]> sourceware.org Git - systemtap.git/commitdiff
tapset/LKET/iosyscall.stp:
authorguanglei <guanglei>
Fri, 10 Nov 2006 07:39:32 +0000 (07:39 +0000)
committerguanglei <guanglei>
Fri, 10 Nov 2006 07:39:32 +0000 (07:39 +0000)
  add some trace aliases

tapset/LKET/register_event.stp:
register sys events in embedded c codes for stap to better optimize the generated codes

Update LKET man page accordingly

lket.5.in
tapset/LKET/Changelog
tapset/LKET/iosyscall.stp
tapset/LKET/register_event.stp

index c9b8253b9074d83e6de3169dd469fa8681291737..48ac0d812d5c80757d2dcf52c1df5d907795b293 100644 (file)
--- a/lket.5.in
+++ b/lket.5.in
@@ -29,7 +29,7 @@ user. Once the data has been collected, it is then post-processed
 according to the need of the user. Trace data can be processed in 
 various different ways to generate simple to complex reports.  
 
-.SH TRACE DATA FORMAT
+.SH BINARY TRACING
 
 By default, LKET will log the trace data in binary format.
 
@@ -46,6 +46,7 @@ generated by LKET into readable data in ascii format.
 uses the pre-cpu binary trace data files(stpd_cpu*) as inputs, and generates
 an output file named 
 .IR lket.out .
+or dump the trace data into MySQL database.
 See
 .IR lket-b2a (1) 
 manual page for more detail.
@@ -55,14 +56,25 @@ If you want LKET to log trace data in ASCII format directly, you should:
 stap \-D ASCII_TRACE ...
 .ESAMPLE
 
+.B *Notes*
+that in order to make 
+.I LKET 
+able to work in binary tracing mode, all strings logged by 
+.I LKET 
+should be NULL-terminated, which means you have
+to use "%0s" instead of "%s" for both user appended extra printing statements
+and _lket_trace() which is called in 
+.I LKET 
+tapsets.
+
 .SH EVENT REGISTER
 
 LKET provides a way to log the metadata of the trace data by events registering.
 
-Two function is provided:
+Two functions is provided:
 .P
 .IP 
-.SB register_sys_event(event_desc:string, grpid:long, hookid:long, fmt:string, names:string)
+.SB void _register_sys_event (char *event_desc, int grpid, int hookid, char *fmt, char *field_name)
 .IP
 .SB register_user_event(grpid:long, hookid:long, fmt:string, names:string)
 .P
@@ -94,30 +106,30 @@ The names contains in
 should match the format tokens contains in
 .I fmt
 
-.B register_sys_event 
-is used to register the newly added event hooks. For example, supposing you
+.B _register_sys_event is a c function which is used to register the newly 
+added trace hooks in LKET tapsets. For example, supposing you
 want to add a new event hook to trace the entry of sys_open, and you want
 this event hook to log the fd, flag and mode paremeters for you. You should
 add:
 
 .SAMPLE
-register_sys_event("iosyscall.open.entry",
-                GROUP_IOSYSCALL, HOOKID_IOSYSCALL_OPEN_ENTRY,
-                "STRING:INT32:INT32", "filename:flags:mode")
+_register_sys_event("iosyscall.open.entry",
+                     _GROUP_IOSYSCALL, 
+                     _HOOKID_IOSYSCALL_OPEN_ENTRY,
+                     "STRING:INT32:INT32", 
+                     "filename:flags:mode");
 .ESAMPLE
 
 into the function
 .B register_sys_events
 in LKET/register_event.stp
 
-
 .B register_user_event
-is used for user to add extra trace data for a event hook. See
-the section
+is a SystemTap script function which is used for user to add extra trace data 
+for a event hook. See the section
 .B CUSTOMIZED TRACE DATA
 for more detail
 
-
 .SH CUSTOMIZED TRACE DATA
 
 LKET provides a set of event hooks that log the predefined
@@ -173,7 +185,7 @@ to convert these binary trace data files into readable ascii format or dump them
 .IR lket-b2a (1)
 man page for more detail.
 
-.SH EVENT HOOKS
+.SH EVENT HOOKS AND TRACE DATA FORMAT
 
 The following sections enumerate the variety of event hooks implemented
 in LKET and their trace data format. The trace data generated by different
index 89e18e4816dd88858acdb6f21672f6bc7bb59ceb..ed24205a7d34df35e3245429f848b5884595f967 100644 (file)
@@ -1,3 +1,10 @@
+2006-11-10  Li Guanglei <guanglei@cn.ibm.com>
+
+       * iosyscall.stp: add some trace aliases
+       * register_event.stp: register sys events 
+       in embedded c codes for stap to better
+       optimize the generated codes.
+
 2006-11-09  Li Guanglei <guanglei@cn.ibm.com>
 
        * process.stp: make fork/execce trace hooks
index 4650cde78082bd9716855c71ae25cfc48ab433e7..3e1c60aae7055e0e1edea18daea023a714556585 100755 (executable)
@@ -60,6 +60,11 @@ probe addevent.iosyscall.return
 /*
   addevent.iosyscall.open.{entry,return}
 */
+probe addevent.iosyscall.open
+       = addevent.iosyscall.open.entry,
+       addevent.iosyscall.open.return
+{}
+
 probe addevent.iosyscall.open.entry
        += _addevent.iosyscall.open.entry
 {
@@ -98,6 +103,10 @@ function log_iosyscall_return(hookid:long, ret_val:long)
 /*
   addevent.iosyscall.close.{entry,return}
 */     
+probe addevent.iosyscall.close
+       = addevent.iosyscall.close.entry, addevent.iosyscall.close.return
+{}
+
 probe addevent.iosyscall.close.entry
        += _addevent.iosyscall.close.entry
 {
@@ -130,6 +139,10 @@ function log_iosyscall_close(hookid:long, fd:long)
 /*
   addevent.iosyscall.read.{entry,return}
 */
+probe addevent.iosyscall.read
+       = addevent.iosyscall.read.entry, addevent.iosyscall.read.return
+{}
+
 probe addevent.iosyscall.read.entry
        += _addevent.iosyscall.read.entry
 {
@@ -157,6 +170,10 @@ probe _addevent.iosyscall.read.return
 /*
   addevent.iosyscall.write.{entry,return}
 */     
+probe  addevent.iosyscall.write
+       = addevent.iosyscall.write.entry, addevent.iosyscall.write.return
+{}
+
 probe addevent.iosyscall.write.entry
        += _addevent.iosyscall.write.entry
 {
@@ -191,6 +208,10 @@ function log_iosyscall_read_write(hookid:long, fd:long, buf_uaddr:long,
 /*
   addevent.iosyscall.readv.{entry,return}
 */
+probe addevent.iosyscall.readv
+       = addevent.iosyscall.readv.entry, addevent.iosyscall.readv.return
+{}
+
 probe addevent.iosyscall.readv.entry
        += _addevent.iosyscall.readv.entry
 {
@@ -218,6 +239,10 @@ probe _addevent.iosyscall.readv.return
 /*
   addevent.iosyscall.writev.{entry,return}
 */
+probe addevent.iosyscall.writev
+       = addevent.iosyscall.writev.entry, addevent.iosyscall.writev.return
+{}
+
 probe addevent.iosyscall.writev.entry
        += _addevent.iosyscall.writev.entry
 {
@@ -252,6 +277,10 @@ function log_iosyscall_readv_writev(hookid:long, fd:long,
 /*
   addevent.iosyscall.pread64.{entry,return}
 */
+probe addevent.iosyscall.pread64
+       = addevent.iosyscall.pread64.entry, addevent.iosyscall.pread64.return
+{}
+
 probe addevent.iosyscall.pread64.entry
        += _addevent.iosyscall.pread64.entry
 {
@@ -280,6 +309,10 @@ probe _addevent.iosyscall.pread64.return
 /*
   addevent.iosyscall.pwrite64.{entry,return}
 */
+probe addevent.iosyscall.pwrite64
+       = addevent.iosyscall.pwrite64.entry, addevent.iosyscall.pwrite64.return
+{}
+
 probe addevent.iosyscall.pwrite64.entry
        += _addevent.iosyscall.pwrite64.entry
 {
@@ -315,6 +348,10 @@ function log_iosyscall_pread64_pwrite64(hookid:long, fd:long,
 /*
   addevent.iosyscall.readahead.{entry,return}
 */
+probe addevent.iosyscall.readahead
+       = addevent.iosyscall.readahead.entry, addevent.iosyscall.readahead.return
+{}
+
 probe addevent.iosyscall.readahead.entry
        += _addevent.iosyscall.readahead.entry
 {
@@ -349,6 +386,10 @@ function log_iosyscall_readahead(hookid:long, fd:long, offset:long,count:long)
 /*
   addevent.iosyscall.sendfile.{entry,return}
 */
+probe addevent.iosyscall.sendfile
+       = addevent.iosyscall.sendfile.entry, addevent.iosyscall.sendfile.return
+{}
+
 probe addevent.iosyscall.sendfile.entry
        += _addevent.iosyscall.sendfile.entry
 {
@@ -385,6 +426,9 @@ function log_iosyscall_sendfile(hookid:long, out_fd:long, in_fd:long,
 /*
   addevent.iosyscall.lseek.{entry,return}
 */
+probe addevent.iosyscall.lseek
+       = addevent.iosyscall.lseek.entry, addevent.iosyscall.lseek.return
+{}
 
 probe addevent.iosyscall.lseek.entry
        += _addevent.iosyscall.lseek.entry
@@ -419,6 +463,10 @@ function log_iosyscall_lseek(hookid:long, fd:long, offset:long, whence:long)
 /*
   addevent.iosyscall.llseek.{entry,return}
 */
+probe addevent.iosyscall.llseek
+       = addevent.iosyscall.llseek.entry, addevent.iosyscall.llseek.return
+{}
+
 probe addevent.iosyscall.llseek.entry
        += _addevent.iosyscall.llseek.entry
 {
@@ -455,6 +503,9 @@ function log_iosyscall_llseek(hookid:long, fd:long, offset_high:long,
 /*
   addevent.iosyscall.sync.{entry,return}
 */
+probe addevent.iosyscall.sync
+       = addevent.iosyscall.sync.entry, addevent.iosyscall.sync.return
+{}
 
 probe addevent.iosyscall.sync.entry
        += _addevent.iosyscall.sync.entry
@@ -524,6 +575,9 @@ function log_iosyscall_sync(hookid:long)
 /*
   addevent.iosyscall.fsync.{entry,return}
 */
+probe addevent.iosyscall.fsync
+       = addevent.iosyscall.fsync.entry, addevent.iosyscall.fsync.return
+{}
 
 probe addevent.iosyscall.fsync.entry
        += _addevent.iosyscall.fsync.entry
@@ -552,6 +606,9 @@ probe _addevent.iosyscall.fsync.return
 /*
   addevent.iosyscall.fdatasync.{entry,return}
 */
+probe addevent.iosyscall.fdatasync
+       = addevent.iosyscall.fdatasync.entry, addevent.iosyscall.fdatasync.return
+{}
 
 probe addevent.iosyscall.fdatasync.entry
        += _addevent.iosyscall.fdatasync.entry
@@ -585,6 +642,9 @@ function log_iosyscall_fsync(hookid:long, fd:long)
 /*
   addevent.iosyscall.flock.{entry,return}
 */
+probe addevent.iosyscall.flock
+       = addevent.iosyscall.flock.entry, addevent.iosyscall.flock.return
+{}
 
 probe addevent.iosyscall.flock.entry
        += _addevent.iosyscall.flock.entry
index b4a1a47025bbc833f242d65420f45df44e8a5218..294487b7f328b1656edd8fa85f56d202abfac945 100755 (executable)
@@ -5,9 +5,9 @@
 // Public License (GPL); either version 2, or (at your option) any
 // later version.
 
-global sys_field_name, sys_evt_fmt, sys_event_desc
 global usr_field_name, usr_evt_fmt
 global have_userevent
+
 %{
 
 #define _MAXGROUPID  0xFF
@@ -25,132 +25,52 @@ int get_fmtcode(char *fmt)
                return 0;
 }
 
-%}
-
-function dummy_c_function()
-%{
-%}
-
-function register_user_event(grpid:long, hookid:long,fmt:string, field_name:string) 
-{
-       usr_evt_fmt[grpid, hookid] = fmt
-       usr_field_name[grpid, hookid] = field_name
-       dummy_c_function() /* ensure register_user_event won't be compiled away */
-}
-
-function register_sys_event(event_desc:string, grpid:long, hookid:long,fmt:string, 
-               field_name:string) 
-{
-       sys_event_desc[grpid, hookid] = event_desc;
-       sys_evt_fmt[grpid, hookid] = fmt
-       sys_field_name[grpid, hookid] = field_name
-       dummy_c_function() /* ensure register_user_event won't be compiled away */
-}
-
-
-function write_events_desc()
+void _register_event(int grpid, int hookid, int evt_type, char *fmt, char *names)
 {
-       foreach([grpid, hookid] in sys_evt_fmt)
-       {
-               register_evt_desc(grpid, hookid, HOOKID_REGEVTDESC,
-                       sys_event_desc[grpid, hookid])
-               register_event(grpid, hookid, HOOKID_REGSYSEVT, 
-                       sys_event_desc[grpid,hookid], sys_evt_fmt[grpid, hookid], 
-                       sys_field_name[grpid, hookid])
-       }
-       if(have_userevent == 1)
-       {
-               foreach([grpid, hookid] in usr_evt_fmt)
-               {
-                       register_event(grpid, hookid, HOOKID_REGUSREVT,
-                               sys_event_desc[grpid,hookid], usr_evt_fmt[grpid, hookid], 
-                               usr_field_name[grpid, hookid])
-               }
-               delete usr_field_name
-               delete usr_evt_fmt
-       }
-
-       delete sys_field_name
-       delete sys_evt_fmt
-       delete sys_event_desc
-}      
-
-function register_evt_desc(grpid:long, hookid:long, evt_type:long, desc:string)
-%{
-       _stp_pbuf * pb;
-       char *total_length;
-        int cpu = smp_processor_id();
-
-       if(!strncmp(THIS->desc,"",1))  {
-               _stp_warn("empty event description for grpid:%d, hookid:%d\n",
-                       THIS->grpid, THIS->hookid);
-               _stp_exit();
-       }
-
-       if( THIS->grpid <= 0 || THIS->grpid > _MAXGROUPID ||
-               THIS->hookid <= 0 || THIS->hookid > _MAXHOOKID)  {
-               _stp_warn("register_evt_desc: wrong range in groupid/hookid, type: %d, event: %s, grp:%d, hkid:%d\n", THIS->evt_type, THIS->desc, THIS->grpid, THIS->hookid);
-               _stp_exit();
-               _stp_exit();
-       }
-
-       _lket_trace(_GROUP_REGEVT, THIS->evt_type, "%1b%1b%0s", THIS->grpid,
-               THIS->hookid, THIS->desc); 
-
-#if !defined(ASCII_TRACE)
-        pb = per_cpu_ptr(Stp_pbuf, smp_processor_id());
-       total_length = &(pb->buf[0]);
-       *(int16_t *)total_length = pb->len - 4;
-#endif
-       _stp_print_flush();
-%}
-
-function register_event(grpid:long, hookid:long, evt_type:long, desc:string, 
-                       fmt:string, names:string)
-%{
        char in_fmt[512], in_name[512];
        char *p_in_fmt, *p_in_name;
-       char *fmt, *name;
+       char *_fmt, *name;
        _stp_pbuf * pb;
         int cpu = smp_processor_id();
        char *total_length;
        p_in_fmt = in_fmt;
        p_in_name = in_name;
 
-       if(!strncmp(THIS->fmt,"",1) && !strncmp(THIS->names,"",1)) {
-               _lket_trace(_GROUP_REGEVT,THIS->evt_type,"%1b%1b",THIS->grpid,THIS->hookid); 
+       if(!strncmp(fmt,"",1) && !strncmp(names,"",1)) {
+               _lket_trace(_GROUP_REGEVT,evt_type,"%1b%1b",grpid,hookid); 
                goto reg_epilogue;
        }
 
-       if( THIS->grpid <= 0 || THIS->grpid > _MAXGROUPID ||
-               THIS->hookid <= 0 || THIS->hookid > _MAXHOOKID)  {
-               _stp_warn("register_event: wrong range in groupid/hookid, type: %d, event: %s, grp:%d, hkid:%d\n", THIS->evt_type, THIS->desc, THIS->grpid, THIS->hookid);
+       if( grpid <= 0 || grpid > _MAXGROUPID ||
+               hookid <= 0 || hookid > _MAXHOOKID)  {
+               _stp_warn("register_event: wrong groupid/hookid, type: %d, grp:%d, hkid:%d\n", 
+                       evt_type, grpid, hookid);
                _stp_exit();
        }
 
-       strncpy(in_fmt, THIS->fmt, 512);
-       strncpy(in_name, THIS->names, 512);
+       strncpy(in_fmt, fmt, 512);
+       strncpy(in_name, names, 512);
 
-       fmt = strsep(&p_in_fmt, ":");
+       _fmt = strsep(&p_in_fmt, ":");
        name = strsep(&p_in_name, ":");
 
-       while(fmt!=NULL && name!=NULL)  {
-               if(get_fmtcode(fmt) == -1)  {
+       while(_fmt!=NULL && name!=NULL)  {
+               if(get_fmtcode(_fmt) == -1)  {
                        _stp_warn("error in fmt string\n");
                        _stp_exit();
                }
-               fmt = strsep(&p_in_fmt, ":");
+               _fmt = strsep(&p_in_fmt, ":");
                name = strsep(&p_in_name, ":");
        }
 
-       if(fmt!=NULL || name != NULL)  {
+       if(_fmt!=NULL || name != NULL)  {
                _stp_warn("unpaired types/names, grpid:%d, hookid:%d\n",
-                       THIS->grpid, THIS->hookid);
+                       grpid, hookid);
                _stp_exit();
        }
 
-       _lket_trace(_GROUP_REGEVT, THIS->evt_type, "%1b%1b%0s%0s", THIS->grpid,
-               THIS->hookid, THIS->fmt, THIS->names); 
+       _lket_trace(_GROUP_REGEVT, evt_type, "%1b%1b%0s%0s", grpid,
+               hookid, fmt, names); 
 
 reg_epilogue:
 
@@ -161,882 +81,946 @@ reg_epilogue:
 #endif
        _stp_print_flush();
 
+}
+
+void _register_evt_desc(int grpid, int hookid, int evt_type, char *desc)
+{
+       _stp_pbuf * pb;
+       char *total_length;
+        int cpu = smp_processor_id();
+
+       if(!strncmp(desc,"",1))  {
+               _stp_warn("empty event description for grpid:%d, hookid:%d\n",
+                       grpid, hookid);
+               _stp_exit();
+       }
+
+       if( grpid <= 0 || grpid > _MAXGROUPID ||
+               hookid <= 0 || hookid > _MAXHOOKID)  {
+               _stp_warn("_register_evt_desc: wrong groupid/hookid, type: %d, event: %s, grp:%d, hkid:%d\n", 
+                       evt_type, desc, grpid, hookid);
+               _stp_exit();
+               _stp_exit();
+       }
+
+       _lket_trace(_GROUP_REGEVT, evt_type, "%1b%1b%0s", grpid, hookid, desc); 
+
+#if !defined(ASCII_TRACE)
+        pb = per_cpu_ptr(Stp_pbuf, smp_processor_id());
+       total_length = &(pb->buf[0]);
+       *(int16_t *)total_length = pb->len - 4;
+#endif
+       _stp_print_flush();
+}
+
+void _register_sys_event (char *event_desc, int grpid, int hookid, char *fmt, char *field_name)
+{
+       _register_evt_desc(grpid, hookid, _HOOKID_REGEVTDESC, event_desc);
+       _register_event(grpid, hookid, _HOOKID_REGSYSEVT, fmt, field_name);
+}
+
 %}
 
-function register_sys_events()
+function dummy_c_function()
+%{
+%}
+
+function register_user_event(grpid:long, hookid:long,fmt:string, field_name:string) 
+{
+       usr_evt_fmt[grpid, hookid] = fmt
+       usr_field_name[grpid, hookid] = field_name
+       dummy_c_function() /* ensure register_user_event won't be compiled away */
+}
+
+function write_events_desc()
 {
-       reset_maxaction()
+       if(have_userevent == 1)
+       {
+               foreach([grpid, hookid] in usr_evt_fmt)
+               {
+                       register_event(grpid, hookid, HOOKID_REGUSREVT,
+                               usr_evt_fmt[grpid, hookid], 
+                               usr_field_name[grpid, hookid])
+               }
+               delete usr_field_name
+               delete usr_evt_fmt
+       }
+
+}      
+
 
-       register_sys_event("syscall.entry", GROUP_SYSCALL, HOOKID_SYSCALL_ENTRY, 
-               "STRING", "syscall")
-       register_sys_event("syscall.return", GROUP_SYSCALL, HOOKID_SYSCALL_RETURN,
-               "STRING", "syscall")
+function register_event(grpid:long, hookid:long, evt_type:long, fmt:string, names:string)
+%{
+       _register_event(THIS->grpid, THIS->hookid, THIS->evt_type, THIS->fmt, THIS->names);
+%}
+
+function register_sys_events()
+%{
+       _register_sys_event("syscall.entry", _GROUP_SYSCALL, _HOOKID_SYSCALL_ENTRY, 
+               "STRING", "syscall");
+       _register_sys_event("syscall.return", _GROUP_SYSCALL, _HOOKID_SYSCALL_RETURN,
+               "STRING", "syscall");
                
-       register_sys_event("process_snapshot", GROUP_PROCESS, HOOKID_PROCESS_SNAPSHOT,
-               "INT32:INT32:INT32:STRING", "tid:pid:ppid:pname")
-       register_sys_event("process.execve", GROUP_PROCESS, HOOKID_PROCESS_EXECVE,
-               "INT32:STRING", "pid:pname")
-       register_sys_event("process.fork", GROUP_PROCESS, HOOKID_PROCESS_FORK,
-               "INT32:INT32:INT32", "tid:pid:ppid")
-
-       register_sys_event("ioscheduler.elv_next_request.entry",
-               GROUP_IOSCHED, HOOKID_IOSCHED_NEXT_REQ_ENTRY,
-               "STRING", "elv_name")
-       register_sys_event("ioscheduler.elv_next_request.return",
-               GROUP_IOSCHED, HOOKID_IOSCHED_NEXT_REQ_RETURN,
-               "INT8:INT8:INT64:INT64", "major:minor:req_addr:req_flags")
-
-
-       register_sys_event("ioscheduler.elv_add_request",
-               GROUP_IOSCHED, HOOKID_IOSCHED_ADD_REQ,
-               "STRING:INT8:INT8:INT64:INT64", "elv_name:major:minor:request:req_flags")
-       register_sys_event("ioscheduler.elv_completed_request",
-               GROUP_IOSCHED, HOOKID_IOSCHED_COMPLETE_REQ,
-               "STRING:INT8:INT8:INT64:INT64", "elv_name:major:minor:request:req_flags")
-
-       register_sys_event("tskdispatch.ctxswitch",
-               GROUP_TASK, HOOKID_TASK_CTXSWITCH,
-               "INT32:INT32:INT8", "prev_pid:next_pid:prev_state")
-       register_sys_event("tskdispatch.cpuidle", GROUP_TASK, HOOKID_TASK_CPUIDLE,
-               "INT32", "cur_pid")
-
-       register_sys_event("scsi.ioentry", GROUP_SCSI, HOOKID_SCSI_IOENTRY,
-               "INT8:INT8:INT8:INT64", "major:minor:sdev_state:request_addr")
-
-       register_sys_event("scsi.iodispatching", GROUP_SCSI, HOOKID_SCSI_IO_TO_LLD,
+       _register_sys_event("process_snapshot", _GROUP_PROCESS, _HOOKID_PROCESS_SNAPSHOT,
+               "INT32:INT32:INT32:STRING", "tid:pid:ppid:pname");
+       _register_sys_event("process.execve", _GROUP_PROCESS, _HOOKID_PROCESS_EXECVE,
+               "INT32:STRING", "pid:pname");
+       _register_sys_event("process.fork", _GROUP_PROCESS, _HOOKID_PROCESS_FORK,
+               "INT32:INT32:INT32", "tid:pid:ppid");
+
+       _register_sys_event("ioscheduler.elv_next_request.entry",
+               _GROUP_IOSCHED, _HOOKID_IOSCHED_NEXT_REQ_ENTRY,
+               "STRING", "elv_name");
+       _register_sys_event("ioscheduler.elv_next_request.return",
+               _GROUP_IOSCHED, _HOOKID_IOSCHED_NEXT_REQ_RETURN,
+               "INT8:INT8:INT64:INT64", "major:minor:req_addr:req_flags");
+
+
+       _register_sys_event("ioscheduler.elv_add_request",
+               _GROUP_IOSCHED, _HOOKID_IOSCHED_ADD_REQ,
+               "STRING:INT8:INT8:INT64:INT64", "elv_name:major:minor:request:req_flags");
+       _register_sys_event("ioscheduler.elv_completed_request",
+               _GROUP_IOSCHED, _HOOKID_IOSCHED_COMPLETE_REQ,
+               "STRING:INT8:INT8:INT64:INT64", "elv_name:major:minor:request:req_flags");
+
+       _register_sys_event("tskdispatch.ctxswitch",
+               _GROUP_TASK, _HOOKID_TASK_CTXSWITCH,
+               "INT32:INT32:INT8", "prev_pid:next_pid:prev_state");
+       _register_sys_event("tskdispatch.cpuidle", _GROUP_TASK, _HOOKID_TASK_CPUIDLE,
+               "INT32", "cur_pid");
+
+       _register_sys_event("scsi.ioentry", _GROUP_SCSI, _HOOKID_SCSI_IOENTRY,
+               "INT8:INT8:INT8:INT64", "major:minor:sdev_state:request_addr");
+
+       _register_sys_event("scsi.iodispatching", _GROUP_SCSI, _HOOKID_SCSI_IO_TO_LLD,
                "INT8:INT8:INT8:INT8:INT8:INT8:INT64:INT32:INT64",
-               "host:channel:lun:dev_id:dev_state:data_dir:reqbuf_addr:reqbuf_len:request_addr")
+               "host:channel:lun:dev_id:dev_state:data_dir:reqbuf_addr:reqbuf_len:request_addr");
 
-       register_sys_event("scsi.iodone", GROUP_SCSI, HOOKID_SCSI_IODONE_BY_LLD,
+       _register_sys_event("scsi.iodone", _GROUP_SCSI, _HOOKID_SCSI_IODONE_BY_LLD,
                "INT8:INT8:INT8:INT8:INT8:INT8:INT64", 
-               "host:channel:lun:dev_id:dev_state:data_dir:request_addr")
+               "host:channel:lun:dev_id:dev_state:data_dir:request_addr");
 
-       register_sys_event("scsi.iocompleted", 
-               GROUP_SCSI, HOOKID_SCSI_IOCOMP_BY_MIDLEVEL,
+       _register_sys_event("scsi.iocompleted", 
+               _GROUP_SCSI, _HOOKID_SCSI_IOCOMP_BY_MIDLEVEL,
                "INT8:INT8:INT8:INT8:INT8:INT8:INT64:INT32", 
-               "host:channel:lun:dev_id:dev_state:data_dir:request_addr:done_bytes")
-
-       register_sys_event("pagefault", GROUP_PAGEFAULT, HOOKID_PAGEFAULT,
-               "INT64:INT8", "addr:write")
-
-       register_sys_event("netdev.receive", GROUP_NETDEV, HOOKID_NETDEV_RECEIVE,
-               "STRING:INT32:INT16:INT32", "dev_name:data_len:protocol:buff_size")
-
-       register_sys_event("netdev.transmit", GROUP_NETDEV, HOOKID_NETDEV_TRANSMIT,
-               "STRING:INT32:INT16:INT32", "dev_name:data_len:protocol:buff_size")
-
-       register_sys_event("iosyscall.open.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_OPEN_ENTRY,
-               "STRING:INT32:INT32", "filename:flags:mode")
-       register_sys_event("iosyscall.open.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_OPEN_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.close.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_CLOSE_ENTRY,
-               "INT64", "fd")
-       register_sys_event("iosyscall.close.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_CLOSE_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.read.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READ_ENTRY,
-               "INT64:INT64:INT64", "fd:buff_addr:count")
-       register_sys_event("iosyscall.read.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READ_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.write.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITE_ENTRY,
-               "INT64:INT64:INT64", "fd:buff_addr:count")
-       register_sys_event("iosyscall.write.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITE_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.readv.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READV_ENTRY,
-               "INT64:INT64:INT64", "fd:vector_uaddr:count")
-       register_sys_event("iosyscall.readv.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READV_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.writev.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITEV_ENTRY,
-               "INT64:INT64:INT64", "fd:vector_uaddr:count")
-       register_sys_event("iosyscall.writev.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITEV_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.pread64.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PREAD64_ENTRY,
-               "INT64:INT64:INT64:INT64", "fd:buff_uaddr:count:offset")
-       register_sys_event("iosyscall.pread64.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PREAD64_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.pwrite64.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PWRITE64_ENTRY,
-               "INT64:INT64:INT64:INT64", "fd:buff_uaddr:count:offset")
-       register_sys_event("iosyscall.pwrite64.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PWRITE64_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.readahead.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READAHEAD_ENTRY,
-               "INT64:INT64:INT64", "fd:offset:count")
-       register_sys_event("iosyscall.readahead.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READAHEAD_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.sendfile.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SENDFILE_ENTRY,
-               "INT64:INT64:INT64:INT64", "out_fd:in_fd:offset_uaddr:count")
-       register_sys_event("iosyscall.sendfile.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SENDFILE_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.lseek.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LSEEK_ENTRY,
-               "INT64:INT64:INT8", "fd:offset:whence")
-       register_sys_event("iosyscall.lseek.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LSEEK_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.llseek.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LLSEEK_ENTRY,
+               "host:channel:lun:dev_id:dev_state:data_dir:request_addr:done_bytes");
+
+       _register_sys_event("pagefault", _GROUP_PAGEFAULT, _HOOKID_PAGEFAULT,
+               "INT64:INT8", "addr:write");
+
+       _register_sys_event("netdev.receive", _GROUP_NETDEV, _HOOKID_NETDEV_RECEIVE,
+               "STRING:INT32:INT16:INT32", "dev_name:data_len:protocol:buff_size");
+
+       _register_sys_event("netdev.transmit", _GROUP_NETDEV, _HOOKID_NETDEV_TRANSMIT,
+               "STRING:INT32:INT16:INT32", "dev_name:data_len:protocol:buff_size");
+
+       _register_sys_event("iosyscall.open.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_OPEN_ENTRY,
+               "STRING:INT32:INT32", "filename:flags:mode");
+       _register_sys_event("iosyscall.open.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_OPEN_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.close.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_CLOSE_ENTRY,
+               "INT64", "fd");
+       _register_sys_event("iosyscall.close.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_CLOSE_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.read.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READ_ENTRY,
+               "INT64:INT64:INT64", "fd:buff_addr:count");
+       _register_sys_event("iosyscall.read.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READ_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.write.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_WRITE_ENTRY,
+               "INT64:INT64:INT64", "fd:buff_addr:count");
+       _register_sys_event("iosyscall.write.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_WRITE_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.readv.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READV_ENTRY,
+               "INT64:INT64:INT64", "fd:vector_uaddr:count");
+       _register_sys_event("iosyscall.readv.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READV_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.writev.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_WRITEV_ENTRY,
+               "INT64:INT64:INT64", "fd:vector_uaddr:count");
+       _register_sys_event("iosyscall.writev.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_WRITEV_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.pread64.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_PREAD64_ENTRY,
+               "INT64:INT64:INT64:INT64", "fd:buff_uaddr:count:offset");
+       _register_sys_event("iosyscall.pread64.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_PREAD64_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.pwrite64.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_PWRITE64_ENTRY,
+               "INT64:INT64:INT64:INT64", "fd:buff_uaddr:count:offset");
+       _register_sys_event("iosyscall.pwrite64.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_PWRITE64_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.readahead.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READAHEAD_ENTRY,
+               "INT64:INT64:INT64", "fd:offset:count");
+       _register_sys_event("iosyscall.readahead.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READAHEAD_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.sendfile.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_SENDFILE_ENTRY,
+               "INT64:INT64:INT64:INT64", "out_fd:in_fd:offset_uaddr:count");
+       _register_sys_event("iosyscall.sendfile.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_SENDFILE_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.lseek.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_LSEEK_ENTRY,
+               "INT64:INT64:INT8", "fd:offset:whence");
+       _register_sys_event("iosyscall.lseek.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_LSEEK_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.llseek.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_LLSEEK_ENTRY,
                "INT64:INT64:INT64:INT64:INT8b", 
-               "fd:offset_high:offset_low:result_uaddr:whence")
-       register_sys_event("iosyscall.llseek.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LLSEEK_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.sync.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SYNC_ENTRY,
-               "", "")
-
-       register_sys_event("iosyscall.sync.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SYNC_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.fsync.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FSYNC_ENTRY,
-               "INT64", "fd")
-       register_sys_event("iosyscall.fsync.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FSYNC_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.fdatasync.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FDATASYNC_ENTRY,
-               "INT64", "fd")
-       register_sys_event("iosyscall.fdatasync.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FDATASYNC_RETURN,
-               "INT64", "return")
-
-       register_sys_event("iosyscall.flock.entry",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FLOCK_ENTRY,
-               "INT64:INT32", "fd:operation")
-       register_sys_event("iosyscall.flock.return",
-               GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FLOCK_RETURN,
-               "INT64", "return")
-
-       register_sys_event("aio.io_setup.entry",
-               GROUP_AIO, HOOKID_AIO_IO_SETUP_ENTRY,
-               "INT32:INT64", "nr_events:ctxp_uaddr")
-       register_sys_event("aio.io_setup.return",
-               GROUP_AIO, HOOKID_AIO_IO_SETUP_RETURN,
-               "INT64", "return")
-
-       register_sys_event("aio.io_submit.entry",
-               GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ENTRY,
-               "INT64:INT32:INT64", "ctx_id:nr:iocbpp_uaddr")
-       register_sys_event("aio.io_submit.return",
-               GROUP_AIO, HOOKID_AIO_IO_SUBMIT_RETURN,
-               "INT64", "return")
-
-       register_sys_event("aio.io_submit_one.entry",
-               GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ONE_ENTRY,
+               "fd:offset_high:offset_low:result_uaddr:whence");
+       _register_sys_event("iosyscall.llseek.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_LLSEEK_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.sync.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_SYNC_ENTRY,
+               "", "");
+
+       _register_sys_event("iosyscall.sync.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_SYNC_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.fsync.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FSYNC_ENTRY,
+               "INT64", "fd");
+       _register_sys_event("iosyscall.fsync.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FSYNC_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.fdatasync.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FDATASYNC_ENTRY,
+               "INT64", "fd");
+       _register_sys_event("iosyscall.fdatasync.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FDATASYNC_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("iosyscall.flock.entry",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FLOCK_ENTRY,
+               "INT64:INT32", "fd:operation");
+       _register_sys_event("iosyscall.flock.return",
+               _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FLOCK_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("aio.io_setup.entry",
+               _GROUP_AIO, _HOOKID_AIO_IO_SETUP_ENTRY,
+               "INT32:INT64", "nr_events:ctxp_uaddr");
+       _register_sys_event("aio.io_setup.return",
+               _GROUP_AIO, _HOOKID_AIO_IO_SETUP_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("aio.io_submit.entry",
+               _GROUP_AIO, _HOOKID_AIO_IO_SUBMIT_ENTRY,
+               "INT64:INT32:INT64", "ctx_id:nr:iocbpp_uaddr");
+       _register_sys_event("aio.io_submit.return",
+               _GROUP_AIO, _HOOKID_AIO_IO_SUBMIT_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("aio.io_submit_one.entry",
+               _GROUP_AIO, _HOOKID_AIO_IO_SUBMIT_ONE_ENTRY,
                "INT64:INT64:INT16:INT16:INT32:INT64:INT64:INT64", 
-               "ctx:user_iocb_uaddr:aio_lio_opcode:aio_reqprio:aio_fildes:aio_buf:aio_nbytes:aio_offset")
-       register_sys_event("aio.io_submit_one.return",
-               GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ONE_RETURN,
-               "INT64", "return")
-
-       register_sys_event("aio.io_destroy.entry",
-               GROUP_AIO, HOOKID_AIO_IO_DESTROY_ENTRY,
-               "INT64", "ctx")
-       register_sys_event("aio.io_destroy.return",
-               GROUP_AIO, HOOKID_AIO_IO_DESTROY_RETURN,
-               "INT64", "return")
-
-       register_sys_event("aio.io_getevents.entry",
-               GROUP_AIO, HOOKID_AIO_IO_GETEVENTS_ENTRY,
+               "ctx:user_iocb_uaddr:aio_lio_opcode:aio_reqprio:aio_fildes:aio_buf:aio_nbytes:aio_offset");
+       _register_sys_event("aio.io_submit_one.return",
+               _GROUP_AIO, _HOOKID_AIO_IO_SUBMIT_ONE_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("aio.io_destroy.entry",
+               _GROUP_AIO, _HOOKID_AIO_IO_DESTROY_ENTRY,
+               "INT64", "ctx");
+       _register_sys_event("aio.io_destroy.return",
+               _GROUP_AIO, _HOOKID_AIO_IO_DESTROY_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("aio.io_getevents.entry",
+               _GROUP_AIO, _HOOKID_AIO_IO_GETEVENTS_ENTRY,
                "INT64:INT32:INT32:INT64:INT32:INT32", 
-               "ctx_id:min_nr:nr:events_uaddr:tv_sec:tv_nsec")
-       register_sys_event("aio.io_getevents.return",
-               GROUP_AIO, HOOKID_AIO_IO_GETEVENTS_RETURN,
-               "INT64", "return")
+               "ctx_id:min_nr:nr:events_uaddr:tv_sec:tv_nsec");
+       _register_sys_event("aio.io_getevents.return",
+               _GROUP_AIO, _HOOKID_AIO_IO_GETEVENTS_RETURN,
+               "INT64", "return");
 
-       register_sys_event("aio.io_cancel.entry",
-               GROUP_AIO, HOOKID_AIO_IO_CANCEL_ENTRY,
+       _register_sys_event("aio.io_cancel.entry",
+               _GROUP_AIO, _HOOKID_AIO_IO_CANCEL_ENTRY,
                "INT64:INT64:INT64", 
-               "ctx_id:iocb_uaddr:result_uaddr")
-       register_sys_event("aio.io_cancel.return",
-               GROUP_AIO, HOOKID_AIO_IO_CANCEL_RETURN,
-               "INT64", "return")
-
-       reset_maxaction()
-
-       register_sys_event("signal.send.entry",
-               GROUP_SIGNAL, HOOKID_SIGNAL_SEND_ENTRY,
-               "INT8:INT8:INT8:INT32", "sig:shared:send2queue:pid")
-       register_sys_event("signal.send.return",
-               GROUP_SIGNAL, HOOKID_SIGNAL_SEND_RETURN,
-               "INT8", "return")
-
-       register_sys_event("signal.syskill.entry",
-               GROUP_SIGNAL, HOOKID_SIGNAL_SYSKILL_ENTRY,
-               "INT32:INT8", "pid:sig")
-       register_sys_event("signal.syskill.return",
-               GROUP_SIGNAL, HOOKID_SIGNAL_SYSKILL_RETURN,
-               "INT8", "return")
-
-       register_sys_event("signal.systgkill.entry",
-               GROUP_SIGNAL, HOOKID_SIGNAL_SYSTGKILL_ENTRY,
-               "INT32:INT32:INT8", "tid:pid:sig")
-       register_sys_event("signal.systgkill.return",
-               GROUP_SIGNAL, HOOKID_SIGNAL_SYSTGKILL_RETURN,
-               "INT8", "return")
-
-       register_sys_event("signal.systkill.entry",
-               GROUP_SIGNAL, HOOKID_SIGNAL_SYSTKILL_ENTRY,
-               "INT32:INT8", "pid:sig")
-       register_sys_event("signal.systkill.return",
-               GROUP_SIGNAL, HOOKID_SIGNAL_SYSTKILL_RETURN,
-               "INT8", "return")
-
-       register_sys_event("signal.pending.entry",
-               GROUP_SIGNAL, HOOKID_SIGNAL_PENDING_ENTRY,
-               "INT32:INT32", "sigset_addr:setsize");
-       register_sys_event("signal.pending.return",
-               GROUP_SIGNAL, HOOKID_SIGNAL_PENDING_RETURN,
-               "INT8", "return")
-
-       register_sys_event("signal.do_action.entry",
-               GROUP_SIGNAL, HOOKID_SIGNAL_DOACTION_ENTRY,
-               "INT8:INT64", "sig:handler")
-       register_sys_event("signal.do_action.return",
-               GROUP_SIGNAL, HOOKID_SIGNAL_DOACTION_RETURN,
-               "INT16", "return")
-
-       register_sys_event("signal.procmask.entry",
-               GROUP_SIGNAL, HOOKID_SIGNAL_PROC_MASK_ENTRY,
-               "INT8:INT64", "how:sigset")
-       register_sys_event("signal.procmask.return",
-               GROUP_SIGNAL, HOOKID_SIGNAL_PROC_MASK_RETURN,
-               "INT8", "return")
-
-       register_sys_event("signal.flush.entry",
-               GROUP_SIGNAL, HOOKID_SIGNAL_FLUSH_ENTRY,
-               "INT32", "pid")
-
-       register_sys_event("sunrpc.clnt.create_client.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CREATE_CLIENT_ENTRY, 
+               "ctx_id:iocb_uaddr:result_uaddr");
+       _register_sys_event("aio.io_cancel.return",
+               _GROUP_AIO, _HOOKID_AIO_IO_CANCEL_RETURN,
+               "INT64", "return");
+
+
+       _register_sys_event("signal.send.entry",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_SEND_ENTRY,
+               "INT8:INT8:INT8:INT32", "sig:shared:send2queue:pid");
+       _register_sys_event("signal.send.return",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_SEND_RETURN,
+               "INT8", "return");
+
+       _register_sys_event("signal.syskill.entry",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSKILL_ENTRY,
+               "INT32:INT8", "pid:sig");
+       _register_sys_event("signal.syskill.return",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSKILL_RETURN,
+               "INT8", "return");
+
+       _register_sys_event("signal.systgkill.entry",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSTGKILL_ENTRY,
+               "INT32:INT32:INT8", "tid:pid:sig");
+       _register_sys_event("signal.systgkill.return",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSTGKILL_RETURN,
+               "INT8", "return");
+
+       _register_sys_event("signal.systkill.entry",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSTKILL_ENTRY,
+               "INT32:INT8", "pid:sig");
+       _register_sys_event("signal.systkill.return",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSTKILL_RETURN,
+               "INT8", "return");
+
+       _register_sys_event("signal.pending.entry",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_PENDING_ENTRY,
+               "INT32:INT32", "sigset_addr:setsize");;
+       _register_sys_event("signal.pending.return",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_PENDING_RETURN,
+               "INT8", "return");
+
+       _register_sys_event("signal.do_action.entry",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_DOACTION_ENTRY,
+               "INT8:INT64", "sig:handler");
+       _register_sys_event("signal.do_action.return",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_DOACTION_RETURN,
+               "INT16", "return");
+
+       _register_sys_event("signal.procmask.entry",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_PROC_MASK_ENTRY,
+               "INT8:INT64", "how:sigset");
+       _register_sys_event("signal.procmask.return",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_PROC_MASK_RETURN,
+               "INT8", "return");
+
+       _register_sys_event("signal.flush.entry",
+               _GROUP_SIGNAL, _HOOKID_SIGNAL_FLUSH_ENTRY,
+               "INT32", "pid");
+
+       _register_sys_event("sunrpc.clnt.create_client.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CREATE_CLIENT_ENTRY, 
                "STRING:INT64:INT8:INT16:INT16:INT8",
-               "server:prog:vers:prot:port:authflavor")
-       register_sys_event("sunrpc.clnt.create_client.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CREATE_CLIENT_RETURN, 
-               "INT64", "return")
+               "server:prog:vers:prot:port:authflavor");
+       _register_sys_event("sunrpc.clnt.create_client.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CREATE_CLIENT_RETURN, 
+               "INT64", "return");
 
-       register_sys_event("sunrpc.clnt.clone_client.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CLONE_CLIENT_ENTRY, 
+       _register_sys_event("sunrpc.clnt.clone_client.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CLONE_CLIENT_ENTRY, 
                "STRING:INT64:INT16:INT16:INT32",
-               "server:prog:tasks:clones:rpccount")
-       register_sys_event("sunrpc.clnt.clone_client.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CLONE_CLIENT_RETURN,
-               "INT64", "return")
+               "server:prog:tasks:clones:rpccount");
+       _register_sys_event("sunrpc.clnt.clone_client.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CLONE_CLIENT_RETURN,
+               "INT64", "return");
 
-       register_sys_event("sunrpc.clnt.shutdown_client.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_ENTRY, 
+       _register_sys_event("sunrpc.clnt.shutdown_client.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_ENTRY, 
                "STRING:INT64:INT16:INT16:INT32",
-               "server:prog:clones:tasks:rpccount")
-       register_sys_event("sunrpc.clnt.shutdown_client.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_RETURN,
-               "INT8", "void")
+               "server:prog:clones:tasks:rpccount");
+       _register_sys_event("sunrpc.clnt.shutdown_client.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_RETURN,
+               "INT8", "void");
 
-       register_sys_event("sunrpc.clnt.bind_new_program.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_ENTRY,
+       _register_sys_event("sunrpc.clnt.bind_new_program.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_ENTRY,
                "STRING:INT64:INT8:INT64:INT8",
-               "server:old_prog:old_vers:new_prog:new_vers")
-       register_sys_event("sunrpc.clnt.bind_new_program.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_RETURN,
-               "INT64", "return")
+               "server:old_prog:old_vers:new_prog:new_vers");
+       _register_sys_event("sunrpc.clnt.bind_new_program.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_RETURN,
+               "INT64", "return");
 
-       register_sys_event("sunrpc.clnt.call_sync.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_SYNC_ENTRY,
+       _register_sys_event("sunrpc.clnt.call_sync.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CALL_SYNC_ENTRY,
                "STRING:INT64:INT8:INT64:INT64",
-               "server:prog:vers:proc:flags")
-       register_sys_event("sunrpc.clnt.call_sync.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_SYNC_RETURN,
-               "INT64", "return")
+               "server:prog:vers:proc:flags");
+       _register_sys_event("sunrpc.clnt.call_sync.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CALL_SYNC_RETURN,
+               "INT64", "return");
 
-       register_sys_event("sunrpc.clnt.call_async.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_ASYNC_ENTRY,
+       _register_sys_event("sunrpc.clnt.call_async.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CALL_ASYNC_ENTRY,
                "STRING:INT64:INT8:INT64:INT64",
-               "server:prog:vers:proc:flags")
-       register_sys_event("sunrpc.clnt.call_async.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_ASYNC_RETURN,
-               "INT64", "return")
-
-       register_sys_event("sunrpc.clnt.restart_call.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_RESTART_CALL_ENTRY,
-               "INT64:INT64", "tk_pid:tk_flags")
+               "server:prog:vers:proc:flags");
+       _register_sys_event("sunrpc.clnt.call_async.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CALL_ASYNC_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("sunrpc.clnt.restart_call.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_RESTART_CALL_ENTRY,
+               "INT64:INT64", "tk_pid:tk_flags");
        
-       register_sys_event("sunrpc.clnt.restart_call.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_RESTART_CALL_RETURN,
-               "INT8", "void")
+       _register_sys_event("sunrpc.clnt.restart_call.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_RESTART_CALL_RETURN,
+               "INT8", "void");
 
-       register_sys_event("sunrpc.svc.register.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_REGISTER_ENTRY,
+       _register_sys_event("sunrpc.svc.register.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_REGISTER_ENTRY,
                "STRING:INT64:INT16:INT32",
-               "service:program:protocol:prot")
-       register_sys_event("sunrpc.svc.register.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_REGISTER_RETURN,
-               "INT64", "return")
+               "service:program:protocol:prot");
+       _register_sys_event("sunrpc.svc.register.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_REGISTER_RETURN,
+               "INT64", "return");
 
-       register_sys_event("sunrpc.svc.create.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_CREATE_ENTRY,
+       _register_sys_event("sunrpc.svc.create.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_CREATE_ENTRY,
                "INT64:INT8:INT8",
-               "program:high_version:num_versions")
-       register_sys_event("sunrpc.svc.create.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_CREATE_RETURN,
-               "INT64", "return")
+               "program:high_version:num_versions");
+       _register_sys_event("sunrpc.svc.create.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_CREATE_RETURN,
+               "INT64", "return");
                        
-       register_sys_event("sunrpc.svc.destroy.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DESTROY_ENTRY,
+       _register_sys_event("sunrpc.svc.destroy.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_DESTROY_ENTRY,
                "STRING:INT64:INT32",
-               "service:program:num_threads")
+               "service:program:num_threads");
 
-       register_sys_event("sunrpc.svc.destroy.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DESTROY_RETURN,
-               "INT8", "void")
+       _register_sys_event("sunrpc.svc.destroy.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_DESTROY_RETURN,
+               "INT8", "void");
                        
-       register_sys_event("sunrpc.svc.process.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_PROCESS_ENTRY,
+       _register_sys_event("sunrpc.svc.process.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_PROCESS_ENTRY,
                "STRING:INT64:INT64:INT64:INT64:INT8:INT8",
-               "service:sv_prog:peer_ip:rq_xid:rq_prog:rq_vers:rq_proc")
-       register_sys_event("sunrpc.svc.process.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_PROCESS_RETURN,
-               "INT64", "return")
+               "service:sv_prog:peer_ip:rq_xid:rq_prog:rq_vers:rq_proc");
+       _register_sys_event("sunrpc.svc.process.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_PROCESS_RETURN,
+               "INT64", "return");
 
-       register_sys_event("sunrpc.svc.authorise.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_AUTHORISE_ENTRY,
+       _register_sys_event("sunrpc.svc.authorise.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_AUTHORISE_ENTRY,
                "INT64:INT64:INT64:INT8:INT64",
-               "peer_ip:xid:prog:vers:proc")
-       register_sys_event("sunrpc.svc.authorise.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_AUTHORISE_RETURN,
-               "INT64", "return")
+               "peer_ip:xid:prog:vers:proc");
+       _register_sys_event("sunrpc.svc.authorise.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_AUTHORISE_RETURN,
+               "INT64", "return");
 
-       register_sys_event("sunrpc.svc.send.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_SEND_ENTRY,
+       _register_sys_event("sunrpc.svc.send.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_SEND_ENTRY,
                "STRING:INT64:INT64:INT64:INT64:INT8:INT64",
-               "sv_name:peer_ip:sv_prog:xid:prog:vers:proc")
-       register_sys_event("sunrpc.svc.send.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_SEND_RETURN,
-               "INT64", "return")
-
-       register_sys_event("sunrpc.svc.recv.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_RECV_ENTRY,
-               "STRING:INT64", "sv_name:timeout")
+               "sv_name:peer_ip:sv_prog:xid:prog:vers:proc");
+       _register_sys_event("sunrpc.svc.send.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_SEND_RETURN,
+               "INT64", "return");
+
+       _register_sys_event("sunrpc.svc.recv.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_RECV_ENTRY,
+               "STRING:INT64", "sv_name:timeout");
        
-       register_sys_event("sunrpc.svc.recv.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_RECV_RETURN,
-               "INT64", "return")
+       _register_sys_event("sunrpc.svc.recv.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_RECV_RETURN,
+               "INT64", "return");
 
-       register_sys_event("sunrpc.svc.drop.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DROP_ENTRY,
+       _register_sys_event("sunrpc.svc.drop.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_DROP_ENTRY,
                "STRING:INT64:INT64:INT64:INT8:INT64",
-               "sv_name:peer_ip:xid:prog:vers:proc")
+               "sv_name:peer_ip:xid:prog:vers:proc");
        
-       register_sys_event("sunrpc.svc.drop.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DROP_RETURN,
-               "INT8", "void")
+       _register_sys_event("sunrpc.svc.drop.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_DROP_RETURN,
+               "INT8", "void");
 
-       register_sys_event("sunrpc.sched.new_task.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_NEW_TASK_ENTRY,
+       _register_sys_event("sunrpc.sched.new_task.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_NEW_TASK_ENTRY,
                "INT64:INT64:INT8:INT64:INT64",
-               "xid:prog:vers:prot:flags")
-       register_sys_event("sunrpc.sched.new_task.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_NEW_TASK_RETURN,
-               "INT64", "return")
+               "xid:prog:vers:prot:flags");
+       _register_sys_event("sunrpc.sched.new_task.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_NEW_TASK_RETURN,
+               "INT64", "return");
 
-       register_sys_event("sunrpc.sched.release_task.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_RELEASE_TASK_ENTRY,
+       _register_sys_event("sunrpc.sched.release_task.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_RELEASE_TASK_ENTRY,
                "INT64:INT64:INT8:INT64:INT64",
-               "xid:prog:vers:prot:flags")
-       register_sys_event("sunrpc.sched.release_task.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_RELEASE_TASK_RETURN,
-               "INT8", "void")
+               "xid:prog:vers:prot:flags");
+       _register_sys_event("sunrpc.sched.release_task.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_RELEASE_TASK_RETURN,
+               "INT8", "void");
 
-       register_sys_event("sunrpc.sched.execute.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_EXECUTE_ENTRY,
+       _register_sys_event("sunrpc.sched.execute.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_EXECUTE_ENTRY,
                "INT64:INT64:INT8:INT64:INT64:INT64",
-               "xid:prog:vers:prot:tk_pid:tk_flags")
-       register_sys_event("sunrpc.sched.execute.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_EXECUTE_RETURN,
-               "INT64", "return")
+               "xid:prog:vers:prot:tk_pid:tk_flags");
+       _register_sys_event("sunrpc.sched.execute.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_EXECUTE_RETURN,
+               "INT64", "return");
 
-       register_sys_event("sunrpc.sched.delay.entry",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_DELAY_ENTRY,
+       _register_sys_event("sunrpc.sched.delay.entry",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_DELAY_ENTRY,
                "INT64:INT64:INT64:INT64:INT64",
-               "xid:prog:tk_pid:tk_flags:delay")
-       register_sys_event("sunrpc.sched.delay.return",
-               GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_DELAY_RETURN,
-               "INT8", "void")
+               "xid:prog:tk_pid:tk_flags:delay");
+       _register_sys_event("sunrpc.sched.delay.return",
+               _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_DELAY_RETURN,
+               "INT8", "void");
 
-       register_sys_event("cpu_freq",
-               GROUP_CPUFREQ, HOOKID_SWITCH_CPUFREQ,
-               "INT64", "cpufreq")             
+       _register_sys_event("cpu_freq",
+               _GROUP_CPUFREQ, _HOOKID_SWITCH_CPUFREQ,
+               "INT64", "cpufreq");            
 
-       register_sys_event("nfs.fop.llseek.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_LLSEEK_ENTRY,
+       _register_sys_event("nfs.fop.llseek.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_LLSEEK_ENTRY,
                 "INT8:INT8:INT64:INT64:INT8",
-               "major:minor:ino:offset:origin")
-       register_sys_event("nfs.fop.llseek.return",
-               GROUP_NFS, HOOKID_NFS_FOP_LLSEEK_RETURN,
-                "INT32","return")
+               "major:minor:ino:offset:origin");
+       _register_sys_event("nfs.fop.llseek.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_LLSEEK_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.fop.read.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_READ_ENTRY,
+       _register_sys_event("nfs.fop.read.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_READ_ENTRY,
                 "INT8:INT8:INT64:INT64:INT64:INT64",
-               "major:minor:ino:buf:len:pos")          
-       register_sys_event("nfs.fop.read.return",
-               GROUP_NFS, HOOKID_NFS_FOP_READ_RETURN,
-                "INT32","return")      
+               "major:minor:ino:buf:len:pos");         
+       _register_sys_event("nfs.fop.read.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_READ_RETURN,
+                "INT32","return");     
 
-       register_sys_event("nfs.fop.write.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_WRITE_ENTRY,
+       _register_sys_event("nfs.fop.write.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_WRITE_ENTRY,
                 "INT8:INT8:INT64:INT64:INT64:INT64",
-               "major:minor:ino:buf:len:pos")          
-       register_sys_event("nfs.fop.write.return",
-               GROUP_NFS, HOOKID_NFS_FOP_WRITE_RETURN,
-                "INT32","return")      
+               "major:minor:ino:buf:len:pos");         
+       _register_sys_event("nfs.fop.write.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_WRITE_RETURN,
+                "INT32","return");     
 
-       register_sys_event("nfs.fop.aio_read.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_AIOREAD_ENTRY,
+       _register_sys_event("nfs.fop.aio_read.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_AIOREAD_ENTRY,
                 "INT8:INT8:INT64:INT64:INT64:INT64",
-               "major:minor:ino:buf:len:pos")          
-       register_sys_event("nfs.fop.aio_read.return",
-               GROUP_NFS, HOOKID_NFS_FOP_AIOREAD_RETURN,
-                "INT32","return")
+               "major:minor:ino:buf:len:pos");         
+       _register_sys_event("nfs.fop.aio_read.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_AIOREAD_RETURN,
+                "INT32","return");
        
-       register_sys_event("nfs.fop.aio_write.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_AIOWRITE_ENTRY,
+       _register_sys_event("nfs.fop.aio_write.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_AIOWRITE_ENTRY,
                 "INT8:INT8:INT64:INT64:INT64:INT64",
-               "major:minor:ino:buf:len:pos")          
-       register_sys_event("nfs.fop.aio_write.return",
-               GROUP_NFS, HOOKID_NFS_FOP_AIOWRITE_RETURN,
-                "INT32","return")
+               "major:minor:ino:buf:len:pos");         
+       _register_sys_event("nfs.fop.aio_write.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_AIOWRITE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.fop.mmap.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_MMAP_ENTRY,
+       _register_sys_event("nfs.fop.mmap.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_MMAP_ENTRY,
                 "INT8:INT8:INT64:INT64:INT64:INT32",
-               "major:minor:ino:vm_start:vm_end:vm_flags")             
-       register_sys_event("nfs.fop.mmap.return",
-               GROUP_NFS, HOOKID_NFS_FOP_MMAP_RETURN,
-                "INT32","return")
+               "major:minor:ino:vm_start:vm_end:vm_flags");            
+       _register_sys_event("nfs.fop.mmap.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_MMAP_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.fop.open.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_OPEN_ENTRY,
+       _register_sys_event("nfs.fop.open.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_OPEN_ENTRY,
                 "INT8:INT8:INT64:INT32:STRING",
-               "major:minor:ino:flag:filename")                
-       register_sys_event("nfs.fop.open.return",
-               GROUP_NFS, HOOKID_NFS_FOP_OPEN_RETURN,
-                "INT32","return")
+               "major:minor:ino:flag:filename");               
+       _register_sys_event("nfs.fop.open.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_OPEN_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.fop.flush.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_FLUSH_ENTRY,
+       _register_sys_event("nfs.fop.flush.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_FLUSH_ENTRY,
                 "INT8:INT8:INT64:INT32",
-               "major:minor:ino:ndirty")               
-       register_sys_event("nfs.fop.flush.return",
-               GROUP_NFS, HOOKID_NFS_FOP_FLUSH_RETURN,
-                "INT32","return")
+               "major:minor:ino:ndirty");              
+       _register_sys_event("nfs.fop.flush.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_FLUSH_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.fop.release.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_RELEASE_ENTRY,
+       _register_sys_event("nfs.fop.release.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_RELEASE_ENTRY,
                 "INT8:INT8:INT64:INT16",
-               "major:minor:ino:mode")         
-       register_sys_event("nfs.fop.release.return",
-               GROUP_NFS, HOOKID_NFS_FOP_RELEASE_RETURN,
-                "INT32","return")
+               "major:minor:ino:mode");                
+       _register_sys_event("nfs.fop.release.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_RELEASE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.fop.fsync.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_FSYNC_ENTRY,
+       _register_sys_event("nfs.fop.fsync.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_FSYNC_ENTRY,
                 "INT8:INT8:INT64:INT32",
-               "major:minor:ino:ndirty")               
-       register_sys_event("nfs.fop.fsync.return",
-               GROUP_NFS, HOOKID_NFS_FOP_FSYNC_RETURN,
-                "INT32","return")
+               "major:minor:ino:ndirty");              
+       _register_sys_event("nfs.fop.fsync.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_FSYNC_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.fop.lock.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_LOCK_ENTRY,
+       _register_sys_event("nfs.fop.lock.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_LOCK_ENTRY,
                 "INT8:INT8:INT64:INT64:INT64:INT8:INT8:INT32",
-               "major:minor:ino:fl_start:fl_end:fl_type:fl_flag:cmd")          
-       register_sys_event("nfs.fop.lock.return",
-               GROUP_NFS, HOOKID_NFS_FOP_LOCK_RETURN,
-                "INT32","return")
+               "major:minor:ino:fl_start:fl_end:fl_type:fl_flag:cmd");         
+       _register_sys_event("nfs.fop.lock.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_LOCK_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.fop.sendfile.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_SENDFILE_ENTRY,
+       _register_sys_event("nfs.fop.sendfile.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_SENDFILE_ENTRY,
                 "INT8:INT8:INT64:INT64:INT64",
-               "major:minor:ino:count:pos")            
-       register_sys_event("nfs.fop.sendfile.return",
-               GROUP_NFS, HOOKID_NFS_FOP_SENDFILE_RETURN,
-                "INT32","return")
-
-       register_sys_event("nfs.fop.check_flags.entry",
-               GROUP_NFS, HOOKID_NFS_FOP_CHECKFLAGS_ENTRY,
-                "INT32","flag")                
-       register_sys_event("nfs.fop.check_flags.return",
-               GROUP_NFS, HOOKID_NFS_FOP_CHECKFLAGS_RETURN,
-                "INT32","return")
-
-       register_sys_event("nfs.aop.readpage.entry",
-               GROUP_NFS, HOOKID_NFS_AOP_READPAGE_ENTRY,
+               "major:minor:ino:count:pos");           
+       _register_sys_event("nfs.fop.sendfile.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_SENDFILE_RETURN,
+                "INT32","return");
+
+       _register_sys_event("nfs.fop.check_flags.entry",
+               _GROUP_NFS, _HOOKID_NFS_FOP_CHECKFLAGS_ENTRY,
+                "INT32","flag");               
+       _register_sys_event("nfs.fop.check_flags.return",
+               _GROUP_NFS, _HOOKID_NFS_FOP_CHECKFLAGS_RETURN,
+                "INT32","return");
+
+       _register_sys_event("nfs.aop.readpage.entry",
+               _GROUP_NFS, _HOOKID_NFS_AOP_READPAGE_ENTRY,
                 "INT64:INT32:INT64:INT64",
-               "ino:rsize:__page:page_index")          
-       register_sys_event("nfs.aop.readpage.return",
-               GROUP_NFS, HOOKID_NFS_AOP_READPAGE_RETURN,
-                "INT32","return")
+               "ino:rsize:__page:page_index");         
+       _register_sys_event("nfs.aop.readpage.return",
+               _GROUP_NFS, _HOOKID_NFS_AOP_READPAGE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.aop.readpages.entry",
-               GROUP_NFS, HOOKID_NFS_AOP_READPAGES_ENTRY,
+       _register_sys_event("nfs.aop.readpages.entry",
+               _GROUP_NFS, _HOOKID_NFS_AOP_READPAGES_ENTRY,
                 "INT64:INT32:INT32",
-               "ino:rpages:nr_pages")          
-       register_sys_event("nfs.aop.readpages.return",
-               GROUP_NFS, HOOKID_NFS_AOP_READPAGES_RETURN,
-                "INT32","return")
+               "ino:rpages:nr_pages");         
+       _register_sys_event("nfs.aop.readpages.return",
+               _GROUP_NFS, _HOOKID_NFS_AOP_READPAGES_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.aop.writepage.entry",
-               GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGE_ENTRY,
+       _register_sys_event("nfs.aop.writepage.entry",
+               _GROUP_NFS, _HOOKID_NFS_AOP_WRITEPAGE_ENTRY,
                 "INT64:INT32:INT64:INT64",
-               "ino:wsize:__page:page_index")          
-       register_sys_event("nfs.aop.writepage.return",
-               GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGE_RETURN,
-                "INT32","return")
+               "ino:wsize:__page:page_index");         
+       _register_sys_event("nfs.aop.writepage.return",
+               _GROUP_NFS, _HOOKID_NFS_AOP_WRITEPAGE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.aop.writepages.entry",
-               GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGES_ENTRY,
+       _register_sys_event("nfs.aop.writepages.entry",
+               _GROUP_NFS, _HOOKID_NFS_AOP_WRITEPAGES_ENTRY,
                 "INT64:INT32:INT64",
-               "ino:wpages:nr_to_write")               
-       register_sys_event("nfs.aop.writepages.return",
-               GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGES_RETURN,
-                "INT32","return")
+               "ino:wpages:nr_to_write");              
+       _register_sys_event("nfs.aop.writepages.return",
+               _GROUP_NFS, _HOOKID_NFS_AOP_WRITEPAGES_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.aop.prepare_write.entry",
-               GROUP_NFS, HOOKID_NFS_AOP_PREPAREWRITE_ENTRY,
+       _register_sys_event("nfs.aop.prepare_write.entry",
+               _GROUP_NFS, _HOOKID_NFS_AOP_PREPAREWRITE_ENTRY,
                 "INT64:INT64:INT64",
-               "ino:__page:page_index")                
-       register_sys_event("nfs.aop.prepare_write.return",
-               GROUP_NFS, HOOKID_NFS_AOP_PREPAREWRITE_RETURN,
-                "INT32","return")
+               "ino:__page:page_index");               
+       _register_sys_event("nfs.aop.prepare_write.return",
+               _GROUP_NFS, _HOOKID_NFS_AOP_PREPAREWRITE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.aop.commit_write.entry",
-               GROUP_NFS, HOOKID_NFS_AOP_COMMITWRITE_ENTRY,
+       _register_sys_event("nfs.aop.commit_write.entry",
+               _GROUP_NFS, _HOOKID_NFS_AOP_COMMITWRITE_ENTRY,
                 "INT64:INT64:INT64:INT32:INT32",
-               "ino:__page:page_index:offset:count")           
-       register_sys_event("nfs.aop.commit_write.return",
-               GROUP_NFS, HOOKID_NFS_AOP_COMMITWRITE_RETURN,
-                "INT32","return")
+               "ino:__page:page_index:offset:count");          
+       _register_sys_event("nfs.aop.commit_write.return",
+               _GROUP_NFS, _HOOKID_NFS_AOP_COMMITWRITE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.aop.set_page_dirty.entry",
-               GROUP_NFS, HOOKID_NFS_AOP_SETPAGEDIRTY_ENTRY,
+       _register_sys_event("nfs.aop.set_page_dirty.entry",
+               _GROUP_NFS, _HOOKID_NFS_AOP_SETPAGEDIRTY_ENTRY,
                 "INT64:INT8",
-               "__page:page_flag")             
-       register_sys_event("nfs.aop.set_page_dirty.return",
-               GROUP_NFS, HOOKID_NFS_AOP_SETPAGEDIRTY_RETURN,
-                "INT32","return")
+               "__page:page_flag");            
+       _register_sys_event("nfs.aop.set_page_dirty.return",
+               _GROUP_NFS, _HOOKID_NFS_AOP_SETPAGEDIRTY_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.aop.release_page.entry",
-               GROUP_NFS, HOOKID_NFS_AOP_RELEASEPAGE_ENTRY,
+       _register_sys_event("nfs.aop.release_page.entry",
+               _GROUP_NFS, _HOOKID_NFS_AOP_RELEASEPAGE_ENTRY,
                 "INT64:INT64",
-               "__page:page_index")            
-       register_sys_event("nfs.aop.release_page.return",
-               GROUP_NFS, HOOKID_NFS_AOP_RELEASEPAGE_RETURN,
-                "INT32","return")
+               "__page:page_index");           
+       _register_sys_event("nfs.aop.release_page.return",
+               _GROUP_NFS, _HOOKID_NFS_AOP_RELEASEPAGE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.lookup.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_LOOKUP_ENTRY,
+       _register_sys_event("nfs.proc.lookup.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_LOOKUP_ENTRY,
                 "INT8:INT8:INT64:INT8:STRING",
-               "major_device:minor_device:fileid:version:filename")            
-       register_sys_event("nfs.proc.lookup.return",
-               GROUP_NFS, HOOKID_NFS_PROC_LOOKUP_RETURN,
-                "INT32","return")
+               "major_device:minor_device:fileid:version:filename");           
+       _register_sys_event("nfs.proc.lookup.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_LOOKUP_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.read.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_READ_ENTRY,
+       _register_sys_event("nfs.proc.read.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_READ_ENTRY,
                 "INT8:INT8:INT64:INT8:INT32:INT64",
-               "major_device:minor_device:fileid:version:count:offset")        
-       register_sys_event("nfs.proc.read.return",
-               GROUP_NFS, HOOKID_NFS_PROC_READ_RETURN,
-                "INT32","return")
+               "major_device:minor_device:fileid:version:count:offset");       
+       _register_sys_event("nfs.proc.read.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_READ_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.write.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_WRITE_ENTRY,
+       _register_sys_event("nfs.proc.write.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_WRITE_ENTRY,
                 "INT8:INT8:INT64:INT8:INT32:INT64",
-               "major_device:minor_device:fileid:version:count:offset")        
-       register_sys_event("nfs.proc.write.return",
-               GROUP_NFS, HOOKID_NFS_PROC_WRITE_RETURN,
-                "INT32","return")
+               "major_device:minor_device:fileid:version:count:offset");       
+       _register_sys_event("nfs.proc.write.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_WRITE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.commit.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_COMMIT_ENTRY,
+       _register_sys_event("nfs.proc.commit.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_COMMIT_ENTRY,
                 "INT8:INT8:INT64:INT8:INT32:INT64",
-               "major_device:minor_device:fileid:version:count:offset")        
-       register_sys_event("nfs.proc.commit.return",
-               GROUP_NFS, HOOKID_NFS_PROC_COMMIT_RETURN,
-                "INT32","return")
+               "major_device:minor_device:fileid:version:count:offset");       
+       _register_sys_event("nfs.proc.commit.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_COMMIT_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.read_setup.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_READSETUP_ENTRY,
+       _register_sys_event("nfs.proc.read_setup.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_READSETUP_ENTRY,
                 "INT8:INT8:INT64:INT8:INT32:INT64",
-               "major_device:minor_device:fileid:version:count:offset")        
-       register_sys_event("nfs.proc.write_setup.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_WRITESETUP_ENTRY,
+               "major_device:minor_device:fileid:version:count:offset");       
+       _register_sys_event("nfs.proc.write_setup.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_WRITESETUP_ENTRY,
                 "INT8:INT8:INT64:INT8:INT8:INT32:INT64",
-               "major_device:minor_device:fileid:version:how:count:offset")    
+               "major_device:minor_device:fileid:version:how:count:offset");   
 
-       register_sys_event("nfs.proc.commit_setup.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_COMMITSETUP_ENTRY,
+       _register_sys_event("nfs.proc.commit_setup.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_COMMITSETUP_ENTRY,
                 "INT8:INT8:INT64:INT8:INT32:INT64",
-               "major_device:minor_device:fileid:version:count:offset")        
+               "major_device:minor_device:fileid:version:count:offset");       
 
-       register_sys_event("nfs.proc.read_done.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_READDONE_ENTRY,
+       _register_sys_event("nfs.proc.read_done.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_READDONE_ENTRY,
                 "INT8:INT8:INT64:INT8:INT32:INT32",
-               "major_device:minor_device:fileid:version:status:count")        
-       register_sys_event("nfs.proc.read_done.return",
-               GROUP_NFS, HOOKID_NFS_PROC_READDONE_RETURN,
-                "INT32","return")
+               "major_device:minor_device:fileid:version:status:count");       
+       _register_sys_event("nfs.proc.read_done.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_READDONE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.write_done.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_WRITEDONE_ENTRY,
+       _register_sys_event("nfs.proc.write_done.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_WRITEDONE_ENTRY,
                 "INT8:INT8:INT64:INT8:INT32:INT32",
-               "major_device:minor_device:fileid:version:status:count")        
-       register_sys_event("nfs.proc.write_done.return",
-               GROUP_NFS, HOOKID_NFS_PROC_WRITEDONE_RETURN,
-                "INT32","return")
+               "major_device:minor_device:fileid:version:status:count");       
+       _register_sys_event("nfs.proc.write_done.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_WRITEDONE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.commit_done.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_COMMITDONE_ENTRY,
+       _register_sys_event("nfs.proc.commit_done.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_COMMITDONE_ENTRY,
                 "INT8:INT8:INT64:INT8:INT32:INT32",
-               "major_device:minor_device:fileid:version:status:count")        
-       register_sys_event("nfs.proc.commit_done.return",
-               GROUP_NFS, HOOKID_NFS_PROC_COMMITDONE_RETURN,
-                "INT32","return")
+               "major_device:minor_device:fileid:version:status:count");       
+       _register_sys_event("nfs.proc.commit_done.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_COMMITDONE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.open.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_OPEN_ENTRY,
+       _register_sys_event("nfs.proc.open.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_OPEN_ENTRY,
                 "INT8:INT8:INT64:INT8:STRING:INT32:INT32",
-               "major_device:minor_device:fileid:version:filename:flag:mode")  
-       register_sys_event("nfs.proc.open.return",
-               GROUP_NFS, HOOKID_NFS_PROC_OPEN_RETURN,
-                "INT32","return")
+               "major_device:minor_device:fileid:version:filename:flag:mode"); 
+       _register_sys_event("nfs.proc.open.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_OPEN_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.release.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_RELEASE_ENTRY,
+       _register_sys_event("nfs.proc.release.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_RELEASE_ENTRY,
                 "INT8:INT8:INT64:INT8:STRING:INT32:INT32",
-               "major_device:minor_device:fileid:version:filename:flag:mode")  
-       register_sys_event("nfs.proc.release.return",
-               GROUP_NFS, HOOKID_NFS_PROC_RELEASE_RETURN,
-                "INT32","return")
+               "major_device:minor_device:fileid:version:filename:flag:mode"); 
+       _register_sys_event("nfs.proc.release.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_RELEASE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.create.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_CREATE_ENTRY,
+       _register_sys_event("nfs.proc.create.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_CREATE_ENTRY,
                 "INT8:INT8:INT64:INT8:STRING:INT32",
-               "major_device:minor_device:fileid:version:filename:mode")       
-       register_sys_event("nfs.proc.create.return",
-               GROUP_NFS, HOOKID_NFS_PROC_CREATE_RETURN,
-                "INT32","return")
+               "major_device:minor_device:fileid:version:filename:mode");      
+       _register_sys_event("nfs.proc.create.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_CREATE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.rename.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_RENAME_ENTRY,
+       _register_sys_event("nfs.proc.rename.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_RENAME_ENTRY,
                 "INT8:INT8:INT8:INT64:STRING:INT8:INT8:INT64:STRING",
-               "version:major_old:minor_old:fileid_old:filename_old:major_new:minor_new:fileid_new:filename_new")      
-       register_sys_event("nfs.proc.rename.return",
-               GROUP_NFS, HOOKID_NFS_PROC_RENAME_RETURN,
-                "INT32","return")
+               "version:major_old:minor_old:fileid_old:filename_old:major_new:minor_new:fileid_new:filename_new");     
+       _register_sys_event("nfs.proc.rename.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_RENAME_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.create.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_CREATE_ENTRY,
+       _register_sys_event("nfs.proc.create.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_CREATE_ENTRY,
                 "INT8:INT8:INT64:INT8:STRING",
-               "major_device:minor_device:fileid:version:filename")    
-       register_sys_event("nfs.proc.create.return",
-               GROUP_NFS, HOOKID_NFS_PROC_CREATE_RETURN,
-                "INT32","return")
+               "major_device:minor_device:fileid:version:filename");   
+       _register_sys_event("nfs.proc.create.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_CREATE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfs.proc.remove.entry",
-               GROUP_NFS, HOOKID_NFS_PROC_REMOVE_ENTRY,
+       _register_sys_event("nfs.proc.remove.entry",
+               _GROUP_NFS, _HOOKID_NFS_PROC_REMOVE_ENTRY,
                "INT8:INT8:INT64:INT8:STRING",
-               "major_dev:minor_dev:field_id:version:filename");
-       register_sys_event("nfs.proc.remove.return",
-               GROUP_NFS, HOOKID_NFS_PROC_REMOVE_RETURN,
-               "INT32", "return");
+               "major_dev:minor_dev:field_id:version:filename");;
+       _register_sys_event("nfs.proc.remove.return",
+               _GROUP_NFS, _HOOKID_NFS_PROC_REMOVE_RETURN,
+               "INT32", "return");;
 
-       reset_maxaction()
 
-       register_sys_event("nfsd.dispatch.entry",
-               GROUP_NFSD, HOOKID_NFSD_DISPATCH_ENTRY,
+       _register_sys_event("nfsd.dispatch.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_DISPATCH_ENTRY,
                 "INT8:INT8:INT32:INT32:INT32:INT32",
-               "proto:version:xid:proc:prog:client_ip")        
-       register_sys_event("nfsd.dispatch.return",
-               GROUP_NFSD, HOOKID_NFSD_DISPATCH_RETURN,
-                "INT32","return")      
+               "proto:version:xid:proc:prog:client_ip");       
+       _register_sys_event("nfsd.dispatch.return",
+               _GROUP_NFSD, _HOOKID_NFSD_DISPATCH_RETURN,
+                "INT32","return");     
 
-       register_sys_event("nfsd.open.entry",
-               GROUP_NFSD, HOOKID_NFSD_OPEN_ENTRY,
+       _register_sys_event("nfsd.open.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_OPEN_ENTRY,
                 "INT8:INT64:INT64:INT64:INT32:INT8",
-               "size:ino0:ino1:ino2:type:access")      
-       register_sys_event("nfsd.open.return",
-               GROUP_NFSD, HOOKID_NFSD_OPEN_RETURN,
-                "INT32","return")      
+               "size:ino0:ino1:ino2:type:access");     
+       _register_sys_event("nfsd.open.return",
+               _GROUP_NFSD, _HOOKID_NFSD_OPEN_RETURN,
+                "INT32","return");     
 
-       register_sys_event("nfsd.read.entry",
-               GROUP_NFSD, HOOKID_NFSD_READ_ENTRY,
+       _register_sys_event("nfsd.read.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_READ_ENTRY,
                 "INT8:INT64:INT64:INT64:INT64:INT64:INT64:INT64",
-               "size:ino0:ino1:ino2:count:offset:iov_len:vlen")        
-       register_sys_event("nfsd.read.return",
-               GROUP_NFSD, HOOKID_NFSD_READ_RETURN,
-                "INT32","return")      
+               "size:ino0:ino1:ino2:count:offset:iov_len:vlen");       
+       _register_sys_event("nfsd.read.return",
+               _GROUP_NFSD, _HOOKID_NFSD_READ_RETURN,
+                "INT32","return");     
 
-       register_sys_event("nfsd.write.entry",
-               GROUP_NFSD, HOOKID_NFSD_WRITE_ENTRY,
+       _register_sys_event("nfsd.write.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_WRITE_ENTRY,
                 "INT8:INT64:INT64:INT64:INT64:INT64:INT64:INT64",
-               "size:ino0:ino1:ino2:count:offset:iov_len:vlen")        
-       register_sys_event("nfsd.write.return",
-               GROUP_NFSD, HOOKID_NFSD_WRITE_RETURN,
-                "INT32","return")
+               "size:ino0:ino1:ino2:count:offset:iov_len:vlen");       
+       _register_sys_event("nfsd.write.return",
+               _GROUP_NFSD, _HOOKID_NFSD_WRITE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfsd.lookup.entry",
-               GROUP_NFSD, HOOKID_NFSD_LOOKUP_ENTRY,
+       _register_sys_event("nfsd.lookup.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_LOOKUP_ENTRY,
                 "INT8:INT64:INT64:INT64:STRING",
-               "size:ino0:ino1:ino2:filename") 
-       register_sys_event("nfsd.lookup.return",
-               GROUP_NFSD, HOOKID_NFSD_LOOKUP_RETURN,
-                "INT32","return")      
+               "size:ino0:ino1:ino2:filename");        
+       _register_sys_event("nfsd.lookup.return",
+               _GROUP_NFSD, _HOOKID_NFSD_LOOKUP_RETURN,
+                "INT32","return");     
 
-       register_sys_event("nfsd.commit.entry",
-               GROUP_NFSD, HOOKID_NFSD_COMMIT_ENTRY,
+       _register_sys_event("nfsd.commit.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_COMMIT_ENTRY,
                 "INT8:INT64:INT64:INT64:INT64:INT64",
-               "size:ino0:ino1:ino2:count:offset")     
-       register_sys_event("nfsd.commit.return",
-               GROUP_NFSD, HOOKID_NFSD_COMMIT_RETURN,
-                "INT32","return")      
+               "size:ino0:ino1:ino2:count:offset");    
+       _register_sys_event("nfsd.commit.return",
+               _GROUP_NFSD, _HOOKID_NFSD_COMMIT_RETURN,
+                "INT32","return");     
 
-       register_sys_event("nfsd.create.entry",
-               GROUP_NFSD, HOOKID_NFSD_CREATE_ENTRY,
+       _register_sys_event("nfsd.create.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_CREATE_ENTRY,
                 "INT8:INT64:INT64:INT64:STRING:INT32:INT16:INT32",
-               "size:ino0:ino1:ino2:filename:type:iap_valid:iap_mode") 
-       register_sys_event("nfsd.create.return",
-               GROUP_NFSD, HOOKID_NFSD_CREATE_RETURN,
-                "INT32","return")      
+               "size:ino0:ino1:ino2:filename:type:iap_valid:iap_mode");        
+       _register_sys_event("nfsd.create.return",
+               _GROUP_NFSD, _HOOKID_NFSD_CREATE_RETURN,
+                "INT32","return");     
 
-       register_sys_event("nfsd.createv3.entry",
-               GROUP_NFSD, HOOKID_NFSD_CREATEV3_ENTRY,
+       _register_sys_event("nfsd.createv3.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_CREATEV3_ENTRY,
                 "INT8:INT64:INT64:INT64:STRING:INT8:INT16:INT32",
-               "size:ino0:ino1:ino2:filename:createmode:iap_valid:iap_mode")   
-       register_sys_event("nfsd.createv3.return",
-               GROUP_NFSD, HOOKID_NFSD_CREATEV3_RETURN,
-                "INT32","return")      
+               "size:ino0:ino1:ino2:filename:createmode:iap_valid:iap_mode");  
+       _register_sys_event("nfsd.createv3.return",
+               _GROUP_NFSD, _HOOKID_NFSD_CREATEV3_RETURN,
+                "INT32","return");     
 
-       register_sys_event("nfsd.unlink.entry",
-               GROUP_NFSD, HOOKID_NFSD_UNLINK_ENTRY,
+       _register_sys_event("nfsd.unlink.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_UNLINK_ENTRY,
                 "INT8:INT64:INT64:INT64:STRING:INT32",
-               "size:ino0:ino1:ino2:filename:type")    
-       register_sys_event("nfsd.unlink.return",
-               GROUP_NFSD, HOOKID_NFSD_UNLINK_RETURN,
-                "INT32","return")      
+               "size:ino0:ino1:ino2:filename:type");   
+       _register_sys_event("nfsd.unlink.return",
+               _GROUP_NFSD, _HOOKID_NFSD_UNLINK_RETURN,
+                "INT32","return");     
 
-       register_sys_event("nfsd.rename.entry",
-               GROUP_NFSD, HOOKID_NFSD_RENAME_ENTRY,
+       _register_sys_event("nfsd.rename.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_RENAME_ENTRY,
                 "INT8:INT64:INT64:INT64:STRING:INT8:INT64:INT64:INT64:STRING",
-               "old_size:old_ino0:old_ino1:old_ino2:old_filename:size:ino0:ino1:ino2:filename")        
-       register_sys_event("nfsd.rename.return",
-               GROUP_NFSD, HOOKID_NFSD_RENAME_RETURN,
-                "INT32","return")      
-
-       register_sys_event("nfsd.close.entry",
-               GROUP_NFSD, HOOKID_NFSD_CLOSE_ENTRY,
-                "STRING", "filename")  
-       register_sys_event("nfsd.close.return",
-               GROUP_NFSD, HOOKID_NFSD_CLOSE_RETURN,
-                "INT32","return")      
-
-       register_sys_event("nfsd.proc.lookup.entry",
-               GROUP_NFSD, HOOKID_NFSD_PROC_LOOKUP_ENTRY,
+               "old_size:old_ino0:old_ino1:old_ino2:old_filename:size:ino0:ino1:ino2:filename");       
+       _register_sys_event("nfsd.rename.return",
+               _GROUP_NFSD, _HOOKID_NFSD_RENAME_RETURN,
+                "INT32","return");     
+
+       _register_sys_event("nfsd.close.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_CLOSE_ENTRY,
+                "STRING", "filename"); 
+       _register_sys_event("nfsd.close.return",
+               _GROUP_NFSD, _HOOKID_NFSD_CLOSE_RETURN,
+                "INT32","return");     
+
+       _register_sys_event("nfsd.proc.lookup.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_LOOKUP_ENTRY,
                 "INT8:INT64:INT64:INT64:INT8:STRING",
-               "size:ino0:ino1:ino2:version:filename") 
-       register_sys_event("nfsd.proc.lookup.return",
-               GROUP_NFSD, HOOKID_NFSD_PROC_LOOKUP_RETURN,
-                "INT32","return")      
+               "size:ino0:ino1:ino2:version:filename");        
+       _register_sys_event("nfsd.proc.lookup.return",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_LOOKUP_RETURN,
+                "INT32","return");     
 
-       register_sys_event("nfsd.proc.read.entry",
-               GROUP_NFSD, HOOKID_NFSD_PROC_READ_ENTRY,
+       _register_sys_event("nfsd.proc.read.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_READ_ENTRY,
                 "INT8:INT64:INT64:INT64:INT8:INT64:INT64:INT64:INT64",
-               "size:ino0:ino1:ino2:version:count:offset:iov_len:vlen")        
-       register_sys_event("nfsd.proc.read.return",
-               GROUP_NFSD, HOOKID_NFSD_PROC_READ_RETURN,
-                "INT32","return")
+               "size:ino0:ino1:ino2:version:count:offset:iov_len:vlen");       
+       _register_sys_event("nfsd.proc.read.return",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_READ_RETURN,
+                "INT32","return");
        
-       register_sys_event("nfsd.proc.write.entry",
-               GROUP_NFSD, HOOKID_NFSD_PROC_WRITE_ENTRY,
+       _register_sys_event("nfsd.proc.write.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_WRITE_ENTRY,
                 "INT8:INT64:INT64:INT64:INT8:INT64:INT64:INT64:INT64",
-               "size:ino0:ino1:ino2:version:count:offset:iov_len:vlen")        
-       register_sys_event("nfsd.proc.write.return",
-               GROUP_NFSD, HOOKID_NFSD_PROC_WRITE_RETURN,
-                "INT32","return")
+               "size:ino0:ino1:ino2:version:count:offset:iov_len:vlen");       
+       _register_sys_event("nfsd.proc.write.return",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_WRITE_RETURN,
+                "INT32","return");
        
-       register_sys_event("nfsd.proc.commit.entry",
-               GROUP_NFSD, HOOKID_NFSD_PROC_COMMIT_ENTRY,
+       _register_sys_event("nfsd.proc.commit.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_COMMIT_ENTRY,
                 "INT8:INT64:INT64:INT64:INT8:INT64:INT64",
-               "size:ino0:ino1:ino2:version:count:offset")     
-       register_sys_event("nfsd.proc.commit.return",
-               GROUP_NFSD, HOOKID_NFSD_PROC_COMMIT_RETURN,
-                "INT32","return")
-
-       register_sys_event("nfsd.proc.compound.entry",
-               GROUP_NFSD, HOOKID_NFSD_PROC_COMPOUND_ENTRY,
-                "INT32","num") 
-       register_sys_event("nfsd.proc.compound.return",
-               GROUP_NFSD, HOOKID_NFSD_PROC_COMPOUND_RETURN,
-                "INT32","return")      
-
-       register_sys_event("nfsd.proc.remove.entry",
-               GROUP_NFSD, HOOKID_NFSD_PROC_REMOVE_ENTRY,
+               "size:ino0:ino1:ino2:version:count:offset");    
+       _register_sys_event("nfsd.proc.commit.return",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_COMMIT_RETURN,
+                "INT32","return");
+
+       _register_sys_event("nfsd.proc.compound.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_COMPOUND_ENTRY,
+                "INT32","num");        
+       _register_sys_event("nfsd.proc.compound.return",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_COMPOUND_RETURN,
+                "INT32","return");     
+
+       _register_sys_event("nfsd.proc.remove.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_REMOVE_ENTRY,
                 "INT8:INT64:INT64:INT64:INT8:STRING",
-               "size:ino0:ino1:ino2:version:filename") 
-       register_sys_event("nfsd.proc.remove.return",
-               GROUP_NFSD, HOOKID_NFSD_PROC_REMOVE_RETURN,
-                "INT32","return")
+               "size:ino0:ino1:ino2:version:filename");        
+       _register_sys_event("nfsd.proc.remove.return",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_REMOVE_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfsd.proc.rename.entry",
-               GROUP_NFSD, HOOKID_NFSD_PROC_RENAME_ENTRY,
+       _register_sys_event("nfsd.proc.rename.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_RENAME_ENTRY,
                 "INT8:INT8:INT64:INT64:INT64:STRING:INT8:INT64:INT64:INT64:STRING",
-               "version:old_size:old_ino0:old_ino1:old_ino2:old_filename:size:ino0:ino1:ino2:filename")        
-       register_sys_event("nfsd.proc.rename.return",
-               GROUP_NFSD, HOOKID_NFSD_PROC_RENAME_RETURN,
-                "INT32","return")
+               "version:old_size:old_ino0:old_ino1:old_ino2:old_filename:size:ino0:ino1:ino2:filename");       
+       _register_sys_event("nfsd.proc.rename.return",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_RENAME_RETURN,
+                "INT32","return");
 
-       register_sys_event("nfsd.proc.create.entry",
-               GROUP_NFSD, HOOKID_NFSD_PROC_CREATE_ENTRY,
+       _register_sys_event("nfsd.proc.create.entry",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_CREATE_ENTRY,
                 "INT8:INT64:INT64:INT64:INT8:STRING",
-               "size:ino0:ino1:ino2:version:filename") 
-       register_sys_event("nfsd.proc.create.return",
-               GROUP_NFSD, HOOKID_NFSD_PROC_CREATE_RETURN,
-                "INT32","return")
-
-       reset_maxaction()
-}
-
+               "size:ino0:ino1:ino2:version:filename");        
+       _register_sys_event("nfsd.proc.create.return",
+               _GROUP_NFSD, _HOOKID_NFSD_PROC_CREATE_RETURN,
+                "INT32","return");
+%}
 
 probe register_event = begin
 {
This page took 0.109635 seconds and 5 git commands to generate.