[20260902]建立完善md5sum.bt脚本4.txt

--//再次做了改进，增加sql语句hash值的计算。
$ cat md5sum.bt
BEGIN
{
    printf("Tracing Oracle kggmd5Update... Target PID: %d\n", $1);
    printf("Hit Ctrl-C to stop.\n\n");
}

uprobe:/u01/app/oracle/product/21.0.0/dbhome_1/bin/oracle:kggmd5Finish
/ $1 == 0 || pid == $1 /
{
    @is_fin[pid] = 1;
//  printf("\nkggmd5Finish Begin\n");
}

uretprobe:/u01/app/oracle/product/21.0.0/dbhome_1/bin/oracle:kggmd5Finish
/ $1 == 0 || pid == $1 /
{
    delete(@is_fin[pid]);
//  printf("kggmd5Finish End\n");
}

uprobe:/u01/app/oracle/product/21.0.0/dbhome_1/bin/oracle:kgscComputeHash
/ $1 == 0 || pid == $1 /
{
    printf("\nkgscComputeHash Begin\n");
}

uretprobe:/u01/app/oracle/product/21.0.0/dbhome_1/bin/oracle:kgscComputeHash
/ $1 == 0 || pid == $1 /
{
    printf("\033[1;32m[%s] kgscComputeHash #%02d pid=%d return hash_valuer=%08lx %lu \033[0m\n", strftime("%H:%M:%S", nsecs), @kgg, pid,retval,retval);
    printf("kgscComputeHash END\n");
}

uprobe:/u01/app/oracle/product/21.0.0/dbhome_1/bin/oracle:kglComputeHash0
/ $1 == 0 || pid == $1 /
{
    printf("\nkglComputeHash0 Begin\n");
}

uretprobe:/u01/app/oracle/product/21.0.0/dbhome_1/bin/oracle:kglComputeHash0
/ $1 == 0 || pid == $1 /
{
    printf("\033[1;31m[%s] kglComputeHash0 #%02d pid=%d return hash_valuer=%08lx %lu \033[0m\n", strftime("%H:%M:%S", nsecs), @kgg, pid,retval,retval);
    //printf("[%s] kglComputeHash0 #%02d pid=%d return hash_valuer=%08lx %lu\n", strftime("%H:%M:%S", nsecs), @kgg, pid,retval,retval);
    printf("kglComputeHash0 End\n");
}

uprobe:/u01/app/oracle/product/21.0.0/dbhome_1/bin/oracle:kggmd5Update
/ $1 == 0 || pid == $1 /
{
    @kgg++;
    @is_kgg[pid] = 1;
    if (@is_fin[pid] != 1 ){
        printf("[%s] kggmd5Update #%02d pid=%d ptr=%016lx hash_text=%s length=%d\n", strftime("%H:%M:%S", nsecs), @kgg, pid,arg1,buf(arg1,arg2), arg2);
    }
}

// uretprobe:/u01/app/oracle/product/21.0.0/dbhome_1/bin/oracle:kggmd5Update
// / $1 == 0 || pid == $1 /
// {
//     if (@is_kgg[pid] == 1) {
//         printf("[%s] kggmd5Update #%02d pid=%d return hash_value=%016lx %lu\n", strftime("%H:%M:%S", nsecs), @kgg,pid, retval, retval);
//         delete(@is_kgg[pid]);
//     }
// }

END
{
    printf("\nTotal kggmd5Update: %d\n", @kgg);
    delete(@kgg);

}

--//测试结果：

# bpftrace md5sum.bt 3267
Attached 9 probes
Tracing Oracle kggmd5Update... Target PID: 3267
Hit Ctrl-C to stop.


kgscComputeHash Begin
[16:12:08] kggmd5Update #01 pid=3267 ptr=00007ffebe970048 hash_text=select * from dept where deptno=141\x00 length=36
[16:12:08] kgscComputeHash #03 pid=3267 return hash_valuer=82611d49 2187402569
kgscComputeHash END

kglComputeHash0 Begin
[16:12:08] kggmd5Update #04 pid=3267 ptr=00007ffebe96ceb0 hash_text=0a17868f851ab61a32cb81ef82611d49 length=32
[16:12:08] kggmd5Update #05 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #06 pid=3267 ptr=00000000169340b0 hash_text=$BUILD$ length=7
[16:12:08] kggmd5Update #07 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #08 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #09 pid=3267 ptr=00007ffebe96c670 hash_text=R\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #11 pid=3267 return hash_valuer=1a7f7263 444559971
kglComputeHash0 End

kglComputeHash0 Begin
[16:12:08] kggmd5Update #12 pid=3267 ptr=00007ffebe96b0b0 hash_text=0a17868f851ab61a32cb81ef82611d49 length=32
[16:12:08] kggmd5Update #13 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #14 pid=3267 ptr=00007ffebe96b0dc hash_text=Child:0 length=7
[16:12:08] kggmd5Update #15 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #16 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #17 pid=3267 ptr=00007ffebe969f20 hash_text=K\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #19 pid=3267 return hash_valuer=870efcb6 2265906358
kglComputeHash0 End

kglComputeHash0 Begin
[16:12:08] kggmd5Update #20 pid=3267 ptr=00007ffebe96af26 hash_text=SCOTT length=5
[16:12:08] kggmd5Update #21 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #22 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #23 pid=3267 ptr=00007ffebe96a640 hash_text=I\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #25 pid=3267 return hash_valuer=3726d9e7 925293031
kglComputeHash0 End

kglComputeHash0 Begin
[16:12:08] kggmd5Update #26 pid=3267 ptr=00007ffebe96bbe6 hash_text=SCOTT length=5
[16:12:08] kggmd5Update #27 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #28 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #29 pid=3267 ptr=00007ffebe96b300 hash_text=I\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #31 pid=3267 return hash_valuer=3726d9e7 925293031
kglComputeHash0 End

kglComputeHash0 Begin
[16:12:08] kggmd5Update #32 pid=3267 ptr=00007ffa27ad35de hash_text=DEPT length=4
[16:12:08] kggmd5Update #33 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #34 pid=3267 ptr=00007ffebe9613f2 hash_text=SCOTT length=5
[16:12:08] kggmd5Update #35 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #36 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #37 pid=3267 ptr=00007ffebe95feb0 hash_text=\x01\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #39 pid=3267 return hash_valuer=0edb820c 249266700
kglComputeHash0 End

kglComputeHash0 Begin
[16:12:08] kggmd5Update #40 pid=3267 ptr=00000000639e1680 hash_text=DEPT length=4
[16:12:08] kggmd5Update #41 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #42 pid=3267 ptr=00000000639e1684 hash_text=SCOTT length=5
[16:12:08] kggmd5Update #43 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #44 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #45 pid=3267 ptr=00007ffebe960790 hash_text=\x01\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #47 pid=3267 return hash_valuer=0edb820c 249266700

kglComputeHash0 Begin
[16:12:08] kggmd5Update #48 pid=3267 ptr=00000000639e1680 hash_text=DEPT length=4
[16:12:08] kggmd5Update #49 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #50 pid=3267 ptr=00000000639e1684 hash_text=SCOTT length=5
[16:12:08] kggmd5Update #51 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #52 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #53 pid=3267 ptr=00007ffebe960790 hash_text=\x01\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #55 pid=3267 return hash_valuer=0edb820c 249266700
kglComputeHash0 End

kglComputeHash0 Begin
[16:12:08] kggmd5Update #56 pid=3267 ptr=00000000639e1680 hash_text=DEPT length=4
[16:12:08] kggmd5Update #57 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #58 pid=3267 ptr=00000000639e1684 hash_text=SCOTT length=5
[16:12:08] kggmd5Update #59 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #60 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #61 pid=3267 ptr=00007ffebe960790 hash_text=\x01\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #63 pid=3267 return hash_valuer=0edb820c 249266700
kglComputeHash0 End
[16:12:08] kggmd5Update #64 pid=3267 ptr=00007ffa243f80d0 hash_text=SELECT * FROM DEPT WHERE DEPTNO = 141 length=37
[16:12:08] kggmd5Update #67 pid=3267 ptr=00007ffa27add750 hash_text=SELECT * FROM DEPT WHERE DEPTNO = :"SYS_B_0" length=44

kglComputeHash0 Begin
[16:12:08] kggmd5Update #70 pid=3267 ptr=00007ffebe9625e0 hash_text=DEPT length=4
[16:12:08] kggmd5Update #71 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #72 pid=3267 ptr=00007ffebe962746 hash_text=SCOTT length=5
[16:12:08] kggmd5Update #73 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #74 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #75 pid=3267 ptr=00007ffebe961850 hash_text=\x01\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #77 pid=3267 return hash_valuer=0edb820c 249266700
kglComputeHash0 End

kglComputeHash0 Begin
[16:12:08] kggmd5Update #78 pid=3267 ptr=00007ffebe96b190 hash_text=356430430180546253 length=18
[16:12:08] kggmd5Update #79 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #80 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #81 pid=3267 ptr=00007ffebe96a520 hash_text=h\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #83 pid=3267 return hash_valuer=373664a6 926311590
kglComputeHash0 End

kglComputeHash0 Begin
[16:12:08] kggmd5Update #84 pid=3267 ptr=00007ffebe96a8b8 hash_text=7574277674127661070 length=19
[16:12:08] kggmd5Update #85 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #86 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #87 pid=3267 ptr=00007ffebe969fe0 hash_text=\x89\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #89 pid=3267 return hash_valuer=a30519bf 2735020479
kglComputeHash0 End

kglComputeHash0 Begin
[16:12:08] kggmd5Update #90 pid=3267 ptr=00007ffebe96a988 hash_text=4204170303842060717 length=19
[16:12:08] kggmd5Update #91 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #92 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #93 pid=3267 ptr=00007ffebe96a0b0 hash_text=\x89\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #95 pid=3267 return hash_valuer=37691ae5 929635045
kglComputeHash0 End

kglComputeHash0 Begin
[16:12:08] kggmd5Update #96 pid=3267 ptr=00007ffebe96a988 hash_text=5467474030038125289 length=19
[16:12:08] kggmd5Update #97 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #98 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #99 pid=3267 ptr=00007ffebe96a0b0 hash_text=\x89\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #101 pid=3267 return hash_valuer=f0bef5b1 4039046577
kglComputeHash0 End

kglComputeHash0 Begin
[16:12:08] kggmd5Update #102 pid=3267 ptr=00007ffebe96adf8 hash_text=7574277674127661070 length=19
[16:12:08] kggmd5Update #103 pid=3267 ptr=00000000154f4ffc hash_text=. length=1
[16:12:08] kggmd5Update #104 pid=3267 ptr=000000007e73657c hash_text=BOOK01P length=7
[16:12:08] kggmd5Update #105 pid=3267 ptr=00007ffebe96a520 hash_text=\x89\x00\x00\x00 length=4
[16:12:08] kglComputeHash0 #107 pid=3267 return hash_valuer=a30519bf 2735020479
kglComputeHash0 End