1 name: sched_process_exec 2 ID: 60 3 format: 4 field:unsigned short common_type; offset:0; size:2; signed:0; 5 field:unsigned char common_flags; offset:2; size:1; signed:0; 6 field:unsigned char common_preempt_count; offset:3; size:1; signed:0; 7 field:int common_pid; offset:4; size:4; signed:1; 8 9 field:__data_loc char[] filename; offset:8; size:4; signed:0; 10 field:pid_t pid; offset:12; size:4; signed:1; 11 field:pid_t old_pid; offset:16; size:4; signed:1; 12 13 print fmt: "filename=%s pid=%d old_pid=%d", __get_str(filename), REC->pid, REC->old_pid 14