1*1031c584SApple OSS Distributions#!/bin/sh 2*1031c584SApple OSS Distributions# 3*1031c584SApple OSS Distributions# Initiate tracing 4*1031c584SApple OSS DistributionsCODE_MACH_KMSG_INFO=0x1200028 5*1031c584SApple OSS DistributionsCODE_MACH_PROC_EXEC=0x401000C 6*1031c584SApple OSS DistributionsCODE_MACH_MSG_SEND=0x120000C 7*1031c584SApple OSS DistributionsCODE_MACH_MSG_RECV=0x1200010 8*1031c584SApple OSS DistributionsCODE_TRACE_DATA_EXEC=0x7000008 9*1031c584SApple OSS Distributions 10*1031c584SApple OSS Distributionsofile=${1:-ipc.raw} 11*1031c584SApple OSS Distributionssleepsec=${2:-3} 12*1031c584SApple OSS Distributions 13*1031c584SApple OSS Distributionstrace -i -b 8192 14*1031c584SApple OSS Distributionstrace -n 15*1031c584SApple OSS Distributionstrace -g 16*1031c584SApple OSS Distributionsif [ $sleepsec -gt 0 ]; then 17*1031c584SApple OSS Distributions echo "" 18*1031c584SApple OSS Distributions echo "Sleeping for ${sleepsec}..." 19*1031c584SApple OSS Distributions sleep ${sleepsec} 20*1031c584SApple OSS Distributionsfi 21*1031c584SApple OSS Distributionsecho "Tracing!" 22*1031c584SApple OSS Distributions 23*1031c584SApple OSS Distributionsps -Ac | sed 's,\s*\([0-9][0-9]*\) .*[0-9]*:[0-9]*\.[0-9]* \(.*\), 00000000.0 0.0(0.0) proc_exec \1 0 0 0 0 0 \2,' > "ps_${ofile}.txt" 24*1031c584SApple OSS Distributionstrace -L ${ofile} -k ${CODE_MACH_KMSG_INFO} -k ${CODE_MACH_PROC_EXEC} -k ${CODE_MACH_MSG_SEND} -k ${CODE_MACH_MSG_RECV} 25