{"action":"created","issue":{"url":"https://api.github.com/repos/draios/sysdig/issues/1064","repository_url":"https://api.github.com/repos/draios/sysdig","labels_url":"https://api.github.com/repos/draios/sysdig/issues/1064/labels{/name}","comments_url":"https://api.github.com/repos/draios/sysdig/issues/1064/comments","events_url":"https://api.github.com/repos/draios/sysdig/issues/1064/events","html_url":"https://github.com/draios/sysdig/issues/1064","id":298720670,"number":1064,"title":"Trouble with tracers","user":{"login":"immesys","id":4234131,"avatar_url":"https://avatars1.githubusercontent.com/u/4234131?v=4","gravatar_id":"","url":"https://api.github.com/users/immesys","html_url":"https://github.com/immesys","followers_url":"https://api.github.com/users/immesys/followers","following_url":"https://api.github.com/users/immesys/following{/other_user}","gists_url":"https://api.github.com/users/immesys/gists{/gist_id}","starred_url":"https://api.github.com/users/immesys/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/immesys/subscriptions","organizations_url":"https://api.github.com/users/immesys/orgs","repos_url":"https://api.github.com/users/immesys/repos","events_url":"https://api.github.com/users/immesys/events{/privacy}","received_events_url":"https://api.github.com/users/immesys/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-02-20T19:34:53Z","updated_at":"2018-02-20T20:19:33Z","closed_at":null,"author_association":"NONE","body":"I am struggling to get tracers to work (be recognized by sysdig as a tracer). \r\n\r\nIf I run `sudo sysdig proc.name=btrdbd and fd.name=/dev/null` I get pages of what looks like correct tracer output to me:\r\n```\r\n33345 11:29:22.965039516 7 btrdbd (22759) < write res=37 data=>:8902048641194924990:LinkAndStore::. \r\n34561 11:29:22.994328706 7 btrdbd (22759) > write fd=3(<f>/dev/null) size=37 \r\n34562 11:29:22.994329756 7 btrdbd (22759) < write res=37 data=<:8902048641194924990:LinkAndStore::. \r\n34565 11:29:22.994336822 7 btrdbd (22759) > write fd=3(<f>/dev/null) size=40 \r\n```\r\n\r\nBut If I run `sudo sysdig proc.name=btrdbd and evt.type=tracer` then I get nothing.\r\n\r\nAlso if I run csysdig and look at the Traces List, I also get nothing.\r\n\r\nThe `.` at the end of the data is a newline character. I have also tried without that and it did not change anything.\r\n\r\nIn case it is relevant, this is being written by a program inside a kubernetes pod.\r\n\r\nAny pointers?\r\n\r\nEDIT: I am using sysdig version 0.20.0"},"comment":{"url":"https://api.github.com/repos/draios/sysdig/issues/comments/367106061","html_url":"https://github.com/draios/sysdig/issues/1064#issuecomment-367106061","issue_url":"https://api.github.com/repos/draios/sysdig/issues/1064","id":367106061,"user":{"login":"immesys","id":4234131,"avatar_url":"https://avatars1.githubusercontent.com/u/4234131?v=4","gravatar_id":"","url":"https://api.github.com/users/immesys","html_url":"https://github.com/immesys","followers_url":"https://api.github.com/users/immesys/followers","following_url":"https://api.github.com/users/immesys/following{/other_user}","gists_url":"https://api.github.com/users/immesys/gists{/gist_id}","starred_url":"https://api.github.com/users/immesys/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/immesys/subscriptions","organizations_url":"https://api.github.com/users/immesys/orgs","repos_url":"https://api.github.com/users/immesys/repos","events_url":"https://api.github.com/users/immesys/events{/privacy}","received_events_url":"https://api.github.com/users/immesys/received_events","type":"User","site_admin":false},"created_at":"2018-02-20T20:19:33Z","updated_at":"2018-02-20T20:19:33Z","author_association":"NONE","body":"I think I may have worked out what the problem could be. Is it true that sysdig only recognizes the tracers if it sees the open syscall on /dev/null? So if sysdig was started after the program already opened the file descriptor, then it will not recognize any spans?"}}
{"actor":{"display_login":"immesys"}}