1.2. SystemTap Capabilities
SystemTap was originally developed to provide functionality for Red Hat Enterprise Linux 6 similar to previous Linux probing tools such as dprobes and the Linux Trace Toolkit. SystemTap aims to supplement the existing suite of Linux monitoring tools by providing users with the infrastructure to track kernel activity. In addition, SystemTap combines this capability with two attributes:
Most of the SystemTap scripts enumerated in Chapter 4, Useful SystemTap Scripts
demonstrate system forensics and monitoring capabilities not natively available with other similar tools (such as
). These scripts are provided to give readers extensive examples of the application of SystemTap, which in turn will educate them further on the capabilities they can employ when writing their own SystemTap scripts.