R{#_ ?#{BAX {#_?#{!6!G{#!`RA_!G{#!`RA_?#{,SD?|dR?|%R2?| **?|2R?|R?|*R?| *+?| ?|?| )2#)-)#)/H`# )2h#)1#)?| ,8)?| XC?| ?| ?|?|#)08)#) @/+@{#C)@__$?#{@! {#_?#{q@T?1`TcGc@c@c@c4R?k@Tc@c@c@CR{#_֠5`@@ RqAT` @@ RD@ RqT qTqaT`@@ R`@qীZ@ R`@qZ@ RqTc RCqTc RC ?#{@{# @*{#_ ?#{?q T R R! @qT@)@T@_"T(@!x?qTb{#_֥`T T @BBbA!"  ?#{)S[ !@@c @` ` _`[!Gc @V@@#_kT @SC@b2SA[B{è#_֔SA[B{è#_# ?#{ s`@`@s@`@@^sG`@"@A`@S!bA`@@ @{¨#_ ?#{{#R|B,?#{@"@T{#4_{#@!@  ?#{@"@T{#4_{#@!@?#{SR@94!!`)R4!!)"4!!)@4!!* 4!! *4!!@*4!B!`*q*SA{¨#_?#{k[*S~* TKq TR @Rs|kTqTRRstkTkTSA[B@{Ĩ#_SA`R[B@{Ĩ#c  ?#{ Sc-OBGRD@``R?#D "B*$@`! A!*B<@R 惆dc@@#TctS` @a| R6[GG'@@BAT{E*SFC@C#_R[  ?#BG{CSs" [@@2 #4qT@4[1T 5cG3!c@FR!G@"@cҡT{QSR[S#_ R. #4qT4&1T5cGЂ!4c@  ?#{  c-BGЄ5@@#BRR<q!GH"@cT c- @{¨#_l?#{R@6%q{#_?#!G{R"@/Є6 BR;#Rq;@!G/@"@cҡT{F#_;8?#B@6ЄG{F@SB@[ @7 7R~**qlTR*!G7@"@cT{GSH[I#_Є6c BR@!G3@JB7ARҿR@!G4@7B7AR ?#OЄG{R#@`0?wE@`CA`ABe@=ca `={*DB*@R+H*@7G3*@@B`~ST{P@#_֊ ?#{*RR`R"R`7!R{#*_ ?#{S@6uRR ҭ @SA{è#_ցRRRlR/R?#{B`9c!9k #D@ cG @ @9a@?B @yB#y97 7G@ko1 T! @8KO@ _@ "SW}` 98ւ8"sBR#@ TqT#@|qTy`BR9#@!T>v7!9 B fBRbq@zTҺRG?A@B!T *cCkD{ƨ#_KAOA@kAKoA@KKAOASAWAkAoA@GB 9R#RKK!5Ң @#K_qT7@Rc/!*qTc@`5<` 7@9} 7@75@9B957@ !1@| |w9 @9@4 K57! 7T K @z ҏ jKOSWko)҂zy#@~DKAOAg@Km?#BGc{ O[ #E@W /SB`:c@aA`= =BR( X*5 S 6  1c"B`;s 0B҄ `҃"cBgb4Bd!;;Х;A c@E "b"c! B${tf* 5a6@ @C R@)`6@2@9`6@`6@09`@&@R@"@@5@@5@"@!G @?c!B@+}`SLs@GW@@BҁT{K*[M#_K!:`R6R(*&! ?6R!SLs@&!?6RSLs@s@`@@K`R!>_SL&! S@Kqs@SLs@tS sR_$@?#{ @*`@ @{¨#e @{¨#__?#cG*{ЄS#[*`@BR9TRj#8!G@"@caT{CSD[E#_cGb !c@FG*ARB@?#{S[ck+cG*Є#*`@BR:! 9CR@qTR D5s;*`5`jz8QqTGB@B!T*SA[BcCkD+@{ƨ#_GB`AR@H~G*ARB@<N ?#G{S[ @9*@7%5@ 4!G7@"@c T{G[ISH#)5Ѓ @BRq(T! l *>s8R!G7@"@cAT{GSH[I#_!G7@$@ҡT{GSH[I#2cG!c@bsGB!c@X`@ARBsGB!@c@HnsGЂ!c@<  ?#{S R4RT*7!R+@4 qTSA@{è#_cG!c@@SA{è#_G*BAR@x* GARB@i!G3@;B@AR]*?#{S* R4*!R * qTSA{¨#_cG!c@GBAR@1{*!G3@B@AR *ҵ?#{ *b* @{¨#թ?#BG{[ c C@??q T*  S k s @p @ ?@qKzT;@c@@-` @ۚ\ITG)@?k*T&|{!:B|@h&  ՜T* #@`@9 4@"@@*6@&@$@""@@SIkLsM1tSRr|!!`%|Kҥ|@ {"@@:@@>:@?qTҶ@t{Ӡ"@sjtj4:@?kT@!|@c2@aSIRkLsM!G?@"@cT{H[JcK#_@shS k s t?#{S@e:@RQ Bd@B|B b F|{@T*kTT`@|{@?T `@SA{¨#_(@"Q_xr`T?q T? qT*74SA{¨#_EQR@4?#!G{C%@@@!G@"@caT{A@#զT{A#_  ?#G{C@@@@a@ABG@C@T{A#~!G@"@cҡT{A#_?#{ "c-BG! C@   `+C#z# `_fbeBc"#.1 T q T C9qT@#D9 xbxh6`@8 x`xo7-`6 @ @!@3q T R5# T@ 5@R@!!|5@+@@c|5Eh#@@/@B5C@@3@B5C@B`4@@@/Ayq`T q@ T@qR`R*Y@ 5HHHHHHHH @&dHH GH@Bҁ T @ "c-{ƨ#_֟*v3@ R@~4@ @ R|@e`4"cX@h<%" R*GH #7 d@ '@@$ 5K@G@O@/G@HHHHHHHHHHG@?#!G{ C|@S*BR# @GI!GG@"@cT{IS@#_֦ ?#{S*[@@?q-T!B@_`TC@kaTU@SA[B{è#_!!||  *|ӹj6@  @@|| 5h`SA[B{è#_  ?#BG{S[cA@w C` 5C Q o@qKzTtR*IS@@XSA9B _qTa`4s/@sAyQ<qT@@Gw@@B!T{OSP[QcR#_#J*@5@qTc*s@@T@T#@CT@skT@@@   ?#{GS[ckd@sC@Ҧ T*D@z*@z@T*@ 4sѶCѴcR K~d*ҨC 4@q!TC^` @]@* ?@pp|c!c!TC@c!TB<@c"_b T@pCc!ˢp|c!TC@c!T<@c  T}CRR@@5D]sB6@@ kbT]*'4M@qT4RRR9  ?kTbC6B4*44\?!G_"@cҡTSA[BcCkDsE{ƨ#_֠C^_s @@k(T*R RSXq@TR, {{_//anon/dev/zero/anon_hugepage[stack/SYSV[heap][vsyscall]GPLtest/proc/%ld/maps%lx-%lx %*s %*x %*x:%*x %*u%[^ ][vdso]/tmp/libbpf_%ld_vdso_image_XXXXXXfailed to create temp file: %s failed to unlink %s: %s failed to write to vDSO image: %s %lu-%lupmdaInstid: realloc err: %d%d/proc/kallsyms%lx %c %s%*[^ ] /proc/partitions%u %u %llu %s%*lld -> %-*lld : %-8d ||%*s%-*s : count distribution %-13s : count distribution %-10d : %-8d |/proc/modules%s %*s /sys/kernel/debug/tracing/available_filter_functionsfailed to read symbol from available_filter_functions %*x %*c %s%*[^ ] failed to read symbol from kallsyms /sys/kernel/debug/tracing/events/%s/%s/format/sys/kernel/btf/vmlinux/sys/kernel/btf/%sfailed to parse vmlinux BTF at '%s': %s failed to load BTF from %s: %s /etc/os-releaseID=%64sVERSION_ID="%64swb1.3%o./%s/%s/%s/%s.btf/tmp/bcc-libbpf-tools.btf.XXXXXXprocess_countfailed to fetch necessary BTF for CO-RE: %sopensnoop_bpfstarteventsopensnoo.rodatatracepoint__syscalls__sys_enter_opentracepoint__syscalls__sys_enter_openattracepoint__syscalls__sys_exit_opentracepoint__syscalls__sys_exit_openatfailed to open BPF objectfailed to load BPF object: %dfailed to attach BPF programsfailed to open perf buffer: %d/proc/%d/exeNo such pid %d readlink truncation/proc/%d/maps%*x-%*x %*s %*x %*s %*u %s/libCannot find library %s Uprobes need a pid or a binary which %ssnprintf which prog failedwhich failedfgets which failedCan't find %s (Need a PID if this is a library) elf init failed Could not open %s elf_begin failed: %s elf kind %d is not ELF_K_ELF %lx-%lx %4s %lx %lx:%lx %lu%[^ ].textbashreadlinebiolatencybiosnoopexecsnoopexitsnoopfsslowermountsnoopoomkillopensnooprunqlatstatsnooptcpconnecttcpconnlatvfsstatProcess identifierUser identifierFile Descriptor (-1 is error)errno value (see /usr/include/sys/errno.h)opoen() sys call flagsCommand name for the processFile nameNumber of the lost eventsProcess IDUser IDFile descriptorReturn valueCommand nameopensnoop.pidopensnoop.uidopensnoop.fdopensnoop.erropensnoop.flagsopensnoop.commopensnoop.fnameopensnoop.lostELF.@@c aaw ]!!aag w ]aq!aqg w ]{ya{yacc aaw ]!!aag w ]aq!aqg w ]{ya{ya c{{{{{{{{{{{{{{{{{x{p{h{`{X{P{H{@{8{0{({ {{{{{{{{{{{c 3ygqqg  e%w c c yracczaCy{y{a8{{{{{{{{{{{{{{{{{x{p{h{`{X{P{H{@{8{0{({ {{{{{{{{{{{c 3ygqqg  e%w c c yracczaCy{y{a8GPL  (  #  07 =@ C HM@Y] cHi@r}@@H= @@   z !$k@ # % # ' * +E,KZ)c) 0 1m2s / 5 6749 -.38:int__ARRAY_SIZE_TYPE__u32__u32unsigned intargs_tfnameflagschartypemax_entrieskeyvaluestartkey_sizevalue_sizeeventstrace_event_raw_sys_enterentidargs__datatrace_entrypreempt_countpidunsigned shortunsigned charlongunsigned longctxtracepoint__syscalls__sys_enter_opentracepoint/syscalls/sys_enter_open/build/pcp-NyMzWq/pcp-6.2.0/src/pmdas/bpf/modules/opensnoop.bpf.cint tracepoint__syscalls__sys_enter_open(struct trace_event_raw_sys_enter* ctx) u64 id = bpf_get_current_pid_tgid(); u32 pid = id; if (targ_tgid && targ_tgid != tgid) u32 tgid = id >> 32; if (targ_pid && targ_pid != pid) if (valid_uid(targ_uid)) { uid = (u32)bpf_get_current_uid_gid(); if (targ_uid != uid) { struct args_t args = {};0:2:0 args.fname = (const char *)ctx->args[0];0:2:1 args.flags = (int)ctx->args[1]; bpf_map_update_elem(&start, &pid, &args, 0); return 0;tracepoint__syscalls__sys_enter_openattracepoint/syscalls/sys_enter_openatint tracepoint__syscalls__sys_enter_openat(struct trace_event_raw_sys_enter* ctx) args.fname = (const char *)ctx->args[1];0:2:2 args.flags = (int)ctx->args[2];trace_event_raw_sys_exitrettracepoint__syscalls__sys_exit_opentracepoint/syscalls/sys_exit_openint tracepoint__syscalls__sys_exit_open(struct trace_event_raw_sys_exit* ctx) struct event event = {}; u32 pid = bpf_get_current_pid_tgid(); ap = bpf_map_lookup_elem(&start, &pid); if (!ap)0:2 ret = ctx->ret; if (targ_failed && ret >= 0) event.pid = bpf_get_current_pid_tgid() >> 32; event.uid = bpf_get_current_uid_gid(); bpf_get_current_comm(&event.comm, sizeof(event.comm)); bpf_probe_read_user_str(&event.fname, sizeof(event.fname), ap->fname); event.flags = ap->flags; event.ret = ret; bpf_get_stack(ctx, &stack, sizeof(stack), event.callers[0] = stack[1]; event.callers[1] = stack[2]; bpf_perf_event_output(ctx, &events, BPF_F_CURRENT_CPU,cleanup: bpf_map_delete_elem(&start, &pid); return trace_exit(ctx);tracepoint__syscalls__sys_exit_openattracepoint/syscalls/sys_exit_openatint tracepoint__syscalls__sys_exit_openat(struct trace_event_raw_sys_exit* ctx)pid_t__kernel_pid_ttarg_pidtarg_tgiduid_t__kernel_uid32_ttarg_uidbool_Booltarg_failedLICENSE.maps.rodatalicense DD( "&((KK KK0K8K@K7PKXKMpKMxKMK KMKoKoKKK KKKKKK(K@K@`KoKK K$K0K8K@K7 PKXKMpKMxKMK $KMKoKoKKK KK4K8K8KI<KI<(K4@K@@`KoH"KK`HK6 pPK6p`KhK]xK|K KKKK)K KK KK KRA(KR!8KRHKPKXK hKpKKKKKKK-KeKn K"K K`HK6 pPK6p`KhK]xK|K KKKK)K KK KK KRA(KR!8KRHKPKXK hKpKKKKKKK-KeKn K(C$$X`X`     p z q  hp0   0 X@X@hh,<L \p 0@P`p(8HXhx(8HXhx     0 @ P ` p            0 @ P ` p         (8HXhx(8HXhx4D\l "#& $!'%.text.rel.BTF.extstarttracepoint__syscalls__sys_exit_openat.reltracepoint/syscalls/sys_exit_openattracepoint__syscalls__sys_enter_openat.reltracepoint/syscalls/sys_enter_openatevents.mapstracepoint__syscalls__sys_exit_open.reltracepoint/syscalls/sys_exit_opentracepoint__syscalls__sys_enter_open.reltracepoint/syscalls/sys_enter_open.llvm_addrsiglicensetarg_uidtarg_pidtarg_tgidtarg_failed.strtab.symtab.rodata.rel.BTFLICENSELBB1_7LBB0_7LBB1_6LBB0_6LBB3_5LBB2_5LBB3_4LBB2_4LBB1_4LBB0_4LBB3_3LBB2_3LBB1_2LBB0_2,$@8@p4 @"@p @8#@ 0 @x#@DP0@ @#@   8i   @#p | @h$@[Lo, ( ;0Ed}H}\}p$~4~T~~~~<hDā$d4Xȅ0t ċČԍ8Tt$$H48 D ĕ $ L $ D , l T ( ȝ$ X Ԡ x H H@tt Htش$ص\dx@zRx {0,0{< @\{HA BNd{ |{A-ACA- |{(D-ACA- {A-ACA- {$A-BDA-( {PA-AE A-D CA- 8{A-AyA- \|0D-AEA- |<A-AW A-A (}<A-AD A-E AA- }A-AY A-A <X~ A-A0CBp A-A F A-A $4(A-A BaA- \$A-ACA-(DA-AF A-C AA-(DA-AF A-C AA-$A-A BrA-@A-A@CEZ A-A EA-0D4A-A D"@  BA-A txA-A` F" ZBCBXAAAI`EA-A"  -[CAAA`l(A-ApD BGIHB CDJ^AAIHAJJ A-A A AAIHAJ8T8A-APCBCk A-A <A-A0BCM A-A VA-4|PA-AG A-B A A-B AA-8C-A BI A-A E A-A EA-$D؆DC-A BHA-lA-AD H DFHBKAAELA-A  -XAAABAAA |A-AY A-A PTA-A0BDMCA-A0-DAA-A0-,lC-A0CaA-$TA-A CNA-$