Struct SyscallRecord 

pub struct SyscallRecord {
    pub pre: EventIndex,
    pub post: Option<EventIndex>,
    pub tid: DetTid,
    pub pid: DetPid,
    pub nth: u64,
    pub sysno: Sysno,
    pub args: [u64; 6],
    pub result: Option<i64>,
    pub accesses: Vec<Access>,
    pub returned: Option<ReturnedBytes>,
    pub out_bytes: Option<Vec<u8>>,
}

One syscall, from its prehook event to its posthook event.

Fields

pre: EventIndex

Index of the syscall’s prehook event.

post: Option<EventIndex>

Index of its posthook event; None when the call never returned to the guest (exit, exit_group, a successful execve, or a thread that died inside it).

tid: DetTid

Calling thread.

pid: DetPid

Calling thread’s process.

nth: u64

The calling thread’s syscall count including this call (1 for its first). A restarted call is counted, and recorded, again.

sysno: Sysno

The syscall, written by name so a trace reads the same on any architecture.

args: [u64; 6]

Raw argument registers.

result: Option<i64>

The value the guest received: the result, or the negated errno. None when Self::post is None.

accesses: Vec<Access>

Resources the call used, created or released, in the order of its arguments.

returned: Option<ReturnedBytes>

The bytes the kernel returned through guest buffers (read, pread, readv, recv, recvmsg, …); None when the call returned none. Two runs whose calls return the same count but different bytes differ here.

out_bytes: Option<Vec<u8>>

The first OUT_BYTES_CAP bytes a successful write to fd 1 or 2 carried, hex-encoded on disk.

Trait Implementations

impl Clone for SyscallRecord

fn clone(&self) -> SyscallRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SyscallRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SyscallRecord

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SyscallRecord

impl PartialEq for SyscallRecord

fn eq(&self, other: &SyscallRecord) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SyscallRecord

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SyscallRecord