register_kprobe undefined symbol on 2.6.11 of X86_64

Jim Keniston jkenisto@us.ibm.com
Wed Jul 6 22:11:00 GMT 2005


On Wed, 2005-07-06 at 14:23, Neo Jia wrote:
> Jim,
...
> Currently, I am monitoring the do_fork function. Is it too sensitive to
> be monitored?

No, I've probed do_fork().  It should work fine.

> When I get rid of the function address of the kp,
> everything is OK.

As Martin said, it's best not to use a hard-coded hex address. 
Something like kallsyms_lookup_name("do_fork") would be better.

> 
> BTW, how can I remove that module? rmmod cannot work?

1. Try the -f (--force) option of rmmod...
2. or reboot...
3. or rename the module's .c file, rebuild, and try again. :-)

> 
> Thanks,
> Neo

Jim



More information about the Systemtap mailing list