1*8d741a5dSApple OSS Distributions#!/bin/sh 2*8d741a5dSApple OSS Distributions# 3*8d741a5dSApple OSS Distributions# Initiate tracing 4*8d741a5dSApple OSS DistributionsCODE_MACH_KMSG_INFO=0x1200028 5*8d741a5dSApple OSS DistributionsCODE_MACH_PROC_EXEC=0x401000C 6*8d741a5dSApple OSS DistributionsCODE_MACH_MSG_SEND=0x120000C 7*8d741a5dSApple OSS DistributionsCODE_MACH_MSG_RECV=0x1200010 8*8d741a5dSApple OSS DistributionsCODE_TRACE_DATA_EXEC=0x7000008 9*8d741a5dSApple OSS Distributions 10*8d741a5dSApple OSS Distributionsofile=${1:-ipc.raw} 11*8d741a5dSApple OSS Distributionssleepsec=${2:-3} 12*8d741a5dSApple OSS Distributions 13*8d741a5dSApple OSS Distributionstrace -i -b 8192 14*8d741a5dSApple OSS Distributionstrace -n 15*8d741a5dSApple OSS Distributionstrace -g 16*8d741a5dSApple OSS Distributionsif [ $sleepsec -gt 0 ]; then 17*8d741a5dSApple OSS Distributions echo "" 18*8d741a5dSApple OSS Distributions echo "Sleeping for ${sleepsec}..." 19*8d741a5dSApple OSS Distributions sleep ${sleepsec} 20*8d741a5dSApple OSS Distributionsfi 21*8d741a5dSApple OSS Distributionsecho "Tracing!" 22*8d741a5dSApple OSS Distributions 23*8d741a5dSApple OSS Distributionsps -Ac | sed 's,\s*\([0-9][0-9]*\) .*[0-9]*:[0-9]*\.[0-9]* \(.*\), 00000000.0 0.0(0.0) proc_exec \1 0 0 0 0 0 \2,' > "ps_${ofile}.txt" 24*8d741a5dSApple OSS Distributionstrace -L ${ofile} -k ${CODE_MACH_KMSG_INFO} -k ${CODE_MACH_PROC_EXEC} -k ${CODE_MACH_MSG_SEND} -k ${CODE_MACH_MSG_RECV} 25