[Bro-Dev] Performance Issues after the fe7e1ee commit?

Robin Sommer robin at icir.org
Mon Jun 11 16:30:07 PDT 2018



On Fri, Jun 08, 2018 at 10:47 -0700, I wrote:

> Ok, I'll dig around a bit more and also double-check that I didn't
> change any settings in the meantime.

Confirmed that I'm still seeing that difference even when using the
options to turn the stores. Tried it on two different Fedora 28
systems, with similar results.

I haven't been able to nail down what's going on though. The
AdvanceTime() method does seem to do a lot of locking in pcap mode,
independent of whether there's actually any data store operations.
However, I tried a quick hack to get that down and that didn't change
anything.

I then ran it through oprofile. Output is attached. There's indeed
some locking showing up high in there, but I can't tell if that's just
expected idling in CAF. I am bit surprised to see a number of
std::chrono() methods showing rather prominently that I would expect
to be cheap.

Robin

-- 
Robin Sommer * ICSI/LBNL * robin at icir.org * www.icir.org/robin
-------------- next part --------------
Using /home/robin/bro/master/tmp/oprofile_data/samples/ for samples directory.

WARNING! Some of the events were throttled. Throttling occurs when
the initial sample rate is too high, causing an excessive number of
interrupts.  Decrease the sampling frequency. Check the directory
/home/robin/bro/master/tmp/oprofile_data/samples/current/stats/throttled
for the throttled event names.


WARNING: Lost samples detected! See /home/robin/bro/master/tmp/oprofile_data/samples/operf.log for details.
warning: /hpsa could not be found.
warning: /kvm could not be found.
warning: /nf_conntrack could not be found.
warning: /nf_defrag_ipv4 could not be found.
warning: /nf_nat could not be found.
warning: /nf_nat_ipv4 could not be found.
warning: /tg3 could not be found.
CPU: Intel Sandy Bridge microarchitecture, speed 2000 MHz (estimated)
Counted CPU_CLK_UNHALTED events (Clock cycles when not halted) with a unit mask of 0x00 (No unit mask) count 100000
samples  %        image name               symbol name
48605     3.3738  kallsyms                 find_busiest_group
31108     2.1593  libtcmalloc.so.4.5.1     /usr/lib64/libtcmalloc.so.4.5.1
24088     1.6720  bro                      RE_Match_State::Match(unsigned char const*, int, bool, bool, bool)
22833     1.5849  kallsyms                 native_write_msr
20525     1.4247  kallsyms                 finish_task_switch
20314     1.4100  kallsyms                 syscall_return_via_sysret
16822     1.1677  kallsyms                 __softirqentry_text_start
16520     1.1467  libcaf_core.so.0.15.7    caf::detail::double_ended_queue<caf::resumable>::lock_guard::lock_guard(std::atomic_flag&)
15112     1.0490  kallsyms                 update_blocked_averages
12897     0.8952  kallsyms                 run_timer_softirq
12890     0.8947  kallsyms                 pick_next_task_fair
12729     0.8836  libpthread-2.27.so       nanosleep
12495     0.8673  kallsyms                 update_curr
12209     0.8475  kallsyms                 _raw_spin_lock
12186     0.8459  libcaf_core.so.0.15.7    caf::resumable* caf::policy::work_stealing::dequeue<caf::scheduler::worker<caf::policy::work_stealing> >(caf::scheduler::worker<caf::policy::work_stealing>*)
11979     0.8315  kallsyms                 __schedule
11886     0.8250  kallsyms                 __update_load_avg_cfs_rq.isra.34
11463     0.7957  kallsyms                 idle_cpu
11239     0.7801  kallsyms                 __update_load_avg_se.isra.33
11178     0.7759  kallsyms                 native_sched_clock
11010     0.7642  kallsyms                 update_load_avg
10854     0.7534  libcaf_core.so.0.15.7    std::atomic<caf::detail::double_ended_queue<caf::resumable>::node*>::load(std::memory_order) const
10770     0.7476  kallsyms                 load_balance
10737     0.7453  libcaf_core.so.0.15.7    decltype (({parm#1}->data)()) caf::policy::unprofiled::d<caf::scheduler::worker<caf::policy::work_stealing> >(caf::scheduler::worker<caf::policy::work_stealing>*)
10582     0.7345  bro                      DFA_State::Xtion(int, DFA_Machine*)
10554     0.7326  libcaf_core.so.0.15.7    caf::detail::double_ended_queue<caf::resumable>::take_head()
10185     0.7070  bro                      RandTest::add(void const*, int)
10133     0.7034  libcaf_core.so.0.15.7    std::__uniq_ptr_impl<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::_M_ptr()
9920      0.6886  libstdc++.so.6.0.25      /usr/lib64/libstdc++.so.6.0.25
9813      0.6811  kallsyms                 swapgs_restore_regs_and_return_to_usermode
9685      0.6723  kallsyms                 trigger_load_balance
9431      0.6546  libcaf_core.so.0.15.7    std::tuple_element<0ul, std::tuple<caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> > >::type& std::get<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >(std::tuple<caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >&)
9404      0.6528  libcaf_core.so.0.15.7    caf::scheduler::worker<caf::policy::work_stealing>::data()
9350      0.6490  kallsyms                 do_syscall_64
9311      0.6463  libcaf_core.so.0.15.7    std::enable_if<std::__and_<std::__not_<std::__is_tuple_like<caf::detail::double_ended_queue<caf::resumable>::node*> >, std::is_move_constructible<caf::detail::double_ended_queue<caf::resumable>::node*>, std::is_move_assignable<caf::detail::double_ended_queue<caf::resumable>::node*> >::value, void>::type std::swap<caf::detail::double_ended_queue<caf::resumable>::node*>(caf::detail::double_ended_queue<caf::resumable>::node*&, caf::detail::double_ended_queue<caf::resumable>::node*&)
9297      0.6453  libbroker.so..           std::operator&(std::memory_order, std::__memory_order_modifier)
9194      0.6382  bro                      DFA_State::Accept() const
9009      0.6253  kallsyms                 _raw_spin_lock_irqsave
8818      0.6121  libcaf_core.so.0.15.7    std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::_M_head(std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >&)
8690      0.6032  libcaf_core.so.0.15.7    caf::detail::double_ended_queue<caf::resumable>::node*& std::__get_helper<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >(std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >&)
8643      0.5999  kallsyms                 queued_spin_lock_slowpath
8622      0.5985  kallsyms                 irq_work_interrupt
8246      0.5724  libcaf_core.so.0.15.7    std::_Head_base<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, false>::_M_head(std::_Head_base<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, false>&)
8095      0.5619  libcaf_core.so.0.15.7    std::unique_ptr<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::reset(caf::detail::double_ended_queue<caf::resumable>::node*)
7881      0.5470  libbroker.so..           std::chrono::duration<long, std::ratio<1l, 1000000l> >::count() const
7790      0.5407  libcaf_core.so.0.15.7    caf::detail::double_ended_queue<caf::resumable>::lock_guard::~lock_guard()
7732      0.5367  libcaf_core.so.0.15.7    void std::this_thread::sleep_for<long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&)
7502      0.5207  kallsyms                 update_cfs_group
7328      0.5087  libpthread-2.27.so       __pthread_disable_asynccancel
7143      0.4958  kallsyms                 cpuacct_charge
6975      0.4842  libcaf_core.so.0.15.7    std::_Head_base<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, false>::_M_head(std::_Head_base<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, false> const&)
6972      0.4839  libc-2.27.so             __GI___strlen_sse2
6606      0.4585  kallsyms                 enqueue_task_fair
6543      0.4542  kallsyms                 rebalance_domains
6239      0.4331  kallsyms                 irq_exit
6174      0.4286  bro                      ones_complement_checksum(void const*, int, unsigned int)
6160      0.4276  libcaf_core.so.0.15.7    std::unique_ptr<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::operator->() const
6047      0.4197  libcaf_core.so.0.15.7    unsigned long std::uniform_int_distribution<unsigned long>::operator()<std::linear_congruential_engine<unsigned long, 16807ul, 0ul, 2147483647ul> >(std::linear_congruential_engine<unsigned long, 16807ul, 0ul, 2147483647ul>&, std::uniform_int_distribution<unsigned long>::param_type const&)
5997      0.4163  libc-2.27.so             vfprintf
5964      0.4140  libcaf_core.so.0.15.7    std::unique_ptr<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::get() const
5769      0.4004  libcaf_core.so.0.15.7    std::__uniq_ptr_impl<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::_M_ptr() const
5650      0.3922  kallsyms                 entry_SYSCALL_64_after_hwframe
5639      0.3914  kallsyms                 irqtime_account_irq
5507      0.3823  libcaf_core.so.0.15.7    std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::_M_head(std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> > const&)
5485      0.3807  kallsyms                 try_to_wake_up
5388      0.3740  kallsyms                 find_next_and_bit
5287      0.3670  kallsyms                 do_nanosleep
5287      0.3670  libpthread-2.27.so       pthread_mutex_lock
5264      0.3654  libcaf_core.so.0.15.7    std::__atomic_base<caf::detail::double_ended_queue<caf::resumable>::node*>::operator caf::detail::double_ended_queue<caf::resumable>::node*() const
5220      0.3623  kallsyms                 nohz_balance_exit_idle
5210      0.3616  libpthread-2.27.so       pthread_cond_timedwait@@GLIBC_2.3.2
5106      0.3544  kallsyms                 find_next_bit
4957      0.3441  libcaf_core.so.0.15.7    std::remove_reference<caf::detail::double_ended_queue<caf::resumable>::node*&>::type&& std::move<caf::detail::double_ended_queue<caf::resumable>::node*&>(caf::detail::double_ended_queue<caf::resumable>::node*&)
4882      0.3389  [vdso] (tgid:46504 range:0x7ffe89dfa000-0x7ffe89dfbfff) [vdso] (tgid:46504 range:0x7ffe89dfa000-0x7ffe89dfbfff)
4878      0.3386  kallsyms                 account_entity_enqueue
4871      0.3381  kallsyms                 __next_timer_interrupt
4738      0.3289  libcaf_core.so.0.15.7    caf::detail::double_ended_queue<caf::resumable>::node* const& std::__get_helper<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >(std::_Tuple_impl<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> > const&)
4729      0.3283  bro                      BaseList::operator[](int) const
4698      0.3261  kallsyms                 _raw_spin_lock_irq
4682      0.3250  kallsyms                 timerqueue_add
4535      0.3148  kallsyms                 enqueue_entity
4500      0.3124  libcaf_core.so.0.15.7    std::uniform_int_distribution<unsigned long>::param_type::b() const
4431      0.3076  kallsyms                 update_rq_clock
4341      0.3013  kallsyms                 check_preempt_wakeup
4338      0.3011  kallsyms                 hrtimer_nanosleep
4319      0.2998  bro                      threading::Queue<threading::BasicInputMessage*>::Get()
4280      0.2971  kallsyms                 __hrtimer_run_queues
4255      0.2954  kallsyms                 _raw_spin_trylock
4180      0.2901  libcaf_core.so.0.15.7    std::__uniq_ptr_impl<caf::scheduler::worker<caf::policy::work_stealing>, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >::_M_ptr() const
4118      0.2858  kallsyms                 __calc_delta
4111      0.2854  kallsyms                 __radix_tree_lookup
4110      0.2853  bro                      std::chrono::duration<long, std::ratio<1l, 1000000000l> >::count() const
4102      0.2847  libcaf_core.so.0.15.7    std::unique_ptr<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::release()
4078      0.2831  libcaf_core.so.0.15.7    std::__detail::_Mod<unsigned long, 2147483647ul, 16807ul, 0ul, true, true>::__calc(unsigned long)
3918      0.2720  libcaf_core.so.0.15.7    std::tuple_element<0ul, std::tuple<caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> > >::type const& std::get<0ul, caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >(std::tuple<caf::detail::double_ended_queue<caf::resumable>::node*, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> > const&)
3916      0.2718  libbroker.so..           std::chrono::duration<long, std::ratio<1l, 1000000l> >::duration<long, void>(long const&)
3880      0.2693  bro                      std::chrono::duration_values<long>::zero()
3854      0.2675  bro                      std::chrono::duration<long, std::ratio<1l, 1000000000l> >::duration<long, void>(long const&)
3852      0.2674  kallsyms                 ktime_get
3837      0.2663  libcaf_core.so.0.15.7    caf::scheduler::abstract_coordinator::num_workers() const
3802      0.2639  kallsyms                 account_entity_dequeue
3798      0.2636  kallsyms                 sys_nanosleep
3758      0.2609  libcaf_core.so.0.15.7    std::unique_ptr<caf::detail::double_ended_queue<caf::resumable>::node, std::default_delete<caf::detail::double_ended_queue<caf::resumable>::node> >::~unique_ptr()
3699      0.2568  libcaf_core.so.0.15.7    unsigned long std::uniform_int_distribution<unsigned long>::operator()<std::linear_congruential_engine<unsigned long, 16807ul, 0ul, 2147483647ul> >(std::linear_congruential_engine<unsigned long, 16807ul, 0ul, 2147483647ul>&)
3634      0.2522  libcaf_core.so.0.15.7    std::atomic<caf::detail::double_ended_queue<caf::resumable>::node*>::operator caf::detail::double_ended_queue<caf::resumable>::node*() const
3612      0.2507  libpthread-2.27.so       __pthread_mutex_unlock_usercnt
3609      0.2505  libcaf_core.so.0.15.7    caf::resumable* caf::policy::work_stealing::try_steal<caf::scheduler::worker<caf::policy::work_stealing> >(caf::scheduler::worker<caf::policy::work_stealing>*)
3563      0.2473  libcaf_core.so.0.15.7    unsigned long std::__detail::__mod<unsigned long, 2147483647ul, 16807ul, 0ul>(unsigned long)
3531      0.2451  kallsyms                 _raw_spin_unlock_irqrestore
3492      0.2424  kallsyms                 read_tsc
3466      0.2406  bro                      Unref(BroObj*)
3427      0.2379  libcaf_core.so.0.15.7    std::chrono::duration<long, std::ratio<1l, 1000000l> >::zero()
3417      0.2372  kallsyms                 __queue_work
3414      0.2370  kallsyms                 cyc2ns_read_begin.part.2
3359      0.2332  libcaf_core.so.0.15.7    caf::scheduler::worker<caf::policy::work_stealing>* const& std::__get_helper<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >(std::_Tuple_impl<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > > const&)
3350      0.2325  kallsyms                 run_rebalance_domains
3308      0.2296  kallsyms                 insert_work
3295      0.2287  kallsyms                 copy_user_generic_string
3283      0.2279  libcrypto.so.1.0.2o      /usr/lib64/libcrypto.so.1.0.2o
3264      0.2266  kallsyms                 irq_work_run_list
3242      0.2250  libcaf_core.so.0.15.7    caf::scheduler::coordinator<caf::policy::work_stealing>::worker_by_id(unsigned long)
3218      0.2234  libbroker.so..           std::chrono::duration<long, std::ratio<1l, 1000000000l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::ratio<1000l, 1l>, long, false, true>::__cast<long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&)
3173      0.2202  kallsyms                 hrtimer_active
3160      0.2193  kallsyms                 task_tick_fair
3128      0.2171  libc-2.27.so             clock_gettime
3097      0.2150  kallsyms                 hrtimer_start_range_ns
3061      0.2125  libcaf_core.so.0.15.7    std::_Tuple_impl<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >::_M_head(std::_Tuple_impl<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > > const&)
3036      0.2107  bro                      _siphash
3006      0.2087  kallsyms                 reweight_entity
2989      0.2075  kallsyms                 apic_timer_interrupt
2944      0.2044  kallsyms                 dequeue_task_fair
2928      0.2032  libcaf_core.so.0.15.7    caf::scheduler::worker<caf::policy::work_stealing>::parent()
2921      0.2028  bro                      std::chrono::duration<long, std::ratio<1l, 1l> >::count() const
2907      0.2018  bro                      std::chrono::duration<long, std::ratio<1l, 1l> >::duration<long, void>(long const&)
2852      0.1980  libcaf_core.so.0.15.7    std::linear_congruential_engine<unsigned long, 16807ul, 0ul, 2147483647ul>::operator()()
2801      0.1944  bro                      BaseList::length() const
2773      0.1925  libc-2.27.so             _IO_default_xsputn
2765      0.1919  kallsyms                 rcu_process_callbacks
2764      0.1919  libcaf_core.so.0.15.7    std::_Head_base<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, false>::_M_head(std::_Head_base<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, false> const&)
2726      0.1892  kallsyms                 kthread_data
2715      0.1885  libcaf_core.so.0.15.7    std::vector<std::unique_ptr<caf::scheduler::worker<caf::policy::work_stealing>, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >, std::allocator<std::unique_ptr<caf::scheduler::worker<caf::policy::work_stealing>, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > > > >::operator[](unsigned long)
2713      0.1883  libcaf_core.so.0.15.7    bool std::chrono::operator< <long, std::ratio<1l, 1000000l>, long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1000000l> > const&)
2704      0.1877  kallsyms                 ret_from_intr
2697      0.1872  kallsyms                 lapic_next_deadline
2662      0.1848  kallsyms                 decay_load
2619      0.1818  bro                      Ref(BroObj*)
2603      0.1807  kallsyms                 do_futex
2548      0.1769  kallsyms                 __hrtimer_next_event_base
2540      0.1763  kallsyms                 put_prev_entity
2520      0.1749  kallsyms                 ctx_sched_out
2516      0.1746  libcaf_core.so.0.15.7    std::unique_ptr<caf::scheduler::worker<caf::policy::work_stealing>, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >::get() const
2449      0.1700  libcaf_core.so.0.15.7    std::chrono::duration<long, std::ratio<1l, 1l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1l> >, std::ratio<1l, 1000000l>, long, true, false>::__cast<long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&)
2448      0.1699  libcaf_core.so.0.15.7    std::uniform_int_distribution<unsigned long>::param_type::a() const
2432      0.1688  kallsyms                 __indirect_thunk_start
2426      0.1684  libcaf_core.so.0.15.7    std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1l> > >::value, std::chrono::duration<long, std::ratio<1l, 1l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1l> >, long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&)
2393      0.1661  libcaf_core.so.0.15.7    bool std::chrono::operator<=<long, std::ratio<1l, 1000000l>, long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1000000l> > const&)
2391      0.1660  kallsyms                 perf_event_task_tick
2385      0.1655  libpthread-2.27.so       pthread_cond_signal@@GLIBC_2.3.2
2374      0.1648  kallsyms                 interrupt_entry
2360      0.1638  bro                      threading::Queue<threading::BasicOutputMessage*>::Put(threading::BasicOutputMessage*)
2335      0.1621  libc-2.27.so             __strchrnul_sse2
2334      0.1620  libcaf_core.so.0.15.7    caf::detail::double_ended_queue<caf::resumable>::take_tail()
2326      0.1615  bro                      BroType::Tag() const
2312      0.1605  kallsyms                 dequeue_entity
2294      0.1592  kallsyms                 hrtimer_interrupt
2272      0.1577  kallsyms                 __hrtimer_init
2264      0.1572  kallsyms                 get_nohz_timer_target
2251      0.1562  kallsyms                 _copy_from_user
2247      0.1560  kallsyms                 schedule
2244      0.1558  libpthread-2.27.so       __pthread_enable_asynccancel
2226      0.1545  kallsyms                 futex_wait
2224      0.1544  kallsyms                 __enqueue_entity
2188      0.1519  kallsyms                 dbs_update_util_handler
2178      0.1512  kallsyms                 update_min_vruntime
2175      0.1510  libc-2.27.so             vsnprintf
2166      0.1503  kallsyms                 __perf_event_task_sched_out
2164      0.1502  libc-2.27.so             __strcpy_sse2_unaligned
2153      0.1494  kallsyms                 sys_futex
2134      0.1481  libcaf_core.so.0.15.7    std::tuple_element<0ul, std::tuple<caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > > >::type const& std::get<0ul, caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > >(std::tuple<caf::scheduler::worker<caf::policy::work_stealing>*, std::default_delete<caf::scheduler::worker<caf::policy::work_stealing> > > const&)
2133      0.1481  bro                      threading::Manager::Process()
2109      0.1464  kallsyms                 rb_insert_color
2094      0.1454  kallsyms                 note_gp_changes
2077      0.1442  kallsyms                 rcu_check_callbacks
2071      0.1438  kallsyms                 activate_task
2058      0.1429  libcaf_core.so.0.15.7    std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1000000l> > >::value, std::chrono::duration<long, std::ratio<1l, 1000000l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1000000l> >, long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1l> > const&)
2036      0.1413  kallsyms                 resched_curr
2017      0.1400  bro                      ODesc::StartsWithEscapeSequence(char const*, char const*)
2003      0.1390  kallsyms                 clear_buddies
2002      0.1390  kallsyms                 pick_next_entity
1980      0.1374  kallsyms                 sched_clock_cpu
1970      0.1367  kallsyms                 cpu_load_update
1931      0.1340  kallsyms                 __perf_event_task_sched_in
1929      0.1339  libcaf_core.so.0.15.7    std::common_type<std::chrono::duration<long, std::ratio<1l, 1000000l> >, std::chrono::duration<long, std::ratio<1l, 1l> > >::type std::chrono::operator-<long, std::ratio<1l, 1000000l>, long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1l> > const&)
1896      0.1316  libc-2.27.so             memcpy at GLIBC_2.2.5
1813      0.1258  kallsyms                 scheduler_tick
1812      0.1258  kallsyms                 __cgroup_account_cputime
1805      0.1253  bro                      Dictionary::NextEntry(HashKey*&, IterCookie*&, int) const
1805      0.1253  libpthread-2.27.so       __pthread_mutex_cond_lock
1773      0.1231  kallsyms                 deactivate_task
1768      0.1227  bro                      iosource::Manager::FindSoonest(double*)
1738      0.1206  kallsyms                 queue_work_on
1733      0.1203  kallsyms                 futex_wake
1692      0.1174  kallsyms                 rb_insert_color_cached
1679      0.1165  kallsyms                 smp_apic_timer_interrupt
1674      0.1162  kallsyms                 wakeup_preempt_entity.isra.59
1667      0.1157  libpthread-2.27.so       __condvar_dec_grefs
1663      0.1154  libc-2.27.so             __memcpy_sse2_unaligned_erms
1649      0.1145  kallsyms                 prepare_exit_to_usermode
1625      0.1128  kallsyms                 cpuacct_account_field
1600      0.1111  kallsyms                 clockevents_program_event
1589      0.1103  kallsyms                 entry_SYSCALL_64_stage2
1586      0.1101  libcaf_core.so.0.15.7    std::chrono::duration<long, std::ratio<1l, 1000000l> >::duration<long, std::ratio<1l, 1l>, void>(std::chrono::duration<long, std::ratio<1l, 1l> > const&)
1585      0.1100  kallsyms                 cpumask_next_and
1581      0.1097  libpthread-2.27.so       pthread_mutex_unlock
1555      0.1079  kallsyms                 get_futex_key
1536      0.1066  bro                      threading::Queue<threading::BasicOutputMessage*>::MaybeReady()
1526      0.1059  kallsyms                 futex_wait_setup
1525      0.1059  libbroker.so..           std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::value, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, long, std::ratio<1l, 1000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000l> > const&)
1517      0.1053  kallsyms                 enqueue_hrtimer
1490      0.1034  bro                      threading::MsgThread::RetrieveIn()
1462      0.1015  kallsyms                 x86_pmu_disable
1451      0.1007  kallsyms                 __accumulate_pelt_segments
1448      0.1005  kallsyms                 cpu_needs_another_gp
1443      0.1002  bro                      __gthread_active_p()
1439      0.0999  kallsyms                 rb_erase_cached
1421      0.0986  libcaf_core.so.0.15.7    caf::scheduler::worker<caf::policy::work_stealing>::id() const
1400      0.0972  kallsyms                 tick_sched_timer
1399      0.0971  kallsyms                 set_next_buddy
1398      0.0970  kallsyms                 check_preempt_curr
1397      0.0970  kallsyms                 rcu_note_context_switch
1379      0.0957  bro                      std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::time_since_epoch() const
1372      0.0952  kallsyms                 __list_del_entry_valid
1366      0.0948  kallsyms                 sched_avg_update
1353      0.0939  kallsyms                 __hrtimer_get_next_event
1339      0.0929  kallsyms                 __list_add_valid
1334      0.0926  kallsyms                 profile_tick
1313      0.0911  bro                      threading::Manager::NextTimestamp(double*)
1303      0.0904  bro                      RecordVal::RecordVal(RecordType*)
1275      0.0885  libcaf_core.so.0.15.7    std::chrono::duration<long, std::ratio<1l, 1000000l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1000000l> >, std::ratio<1000000l, 1l>, long, false, true>::__cast<long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1l> > const&)
1271      0.0882  bro                      bool std::operator==<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**>(std::_Deque_iterator<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**> const&, std::_Deque_iterator<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**> const&)
1271      0.0882  kallsyms                 rcu_irq_exit
1262      0.0876  kallsyms                 hrtimer_try_to_cancel
1253      0.0870  libc-2.27.so             __memcmp_sse4_1
1236      0.0858  kallsyms                 __intel_pmu_enable_all.constprop.17
1210      0.0840  libpcap.so.1.8.1         /usr/lib64/libpcap.so.1.8.1
1195      0.0829  kallsyms                 select_idle_sibling
1190      0.0826  kallsyms                 run_posix_cpu_timers
1181      0.0820  bro                      threading::Queue<threading::BasicOutputMessage*>::Get()
1181      0.0820  kallsyms                 __bitmap_and
1180      0.0819  bro                      std::unique_lock<std::mutex>::~unique_lock()
1177      0.0817  kallsyms                 futex_wait_queue_me
1174      0.0815  kallsyms                 account_system_index_time
1169      0.0811  bro                      threading::BasicThread::Fmt(char const*, ...)
1155      0.0802  bro                      bool std::operator==<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**>(std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**> const&, std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**> const&)
1139      0.0791  kallsyms                 update_group_capacity
1136      0.0789  kallsyms                 tick_program_event
1133      0.0786  kallsyms                 select_task_rq_fair
1117      0.0775  bro                      BroObj::BroObj()
1112      0.0772  bro                      copy_string(char const*)
1100      0.0764  bro                      Attributes::FindAttr(attr_tag) const
1093      0.0759  bro                      logging::WriterBackend::OnHeartbeat(double, double)
1080      0.0750  kallsyms                 can_migrate_task
1058      0.0734  bro                      bool std::chrono::operator< <std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&)
1057      0.0734  bro                      ODesc::FirstEscapeLoc(char const*, unsigned long)
1055      0.0732  bro                      StmtList::Exec(Frame*, stmt_flow_type&) const
1054      0.0732  bro                      threading::MsgThread::Run()
1048      0.0727  bro                      std::unique_lock<std::mutex>::unique_lock(std::mutex&)
1037      0.0720  kallsyms                 exit_to_usermode_loop
1033      0.0717  kallsyms                 rb_next
1031      0.0716  bro                      ExprStmt::Exec(Frame*, stmt_flow_type&) const
1019      0.0707  bro                      BroFunc::Call(ValPList*, Frame*) const
1016      0.0705  kallsyms                 __update_idle_core
999       0.0693  kallsyms                 dbs_irq_work
998       0.0693  bro                      std::vector<Func::Body, std::allocator<Func::Body> >::size() const
997       0.0692  bro                      DFA_State::Stats(unsigned int*, unsigned int*)
997       0.0692  bro                      analyzer::tcp::TCP_Analyzer::DeliverPacket(int, unsigned char const*, bool, unsigned long, IP_Hdr const*, int)
983       0.0682  kallsyms                 retint_kernel
976       0.0677  bro                      void __gnu_cxx::new_allocator<threading::BasicOutputMessage*>::construct<threading::BasicOutputMessage*, threading::BasicOutputMessage* const&>(threading::BasicOutputMessage**, threading::BasicOutputMessage* const&)
965       0.0670  kallsyms                 hash_futex
965       0.0670  kallsyms                 hrtimer_forward
962       0.0668  kallsyms                 rcu_nmi_exit
929       0.0645  libc-2.27.so             _IO_no_init
918       0.0637  bro                      std::cv_status std::condition_variable::wait_for<long, std::ratio<1l, 1l> >(std::unique_lock<std::mutex>&, std::chrono::duration<long, std::ratio<1l, 1l> > const&)
914       0.0634  kallsyms                 get_futex_key_refs.isra.13
910       0.0632  bro                      Dictionary::Lookup(void const*, int, unsigned long) const
901       0.0625  kallsyms                 smp_irq_work_interrupt
888       0.0616  kallsyms                 irq_enter
882       0.0612  bro                      safe_vsnprintf(char*, unsigned long, char const*, __va_list_tag*)
876       0.0608  libc-2.27.so             _IO_str_init_static_internal
871       0.0605  bro                      operator new(unsigned long, void*)
862       0.0598  bro                      DebugLogger::IsEnabled(DebugStream) const
859       0.0596  kallsyms                 ttwu_do_activate
843       0.0585  bro                      std::unique_lock<std::mutex>::unlock()
841       0.0584  bro                      std::cv_status std::condition_variable::__wait_until_impl<std::chrono::duration<long, std::ratio<1l, 1000000000l> > >(std::unique_lock<std::mutex>&, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&)
841       0.0584  kallsyms                 get_timespec64
839       0.0582  kallsyms                 rcu_bh_qs
836       0.0580  kallsyms                 native_apic_mem_write
836       0.0580  kallsyms                 update_cfs_rq_h_load
827       0.0574  bro                      std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::_Rb_tree_const_iterator(std::_Rb_tree_node_base const*)
822       0.0571  kallsyms                 get_pwq.isra.20
821       0.0570  bro                      threading::HeartbeatMessage::~HeartbeatMessage()
820       0.0569  bro                      __gthread_cond_timedwait(pthread_cond_t*, pthread_mutex_t*, timespec const*)
818       0.0568  bro                      EventHandler::operator bool() const
815       0.0566  kallsyms                 ktime_get_update_offsets_now
799       0.0555  kallsyms                 raise_softirq
779       0.0541  bro                      std::_Rb_tree<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::_Identity<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::end() const
778       0.0540  bro                      threading::HeartbeatMessage::Process()
778       0.0540  kallsyms                 ttwu_do_wakeup
778       0.0540  libpthread-2.27.so       __lll_unlock_wake
772       0.0536  libc-2.27.so             __mempcpy_sse2_unaligned
770       0.0534  bro                      threading::Queue<threading::BasicOutputMessage*>::Ready()
760       0.0528  bro                      UnaryExpr::Eval(Frame*) const
750       0.0521  kallsyms                 set_next_entity
749       0.0520  kallsyms                 intel_pmu_disable_all
746       0.0518  bro                      logging::WriterBackend::Write(int, int, threading::Value***)
745       0.0517  kallsyms                 task_tick_numa
738       0.0512  bro                      threading::formatter::Ascii::Describe(ODesc*, threading::Value*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) const
734       0.0509  bro                      __gthread_mutex_unlock(pthread_mutex_t*)
725       0.0503  bro                      __gthread_mutex_lock(pthread_mutex_t*)
716       0.0497  bro                      std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::operator!=(std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > const&) const
708       0.0491  kallsyms                 cpu_load_update_active
705       0.0489  bro                      EventHandlerPtr::operator bool() const
703       0.0488  kallsyms                 rcu_irq_enter
703       0.0488  libc-2.27.so             sched_yield
695       0.0482  bro                      threading::BasicThread::Name() const
687       0.0477  bro                      NameExpr::Eval(Frame*) const
687       0.0477  kallsyms                 wq_worker_waking_up
681       0.0473  bro                      NetSessions::DoNextPacket(double, Packet const*, IP_Hdr const*, EncapsulationStack const*)
681       0.0473  kallsyms                 __cgroup_account_cputime_field
679       0.0471  kallsyms                 idr_find
677       0.0470  bro                      threading::BasicThread::Killed() const
677       0.0470  kallsyms                 lock_hrtimer_base.isra.21
677       0.0470  libc-2.27.so             _IO_old_init
663       0.0460  bro                      threading::Message::Name() const
659       0.0457  bro                      std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**>::difference_type std::operator-<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**>(std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**> const&, std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**> const&)
655       0.0455  bro                      RuleMatcher::Match(RuleEndpointState*, Rule::PatternType, unsigned char const*, int, bool, bool, bool)
621       0.0431  bro                      std::unique_lock<std::mutex>::lock()
619       0.0430  bro                      BroObj::~BroObj()
614       0.0426  bro                      logging::writer::Ascii::DoHeartbeat(double, double)
614       0.0426  bro                      std::mutex::lock()
611       0.0424  bro                      ID::AsType()
605       0.0420  kallsyms                 __intel_pmu_disable_all
603       0.0419  bro                      threading::MsgThread::SendOut(threading::BasicOutputMessage*, bool)
599       0.0416  bro                      std::cv_status std::condition_variable::wait_until<std::chrono::duration<long, std::ratio<1l, 1000000000l> > >(std::unique_lock<std::mutex>&, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&)
597       0.0414  kallsyms                 sched_clock
593       0.0412  kallsyms                 rcu_all_qs
592       0.0411  bro                      Val::~Val()
588       0.0408  kallsyms                 put_prev_task_fair
586       0.0407  bro                      threading::Message::Message(char const*)
577       0.0401  kallsyms                 irqtime_account_process_tick.isra.10
563       0.0391  kallsyms                 rb_erase
560       0.0389  bro                      plugin::Manager::HavePluginForHook(plugin::HookType) const
558       0.0387  bro                      iosource::IOSource::IsOpen() const
551       0.0382  bro                      std::_Rb_tree<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::_Identity<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::begin() const
533       0.0370  bro                      Attr::Tag() const
521       0.0362  libc-2.27.so             isprint
520       0.0361  bro                      std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> >::empty() const
518       0.0360  kallsyms                 find_first_bit
517       0.0359  kallsyms                 set_task_cpu
513       0.0356  bro                      BaseList::append(void*)
513       0.0356  bro                      SerialObj::SerialObj()
512       0.0355  bro                      threading::MsgThread::Debug(DebugStream, char const*)
512       0.0355  libz.so.1.2.11           /usr/lib64/libz.so.1.2.11
509       0.0353  bro                      base_type_no_ref(TypeTag)
509       0.0353  bro                      std::mutex::unlock()
506       0.0351  bro                      threading::acquire_lock(std::mutex&)
505       0.0351  bro                      std::set<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::end() const
495       0.0344  kallsyms                 plist_add
493       0.0342  bro                      Val::AsRecord() const
488       0.0339  kallsyms                 rcu_segcblist_ready_cbs
484       0.0336  kallsyms                 pick_next_task_idle
483       0.0335  bro                      SegmentProfiler::SegmentProfiler(SegmentStatsReporter*, char const*)
483       0.0335  bro                      threading::MsgThread::Failed() const
475       0.0330  bro                      IfStmt::DoExec(Frame*, Val*, stmt_flow_type&) const
467       0.0324  kallsyms                 irq_work_queue
465       0.0323  kallsyms                 __msecs_to_jiffies
464       0.0322  kallsyms                 native_apic_mem_read
463       0.0321  bro                      ValPList::operator[](int) const
460       0.0319  bro                      TransientID::TransientID()
455       0.0316  bro                      BaseList::BaseList(int)
451       0.0313  bro                      BroType::InternalType() const
449       0.0312  bro                      std::chrono::duration<long, std::ratio<1l, 1000000000l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::ratio<1000000000l, 1l>, long, false, true>::__cast<long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1l> > const&)
447       0.0310  bro                      threading::formatter::Ascii::Describe(ODesc*, int, threading::Field const* const*, threading::Value**) const
439       0.0305  kallsyms                 __remove_hrtimer
433       0.0301  bro                      std::__deque_buf_size(unsigned long)
427       0.0296  bro                      RecordVal::Assign(int, Val*, Opcode)
423       0.0294  bro                      BinaryExpr::Eval(Frame*) const
420       0.0292  bro                      std::_List_iterator<threading::MsgThread*>::operator++(int)
420       0.0292  bro                      threading::BasicOutputMessage::BasicOutputMessage(char const*)
418       0.0290  bro                      std::mutex* std::__addressof<std::mutex>(std::mutex&)
415       0.0288  kallsyms                 cgroup_cpu_stat_updated
412       0.0286  bro                      BaseList::clear()
412       0.0286  kallsyms                 get_futex_value_locked
409       0.0284  bro                      ODesc::AddBytesRaw(void const*, unsigned int)
404       0.0280  kallsyms                 rcu_nmi_enter
401       0.0278  bro                      analyzer::tcp::ContentLine_Analyzer::DoDeliverOnce(int, unsigned char const*)
400       0.0278  libc-2.27.so             _IO_setb
397       0.0276  bro                      threading::Message::~Message()
396       0.0275  bro                      Stmt::RegisterAccess() const
387       0.0269  bro                      Packet::Init(int, timeval*, unsigned int, unsigned int, unsigned char const*, int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >)
372       0.0258  bro                      std::__detail::_List_node_header::_M_init()
371       0.0258  bro                      __gnu_cxx::__aligned_membuf<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::_M_ptr() const
370       0.0257  libcaf_core.so.0.15.7    std::this_thread::yield()
369       0.0256  libcaf_core.so.0.15.7    __gthread_yield()
368       0.0255  bro                      CallExpr::Eval(Frame*) const
367       0.0255  kallsyms                 irq_work_run
365       0.0253  bro                      void __gnu_cxx::new_allocator<threading::BasicInputMessage*>::destroy<threading::BasicInputMessage*>(threading::BasicInputMessage**)
361       0.0251  bro                      std::_Rb_tree_node<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::_M_valptr() const
361       0.0251  bro                      threading::DebugMessage::DebugMessage(DebugStream, threading::MsgThread*, char const*)
359       0.0249  bro                      bool std::chrono::operator< <long, std::ratio<1l, 1000000000l>, long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&)
359       0.0249  kallsyms                 find_get_entry
358       0.0248  bro                      std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> >::push_back(threading::BasicOutputMessage* const&)
358       0.0248  bro                      threading::MsgThread::SendOut(threading::BasicOutputMessage*)
355       0.0246  bro                      starts_with(char const*, char const*, unsigned long)
353       0.0245  bro                      threading::BasicThread::Terminating() const
352       0.0244  bro                      NetSessions::NextPacket(double, Packet const*)
350       0.0243  bro                      Val::Ref()
349       0.0242  kallsyms                 get_work_pool
345       0.0239  bro                      BaseList::replace(int, void*)
340       0.0236  libpthread-2.27.so       _pthread_cleanup_push
339       0.0235  kallsyms                 _cond_resched
338       0.0235  bro                      net_run()
332       0.0230  bro                      analyzer::Analyzer::NextPacket(int, unsigned char const*, bool, unsigned long, IP_Hdr const*, int)
330       0.0229  bro                      AssignExpr::Eval(Frame*) const
329       0.0228  bro                      iosource::pcap::PcapSource::ExtractNextPacket(Packet*)
326       0.0226  bro                      EventMgr::Drain()
326       0.0226  bro                      iosource::PktSrc::Process()
326       0.0226  kallsyms                 retint_user
326       0.0226  kallsyms                 task_ctx_sched_out
320       0.0222  libc-2.27.so             __strcmp_sse2_unaligned
319       0.0221  bro                      Val::Type()
318       0.0221  bro                      Expr::IsError() const
318       0.0221  kallsyms                 ext4_mark_iloc_dirty
316       0.0219  libc-2.27.so             __fread_chk
315       0.0219  bro                      DictEntryPList::operator[](int) const
313       0.0217  bro                      std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::operator++()
313       0.0217  bro                      std::__shared_ptr<bro_broker::Manager::BrokerState, (__gnu_cxx::_Lock_policy)2>::get() const
313       0.0217  kallsyms                 migrate_task_rq_fair
312       0.0217  bro                      std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1l> > >::value, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1l> > > >::type std::chrono::time_point_cast<std::chrono::duration<long, std::ratio<1l, 1l> >, std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&)
310       0.0215  libc-2.27.so             __mpn_divrem
309       0.0214  bro                      logging::WriterFrontend::FlushWriteBuffer()
308       0.0214  bro                      std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::operator*() const
307       0.0213  bro                      std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::value, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1l> > const&)
306       0.0212  bro                      threading::Queue<threading::BasicInputMessage*>::Put(threading::BasicInputMessage*)
304       0.0211  bro                      __gnu_cxx::__aligned_membuf<iosource::Manager::Source*>::_M_ptr()
304       0.0211  kallsyms                 change_protection
303       0.0210  bro                      PQ_Element::Time() const
303       0.0210  libc-2.27.so             tolower
302       0.0210  bro                      Trigger::EvaluatePending()
302       0.0210  kallsyms                 radix_tree_lookup
299       0.0208  bro                      void std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_construct<char*>(char*, char*, std::forward_iterator_tag)
298       0.0207  bro                      std::_Rb_tree<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::_Identity<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::empty() const
296       0.0205  bro                      Frame::NthElement(int)
296       0.0205  kallsyms                 check_cfs_rq_runtime
295       0.0205  bro                      iosource::PktSrc::ExtractNextPacketInternal()
292       0.0203  bro                      Val::~Val()
292       0.0203  bro                      std::unique_lock<std::mutex>::mutex() const
292       0.0203  libbroker.so..           bool std::chrono::operator><std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&)
290       0.0201  bro                      Specific_RE_Matcher::LongestMatch(unsigned char const*, int)
288       0.0200  bro                      ListExpr::Eval(Frame*) const
288       0.0200  bro                      TableVal::MemoryAllocation() const
288       0.0200  kallsyms                 detach_entity_cfs_rq
288       0.0200  kallsyms                 timerqueue_del
287       0.0199  libc-2.27.so             fread
286       0.0199  bro                      std::chrono::time_point<std::chrono::_V2::system_clock, std::common_type<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::type> std::chrono::operator+<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> >, long, std::ratio<1l, 1000000000l> >(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&, std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&)
285       0.0198  kallsyms                 tick_sched_handle
284       0.0197  kallsyms                 perf_pmu_disable.part.92
282       0.0196  bro                      Connection::IsReuse(double, unsigned char const*)
282       0.0196  bro                      std::unordered_set<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::hash<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::equal_to<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::empty() const
281       0.0195  bro                      analyzer::Analyzer::FirstSupportAnalyzer(bool)
279       0.0194  bro                      RecordType::FieldDecl(int)
274       0.0190  bro                      pad_size(unsigned long)
273       0.0189  bro                      net_packet_dispatch(double, Packet const*, iosource::PktSrc*)
273       0.0189  bro                      threading::HeartbeatMessage::~HeartbeatMessage()
272       0.0189  bro                      analyzer::Analyzer::Conn() const
271       0.0188  bro                      StmtPList::operator[](int) const
271       0.0188  bro                      std::common_type<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1l> > >::type std::chrono::operator-<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1l> > >(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const&, std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1l> > > const&)
271       0.0188  bro                      std::set<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::begin() const
270       0.0187  bro                      std::_List_iterator<threading::MsgThread*>::_List_iterator(std::__detail::_List_node_base*)
269       0.0187  bro                      Func::HasBodies() const
269       0.0187  bro                      eval_list(Frame*, ListExpr const*)
269       0.0187  bro                      std::_Rb_tree_const_iterator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::_Rb_tree_const_iterator()
266       0.0185  bro                      __gnu_cxx::__aligned_membuf<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::_M_addr() const
266       0.0185  bro                      __gnu_cxx::__aligned_membuf<threading::MsgThread*>::_M_ptr()
263       0.0183  bro                      threading::OutputMessage<threading::MsgThread>::OutputMessage(char const*, threading::MsgThread*)
263       0.0183  libbroker.so..           broker::endpoint::advance_time(std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >)
261       0.0181  libc-2.27.so             __GI___printf_fp_l
260       0.0180  bro                      analyzer::Analyzer::ForwardStream(int, unsigned char const*, bool)
259       0.0180  bro                      threading::DebugMessage::Process()
258       0.0179  kallsyms                 sys_sched_yield
258       0.0179  kallsyms                 wake_q_add
257       0.0178  bro                      std::__cxx11::list<threading::MsgThread*, std::allocator<threading::MsgThread*> >::end()
256       0.0178  bro                      RecordVal::Lookup(int) const
255       0.0177  kallsyms                 __update_load_avg_blocked_se.isra.32
253       0.0176  libc-2.27.so             __memset_sse2_unaligned
252       0.0175  bro                      std::chrono::duration<long, std::ratio<1l, 1000000000l> >::duration<long, std::ratio<1l, 1l>, void>(std::chrono::duration<long, std::ratio<1l, 1l> > const&)
250       0.0174  bro                      RecordType::FieldType(int) const
250       0.0174  bro                      std::_List_node<threading::MsgThread*>::_M_valptr()
248       0.0172  bro                      rules_lex()
248       0.0172  bro                      std::_Deque_iterator<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**>::_Deque_iterator(std::_Deque_iterator<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**> const&)
248       0.0172  bro                      std::_List_iterator<iosource::Manager::Source*>::operator*() const
247       0.0171  bro                      Reassembler::NewBlock(double, unsigned long, unsigned long, unsigned char const*)
247       0.0171  kallsyms                 calc_global_load_tick
247       0.0171  kallsyms                 native_apic_wait_icr_idle
247       0.0171  kallsyms                 rcu_segcblist_future_gp_needed
246       0.0171  bro                      BroString::Reset()
246       0.0171  bro                      threading::MsgThread::MightHaveOut()
246       0.0171  kallsyms                 __switch_to
246       0.0171  kallsyms                 decay_load_missed
243       0.0169  bro                      threading::InputMessage<threading::MsgThread>::Object() const
242       0.0168  bro                      TypeDeclPList::operator[](int) const
241       0.0167  bro                      ODesc::AddBytes(void const*, unsigned int)
241       0.0167  bro                      TableEntryVal::ExpireAccessTime() const
240       0.0167  bro                      safe_malloc(unsigned long)
238       0.0165  kallsyms                 update_process_times
237       0.0165  bro                      threading::MsgThread::SendIn(threading::BasicInputMessage*, bool)
236       0.0164  kallsyms                 cpumask_next_wrap
235       0.0163  bro                      std::__cxx11::list<Trigger*, std::allocator<Trigger*> >::begin()
232       0.0161  bro                      std::_Deque_iterator<threading::BasicInputMessage*, threading::BasicInputMessage*&, threading::BasicInputMessage**>::operator*() const
232       0.0161  bro                      std::__cxx11::list<iosource::Manager::Source*, std::allocator<iosource::Manager::Source*> >::begin()
232       0.0161  libpthread-2.27.so       _pthread_cleanup_pop
231       0.0160  bro                      std::_Hashtable<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::__detail::_Identity, std::equal_to<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::hash<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::__detail::_Mod_range_hashing, std::__detail::_Default_ranged_hash, std::__detail::_Prime_rehash_policy, std::__detail::_Hashtable_traits<true, true, true> >::empty() const
230       0.0160  bro                      iosource::PktSrc::NextTimestamp(double*)
228       0.0158  bro                      IP_Hdr::TotalLen() const
227       0.0158  bro                      RecordVal::MemoryAllocation() const
227       0.0158  bro                      Val::Val(int, TypeTag)
227       0.0158  bro                      std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1l> > >::time_since_epoch() const
224       0.0155  bro                      std::_List_iterator<threading::MsgThread*>::operator*() const
223       0.0155  kallsyms                 propagate_entity_cfs_rq.isra.70
221       0.0153  bro                      analyzer::http::HTTP_Analyzer::DeliverStream(int, unsigned char const*, bool)
220       0.0153  bro                      threading::Value::~Value()
220       0.0153  kallsyms                 __handle_mm_fault
219       0.0152  bro                      DebugLogger::IsVerbose() const
218       0.0151  bro                      analyzer::tcp::TCP_Analyzer::ExtractTCP_Header(unsigned char const*&, int&, int&)
217       0.0151  bro                      Connection::NextPacket(double, int, IP_Hdr const*, int, int, unsigned char const*&, int&, int&, Packet const*)
217       0.0151  bro                      modp_dtoa
217       0.0151  kallsyms                 attach_entity_load_avg
216       0.0150  bro                      std::_List_iterator<threading::MsgThread*>::operator!=(std::_List_iterator<threading::MsgThread*> const&) const
216       0.0150  libc-2.27.so             htons
215       0.0149  bro                      Reassembler::CheckOverlap(DataBlock*, DataBlock*, unsigned long, unsigned long, unsigned char const*)
215       0.0149  bro                      analyzer::http::HTTP_Entity::Deliver(int, char const*, int)
215       0.0149  kallsyms                 ttwu_stat
215       0.0149  libbroker.so..           std::multimap<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >, std::pair<caf::actor, caf::message>, std::less<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > >, std::allocator<std::pair<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const, std::pair<caf::actor, caf::message> > > >::empty() const
214       0.0149  bro                      Val::AsRecordVal()
213       0.0148  bro                      Reassembler::AddAndCheck(DataBlock*, unsigned long, unsigned long, unsigned char const*)
213       0.0148  bro                      post_execute_stmt(Stmt*, Frame*, Val*, stmt_flow_type*)
213       0.0148  bro                      std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1l> > >::value, std::chrono::duration<long, std::ratio<1l, 1l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1l> >, long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&)
212       0.0147  bro                      std::__shared_ptr_access<bro_broker::Manager::BrokerState, (__gnu_cxx::_Lock_policy)2, false, false>::operator->() const
212       0.0147  bro                      std::queue<threading::BasicOutputMessage*, std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> > >::empty() const
210       0.0146  bro                      bool std::chrono::operator< <long, std::ratio<1l, 1000000000l>, long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1l> > const&)
209       0.0145  bro                      Dictionary::Lookup(HashKey const*) const
209       0.0145  bro                      __gnu_cxx::__aligned_membuf<threading::MsgThread*>::_M_addr()
209       0.0145  bro                      file_analysis::File::DeliverStream(unsigned char const*, unsigned long)
209       0.0145  bro                      std::_List_iterator<iosource::Manager::Source*>::_List_iterator(std::__detail::_List_node_base*)
209       0.0145  bro                      std::_List_node<iosource::Manager::Source*>::_M_valptr()
209       0.0145  libpthread-2.27.so       __condvar_confirm_wakeup
208       0.0144  bro                      Packet::ProcessLayer2()
208       0.0144  bro                      std::_List_iterator<analyzer::Analyzer*>::_List_iterator(std::__detail::_List_node_base*)
208       0.0144  kallsyms                 account_process_tick
207       0.0144  bro                      SerialObj::~SerialObj()
207       0.0144  libbroker.so..           std::_Rb_tree<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >, std::pair<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const, std::pair<caf::actor, caf::message> >, std::_Select1st<std::pair<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const, std::pair<caf::actor, caf::message> > >, std::less<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > >, std::allocator<std::pair<std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > > const, std::pair<caf::actor, caf::message> > > >::empty() const
206       0.0143  bro                      BinaryExpr::Fold(Val*, Val*) const
206       0.0143  bro                      ValPList::append(Val*)
206       0.0143  bro                      broker::endpoint::is_shutdown() const
206       0.0143  kallsyms                 __default_send_IPI_shortcut
205       0.0142  bro                      std::common_type<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::type std::chrono::operator+<long, std::ratio<1l, 1000000000l>, long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&)
205       0.0142  libc-2.27.so             __strncpy_sse2_unaligned
203       0.0141  bro                      std::__cxx11::list<analyzer::Analyzer*, std::allocator<analyzer::Analyzer*> >::begin()
203       0.0141  kallsyms                 irq_work_tick
202       0.0140  kallsyms                 hrtimer_reprogram
202       0.0140  ld-2.27.so               do_lookup_x
201       0.0140  bro                      Val::AsNonConstRecord()
201       0.0140  bro                      analyzer::tcp::TCP_Analyzer::IsReuse(double, unsigned char const*)
201       0.0140  bro                      std::_List_iterator<iosource::Manager::Source*>::operator++()
200       0.0139  bro                      RemoteSerializer::NextTimestamp(double*)
199       0.0138  kallsyms                 tick_nohz_tick_stopped
198       0.0137  bro                      std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> >::size() const
196       0.0136  kallsyms                 cpus_share_cache
194       0.0135  bro                      logging::FlushWriteBufferMessage::Process()
194       0.0135  kallsyms                 yield_task_fair
193       0.0134  bro                      analyzer::tcp::ContentLine_Analyzer::DoDeliver(int, unsigned char const*)
193       0.0134  bro                      std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> >::begin()
192       0.0133  bro                      ValPList::replace(int, Val*)
191       0.0133  kallsyms                 page_fault
191       0.0133  kallsyms                 switch_mm_irqs_off
190       0.0132  bro                      std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> >::empty() const
189       0.0131  bro                      PriorityQueue::BubbleDown(int)
189       0.0131  kallsyms                 hrtimer_init
188       0.0130  bro                      analyzer::conn_size::ConnSize_Analyzer::DeliverPacket(int, unsigned char const*, bool, unsigned long, IP_Hdr const*, int)
188       0.0130  bro                      threading::acquire_lock(std::mutex&)
185       0.0128  bro                      BaseList::~BaseList()
185       0.0128  bro                      threading::BasicOutputMessage* const& std::forward<threading::BasicOutputMessage* const&>(std::remove_reference<threading::BasicOutputMessage* const&>::type&)
185       0.0128  libc-2.27.so             _IO_sgetn
184       0.0128  bro                      BoolExpr::Eval(Frame*) const
184       0.0128  bro                      BroType::BroType(TypeTag, bool)
184       0.0128  bro                      BuildConnIDHashKey(ConnID const&)
184       0.0128  bro                      Frame::SetNextStmt(Stmt*)
184       0.0128  bro                      pre_execute_stmt(Stmt*, Frame*)
182       0.0126  bro                      std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> >::pop_front()
181       0.0126  bro                      brolex()
178       0.0124  bro                      BroType::Ref()
177       0.0123  bro                      RuleMatcherState::Match(Rule::PatternType, unsigned char const*, int, bool, bool, bool, bool)
177       0.0123  bro                      analyzer::http::HTTP_Entity::SubmitData(int, char const*)
175       0.0121  bro                      analyzer::tcp::TCP_Reassembler::AckReceived(unsigned long)
174       0.0121  bro                      threading::MsgThread::HasOut()
174       0.0121  kallsyms                 native_iret
173       0.0120  kallsyms                 llist_add_batch
172       0.0119  bro                      std::_Hashtable<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::__detail::_Identity, std::equal_to<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::hash<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::__detail::_Mod_range_hashing, std::__detail::_Default_ranged_hash, std::__detail::_Prime_rehash_policy, std::__detail::_Hashtable_traits<true, true, true> >::size() const
170       0.0118  bro                      BroString::Len() const
170       0.0118  bro                      std::chrono::duration<long, std::ratio<1l, 1l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1l> >, std::ratio<1l, 1000000000l>, long, true, false>::__cast<long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&)
168       0.0117  bro                      PriorityQueue::Top() const
168       0.0117  bro                      iosource::IOSource::IsIdle() const
167       0.0116  bro                      Func::Flavor() const
167       0.0116  kallsyms                 wake_up_process
165       0.0115  bro                      TimerMgr::Advance(double, int)
164       0.0114  bro                      is_vector(Val*)
163       0.0113  bro                      DebugLogger::Log(DebugStream, char const*, ...)
163       0.0113  bro                      Frame::Reset(int)
163       0.0113  bro                      std::common_type<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::chrono::duration<long, std::ratio<1l, 1l> > >::type std::chrono::operator-<long, std::ratio<1l, 1000000000l>, long, std::ratio<1l, 1l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&, std::chrono::duration<long, std::ratio<1l, 1l> > const&)
162       0.0112  bro                      analyzer::tcp::TCP_Reassembler::DataSent(double, unsigned long, int, unsigned char const*, analyzer::tcp::TCP_Flags, bool)
162       0.0112  bro                      std::__cxx11::_List_base<Trigger*, std::allocator<Trigger*> >::_M_clear()
161       0.0112  bro                      Dictionary::Init(int)
161       0.0112  bro                      analyzer::http::HTTP_Entity::DeliverBodyClear(int, char const*, int)
161       0.0112  bro                      std::__cxx11::list<threading::MsgThread*, std::allocator<threading::MsgThread*> >::begin()
161       0.0112  bro                      std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::time_point(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&)
161       0.0112  kallsyms                 __acct_update_integrals
161       0.0112  libc-2.27.so             _IO_file_xsgetn
160       0.0111  bro                      Val::Val(bool, TypeTag)
159       0.0110  bro                      FieldExpr::Fold(Val*) const
159       0.0110  bro                      std::_List_iterator<Trigger*>::_List_iterator(std::__detail::_List_node_base*)
159       0.0110  bro                      std::__cxx11::list<iosource::Manager::Source*, std::allocator<iosource::Manager::Source*> >::end()
158       0.0110  bro                      threading::InputMessage<threading::MsgThread>::~InputMessage()
158       0.0110  bro                      void std::vector<std::unique_lock<std::mutex>, std::allocator<std::unique_lock<std::mutex> > >::_M_realloc_insert<std::unique_lock<std::mutex> >(__gnu_cxx::__normal_iterator<std::unique_lock<std::mutex>*, std::vector<std::unique_lock<std::mutex>, std::allocator<std::unique_lock<std::mutex> > > >, std::unique_lock<std::mutex>&&)
157       0.0109  bro                      std::__cxx11::list<analyzer::Analyzer*, std::allocator<analyzer::Analyzer*> >::end()
156       0.0108  bro                      RecordType::FieldOffset(char const*) const
156       0.0108  bro                      analyzer::mime::MIME_Entity::DecodeDataLine(int, char const*, int)
156       0.0108  bro                      current_time(bool)
155       0.0108  bro                      SegmentProfiler::~SegmentProfiler()
155       0.0108  bro                      file_analysis::File::DeliverChunk(unsigned char const*, unsigned long, unsigned long)
155       0.0108  bro                      std::_List_iterator<iosource::Manager::Source*>::operator!=(std::_List_iterator<iosource::Manager::Source*> const&) const
154       0.0107  bro                      Frame::Release()
154       0.0107  bro                      threading::OutputMessage<logging::WriterFrontend>::OutputMessage(char const*, logging::WriterFrontend*)
154       0.0107  libm-2.27.so             __ieee754_log_avx
153       0.0106  bro                      Connection::CheckHistory(unsigned int, char)
153       0.0106  bro                      __gnu_cxx::__aligned_membuf<iosource::Manager::Source*>::_M_addr()
153       0.0106  bro                      delete_vals(ValPList*)
153       0.0106  bro                      std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**>::_Deque_iterator(std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**> const&)
153       0.0106  bro                      threading::MsgThread::RetrieveOut()
151       0.0105  bro                      std::__cxx11::_List_base<iosource::Manager::Source*, std::allocator<iosource::Manager::Source*> >::_M_get_size() const
150       0.0104  bro                      ID::HasVal() const
150       0.0104  bro                      std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > std::__niter_base<std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > >(std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > >)
149       0.0103  bro                      BroType::AsFuncType()
149       0.0103  bro                      RandTest::end(double*, double*, double*, double*, double*)
149       0.0103  bro                      analyzer::mime::MIME_Entity::Deliver(int, char const*, int)
149       0.0103  bro                      analyzer::tcp::TCP_Flags::SYN() const
148       0.0103  bro                      Val::Val(BroType*)
147       0.0102  bro                      ID::IsGlobal() const
147       0.0102  kallsyms                 hrtick_update
146       0.0101  bro                      non-virtual thunk to RemoteSerializer::NextTimestamp(double*)
146       0.0101  bro                      std::set<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >::empty() const
145       0.0101  bro                      analyzer::conn_size::ConnSize_Analyzer::CheckSizes(bool)
145       0.0101  bro                      analyzer::tcp::ContentLine_Analyzer::DeliverStream(int, unsigned char const*, bool)
145       0.0101  bro                      analyzer::tcp::TCP_Endpoint::DataSent(double, unsigned long, int, int, unsigned char const*, IP_Hdr const*, tcphdr const*)
145       0.0101  kallsyms                 __fget
144       0.0100  bro                      Frame::Clear()
144       0.0100  kallsyms                 start_this_handle
143       0.0099  bro                      Dictionary::DeInit()
143       0.0099  bro                      analyzer::tcp::TCP_Flags::RST() const
143       0.0099  bro                      file_analysis::Manager::DataIn(unsigned char const*, unsigned long, analyzer::Tag, Connection*, bool, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)
143       0.0099  bro                      void std::allocator_traits<std::allocator<threading::BasicOutputMessage*> >::construct<threading::BasicOutputMessage*, threading::BasicOutputMessage* const&>(std::allocator<threading::BasicOutputMessage*>&, threading::BasicOutputMessage**, threading::BasicOutputMessage* const&)
143       0.0099  kallsyms                 ktime_add_safe
143       0.0099  libc-2.27.so             _itoa_word
142       0.0099  bro                      BuiltinFunc::Call(ValPList*, Frame*) const
142       0.0099  bro                      RuleEndpointState::MatcherPList::operator[](int) const
141       0.0098  bro                      analyzer::mime::MIME_Message::Deliver(int, char const*, int)
141       0.0098  kallsyms                 __sb_start_write
139       0.0096  bro                      HashKey::~HashKey()
139       0.0096  bro                      NullStmt::Exec(Frame*, stmt_flow_type&) const
139       0.0096  kallsyms                 __x86_indirect_thunk_r14
138       0.0096  bro                      BroString::MemoryAllocation() const
138       0.0096  bro                      NetSessions::CheckHeaderTrunc(int, unsigned int, unsigned int, Packet const*, EncapsulationStack const*)
138       0.0096  bro                      base_type(TypeTag)
138       0.0096  kallsyms                 __fget_light
137       0.0095  bro                      bro_broker::Manager::Active()
137       0.0095  bro                      logging::writer::Ascii::DoWrite(int, threading::Field const* const*, threading::Value**)
137       0.0095  bro                      std::chrono::time_point<std::chrono::_V2::system_clock, std::chrono::duration<long, std::ratio<1l, 1l> > >::time_point(std::chrono::duration<long, std::ratio<1l, 1l> > const&)
135       0.0094  bro                      analyzer::pia::PIA::Match(Rule::PatternType, unsigned char const*, int, bool, bool, bool, bool)
135       0.0094  bro                      std::unique_lock<std::mutex>::unique_lock(std::unique_lock<std::mutex>&&)
134       0.0093  bro                      SegmentProfiler::SegmentProfiler(SegmentStatsReporter*, Location const*)
134       0.0093  bro                      analyzer::Analyzer::NextStream(int, unsigned char const*, bool)
134       0.0093  bro                      analyzer::Analyzer::UpdateConnVal(RecordVal*)
134       0.0093  kallsyms                 clear_page_rep
133       0.0092  bro                      MutableVal::MutableVal(BroType*)
133       0.0092  bro                      Val::Val(unsigned long, TypeTag)
133       0.0092  libc-2.27.so             _IO_vfscanf
132       0.0092  bro                      IP_Hdr::HdrLen() const
132       0.0092  bro                      RecordCoerceExpr::Fold(Val*) const
132       0.0092  bro                      TypeList::~TypeList()
131       0.0091  bro                      Dictionary::MemoryAllocation() const
131       0.0091  bro                      std::__detail::_List_node_header::_List_node_header()
131       0.0091  bro                      threading::BasicInputMessage::~BasicInputMessage()
131       0.0091  kallsyms                 tick_sched_do_timer
130       0.0090  bro                      ODesc::Grow(unsigned int)
130       0.0090  bro                      std::chrono::duration<long, std::ratio<1l, 1000000000l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::ratio<1000000000l, 1l>, double, false, true>::__cast<double, std::ratio<1l, 1l> >(std::chrono::duration<double, std::ratio<1l, 1l> > const&)
130       0.0090  kallsyms                 jbd2_journal_stop
129       0.0090  bro                      CompositeHash::ComputeSingletonHash(Val const*, int) const
129       0.0090  libc-2.27.so             hack_digit
128       0.0089  bro                      NetSessions::DumpPacket(Packet const*, int)
128       0.0089  bro                      TableVal::DoExpire(double)
128       0.0089  bro                      analyzer::tcp::TCP_Analyzer::UpdateStateMachine(double, analyzer::tcp::TCP_Endpoint*, analyzer::tcp::TCP_Endpoint*, unsigned int, unsigned int, int, int, int, analyzer::tcp::TCP_Flags, int&, int&)
127       0.0088  bro                      analyzer::tcp::TCP_Reassembler::BlockInserted(DataBlock*)
126       0.0087  bro                      Connection::CheckFlowLabel(bool, unsigned int)
126       0.0087  bro                      RuleMatcherState::MatcherInitialized(bool)
126       0.0087  bro                      TableEntryVal::Value()
126       0.0087  bro                      analyzer::SupportAnalyzer::ForwardStream(int, unsigned char const*, bool)
126       0.0087  bro                      std::pair<char const*, unsigned long>::pair<int, true>(char const* const&, int&&)
126       0.0087  bro                      std::queue<threading::BasicInputMessage*, std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> > >::empty() const
125       0.0087  bro                      TableVal::Lookup(Val*, bool)
125       0.0087  bro                      analyzer::tcp::TCP_Endpoint::NoDataAcked() const
124       0.0086  bro                      seq_delta(unsigned int, unsigned int)
124       0.0086  bro                      std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> >::front()
124       0.0086  kallsyms                 fsnotify
123       0.0085  bro                      CompositeHash::ComputeHash(Val const*, int) const
123       0.0085  bro                      analyzer::tcp::TCP_Reassembler::DeliverBlock(unsigned long, int, unsigned char const*)
123       0.0085  bro                      iosource::Manager::Size() const
123       0.0085  bro                      std::enable_if<std::chrono::__is_duration<std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::value, std::chrono::duration<long, std::ratio<1l, 1000000000l> > >::type std::chrono::duration_cast<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&)
122       0.0085  bro                      IPAddr::IPAddr(in_addr const&)
122       0.0085  bro                      std::__shared_ptr_access<bro_broker::Manager::BrokerState, (__gnu_cxx::_Lock_policy)2, false, false>::_M_get() const
121       0.0084  bro                      std::mutex::native_handle()
120       0.0083  bro                      TimerMgr::Time() const
120       0.0083  bro                      Val::AsCount() const
120       0.0083  kallsyms                 account_user_time
119       0.0083  bro                      Val::IsZero() const
119       0.0083  kallsyms                 arch_irq_work_raise
118       0.0082  bro                      Expr::Type() const
118       0.0082  bro                      MutableVal::LoggingAccess() const
117       0.0081  bro                      Connection::CheckEncapsulation(EncapsulationStack const*)
117       0.0081  bro                      IPAddr::operator=(IPAddr const&)
116       0.0081  bro                      Frame::Frame(int, BroFunc const*, ValPList const*)
116       0.0081  bro                      MutableVal::~MutableVal()
116       0.0081  bro                      Val::Val(TypeTag)
115       0.0080  bro                      Connection::BuildConnVal()
115       0.0080  bro                      analyzer::tcp::TCP_Analyzer::DeliverData(double, unsigned char const*, int, int, IP_Hdr const*, tcphdr const*, analyzer::tcp::TCP_Endpoint*, unsigned long, int, analyzer::tcp::TCP_Flags)
114       0.0079  bro                      ID::IsInternalGlobal() const
114       0.0079  bro                      analyzer::tcp::TCP_Endpoint::IsOrig() const
114       0.0079  bro                      strreverse
113       0.0078  bro                      MutableVal::Modified()
113       0.0078  bro                      analyzer::tcp::TCP_Reassembler::Deliver(unsigned long, int, unsigned char const*)
113       0.0078  kallsyms                 __ext4_get_inode_loc
112       0.0078  bro                      Connection::GetTimerMgr() const
112       0.0078  bro                      ODesc::AddRaw(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)
112       0.0078  bro                      std::chrono::duration<long, std::ratio<1l, 1000000000l> > std::chrono::__duration_cast_impl<std::chrono::duration<long, std::ratio<1l, 1000000000l> >, std::ratio<1l, 1l>, long, true, true>::__cast<long, std::ratio<1l, 1000000000l> >(std::chrono::duration<long, std::ratio<1l, 1000000000l> > const&)
110       0.0076  bro                      ODesc::IsBinary() const
109       0.0076  bro                      Connection::Match(Rule::PatternType, unsigned char const*, int, bool, bool, bool, bool)
109       0.0076  bro                      Frame::HasDelayed() const
109       0.0076  bro                      InitStmt::Exec(Frame*, stmt_flow_type&) const
109       0.0076  bro                      SerialObj::IncreaseTimeCounter()
109       0.0076  bro                      init_endpoint(analyzer::tcp::TCP_Endpoint*, analyzer::tcp::TCP_Flags, unsigned int, unsigned int, double)
109       0.0076  bro                      logging::Manager::RecordToFilterVals(logging::Manager::Stream*, logging::Manager::Filter*, RecordVal*)
109       0.0076  kallsyms                 wake_up_q
108       0.0075  bro                      DFA_Machine::StartState() const
108       0.0075  bro                      modp_ulitoa10
108       0.0075  kallsyms                 sched_slice.isra.57
107       0.0074  bro                      analyzer::tcp::TCP_ApplicationAnalyzer::TCP()
107       0.0074  bro                      file_analysis::File::UpdateLastActivityTime()
107       0.0074  bro                      std::chrono::duration<double, std::ratio<1l, 1l> >::duration<double, void>(double const&)
107       0.0074  kallsyms                 __mark_inode_dirty
106       0.0074  bro                      ListVal::ListVal(TypeTag)
106       0.0074  bro                      RefExpr::Assign(Frame*, Val*, Opcode)
106       0.0074  bro                      ValPList::~ValPList()
106       0.0074  bro                      std::_List_iterator<analyzer::Analyzer*>::operator!=(std::_List_iterator<analyzer::Analyzer*> const&) const
106       0.0074  bro                      threading::MsgThread::Heartbeat()
106       0.0074  kallsyms                 kmem_cache_alloc
105       0.0073  bro                      DFA_State_Cache::GetStats(DFA_State_Cache::Stats*)
105       0.0073  bro                      RemoteSerializer::Poll(bool)
105       0.0073  bro                      logging::FlushWriteBufferMessage::FlushWriteBufferMessage(logging::WriterFrontend*)
105       0.0073  kallsyms                 drop_futex_key_refs.isra.15
105       0.0073  kallsyms                 error_entry
104       0.0072  bro                      AttrPList::operator[](int) const
104       0.0072  bro                      IP_Hdr::SrcAddr() const
104       0.0072  bro                      ListVal::~ListVal()
104       0.0072  bro                      siphash(unsigned long*, unsigned char const*, unsigned long, unsigned char const*)
104       0.0072  bro                      std::queue<threading::BasicOutputMessage*, std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> > >::size() const
103       0.0071  bro                      ConstExpr::Eval(Frame*) const
103       0.0071  bro                      ProfileLogger::Log()
103       0.0071  bro                      void __gnu_cxx::new_allocator<threading::BasicInputMessage*>::construct<threading::BasicInputMessage*, threading::BasicInputMessage* const&>(threading::BasicInputMessage**, threading::BasicInputMessage* const&)
102       0.0071  bro                      DataBlock::DataBlock(Reassembler*, unsigned char const*, unsigned long, unsigned long, DataBlock*, DataBlock*, ReassemblerType)
102       0.0071  bro                      HashKey::HashBytes(void const*, int)
101       0.0070  bro                      ConstExpr::Value() const
101       0.0070  bro                      EventHandler::Call(ValPList*, bool)
101       0.0070  bro                      FragReassemblerTracker::~FragReassemblerTracker()
101       0.0070  bro                      IP_Hdr::IP_Hdr(ip const*, bool)
101       0.0070  bro                      iosource::IOSource::SetIdle(bool)
101       0.0070  bro                      std::__cxx11::list<analyzer::Analyzer*, std::allocator<analyzer::Analyzer*> >::clear()
101       0.0070  bro                      std::chrono::duration<double, std::ratio<1l, 1l> >::count() const
101       0.0070  bro                      std::vector<Val*, std::allocator<Val*> >::size() const
100       0.0069  bro                      HasFieldExpr::Fold(Val*) const
100       0.0069  bro                      NetSessions::LookupTimerMgr(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const*, bool)
100       0.0069  bro                      ODesc::Add(char const*, int)
100       0.0069  bro                      PQ_TimerMgr::Top()
100       0.0069  bro                      analyzer::tcp::TCP_Flags::FIN() const
99        0.0069  bro                      Frame::SetElement(int, Val*)
99        0.0069  bro                      std::_List_iterator<threading::BasicThread*>::operator!=(std::_List_iterator<threading::BasicThread*> const&) const
98        0.0068  bro                      HashKey::HashKey(void const*, int)
98        0.0068  bro                      update_window(analyzer::tcp::TCP_Endpoint*, unsigned int, unsigned int, unsigned int, analyzer::tcp::TCP_Flags)
97        0.0067  bro                      EquivClass::Size() const
97        0.0067  bro                      Frame::SetCall(CallExpr const*)
97        0.0067  bro                      ReturnStmt::Exec(Frame*, stmt_flow_type&) const
96        0.0067  bro                      BaseList::remove(void*)
96        0.0067  bro                      ID::Offset() const
96        0.0067  bro                      std::chrono::duration<long, std::ratio<1l, 1l> >::duration<int, void>(int const&)
95        0.0066  bro                      Func::FType() const
95        0.0066  bro                      HashKey::HashKey(char const*)
95        0.0066  bro                      get_relative_seq(analyzer::tcp::TCP_Endpoint const*, unsigned int, unsigned int, unsigned int, bool*)
94        0.0065  bro                      FragReassemblerTracker::FragReassemblerTracker(NetSessions*, FragReassembler*)
94        0.0065  bro                      IPAddr::~IPAddr()
94        0.0065  kallsyms                 __find_get_block
92        0.0064  bro                      BroTypePList::append(BroType*)
92        0.0064  bro                      ListVal::Append(Val*)
92        0.0064  bro                      ODesc::Add(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)
92        0.0064  libc-2.27.so             read
91        0.0063  bro                      NotExpr::Fold(Val*) const
91        0.0063  bro                      std::_List_iterator<Trigger*>::operator!=(std::_List_iterator<Trigger*> const&) const
91        0.0063  bro                      std::__cxx11::_List_base<Trigger*, std::allocator<Trigger*> >::_List_impl::_List_impl()
91        0.0063  ld-2.27.so               _dl_lookup_symbol_x
90        0.0062  bro                      IP_Hdr::~IP_Hdr()
90        0.0062  bro                      IndexExpr::Eval(Frame*) const
90        0.0062  bro                      PriorityQueue::SetElement(int, PQ_Element*)
90        0.0062  bro                      RecordType::NumFields() const
90        0.0062  bro                      StringVal::~StringVal()
90        0.0062  bro                      Val*&& std::forward<Val*>(std::remove_reference<Val*>::type&)
90        0.0062  bro                      analyzer::Analyzer::AppendNewChildren()
90        0.0062  bro                      std::iterator_traits<char*>::difference_type std::__distance<char*>(char*, char*, std::random_access_iterator_tag)
90        0.0062  kallsyms                 ext4_block_write_begin
90        0.0062  kallsyms                 ext4_da_write_begin
89        0.0062  bro                      Connection::OrigAddr() const
89        0.0062  bro                      InExpr::Fold(Val*, Val*) const
89        0.0062  bro                      Tag::Tag(Tag const&)
89        0.0062  bro                      TypeList::Append(BroType*)
89        0.0062  bro                      logging::Manager::ValToLogVal(Val*, BroType*)
89        0.0062  bro                      std::queue<threading::BasicOutputMessage*, std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> > >::push(threading::BasicOutputMessage* const&)
88        0.0061  bro                      Specific_RE_Matcher::Match(unsigned char const*, int)
88        0.0061  bro                      std::__cxx11::list<Trigger*, std::allocator<Trigger*> >::list()
88        0.0061  kallsyms                 sched_clock_tick
87        0.0060  libc-2.27.so             __rawmemchr_sse2
86        0.0060  bro                      PQ_TimerMgr::DoAdvance(double, int)
86        0.0060  bro                      analyzer::mime::MIME_Entity::NewDataLine(int, char const*, int)
86        0.0060  bro                      int const& std::min<int>(int const&, int const&)
86        0.0060  bro                      std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > std::__copy_move<false, false, std::bidirectional_iterator_tag>::__copy_m<std::_List_iterator<Trigger*>, std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > >(std::_List_iterator<Trigger*>, std::_List_iterator<Trigger*>, std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > >)
86        0.0060  kallsyms                 vfs_write
85        0.0059  bro                      BroType::AsTypeList()
85        0.0059  bro                      Val::AsString() const
85        0.0059  kallsyms                 __do_page_fault
85        0.0059  libc-2.27.so             snprintf
84        0.0058  bro                      DFA_State::NFAStateNum() const
84        0.0058  bro                      analyzer::http::HTTP_Entity::DeliverBody(int, char const*, int)
84        0.0058  bro                      file_analysis::AnalyzerSet::DrainModifications()
84        0.0058  kallsyms                 hrtimer_cancel
84        0.0058  kallsyms                 kmem_cache_free
83        0.0058  bro                      analyzer::tcp::TCP_Endpoint::AckWraps() const
83        0.0058  kallsyms                 handle_mm_fault
82        0.0057  bro                      operator==(IPAddr const&, IPAddr const&)
82        0.0057  bro                      std::__cxx11::list<Trigger*, std::allocator<Trigger*> >::end()
82        0.0057  kallsyms                 ext4_da_write_end
81        0.0056  bro                      HashKey::HashKey(void const*, int, unsigned long)
81        0.0056  bro                      analyzer::tcp::TCP_Analyzer::CheckRecording(int, analyzer::tcp::TCP_Flags)
81        0.0056  bro                      int&& std::forward<int>(std::remove_reference<int>::type&)
81        0.0056  bro                      std::allocator<std::_List_node<Trigger*> >::allocator()
81        0.0056  bro                      std::pair<bool, Val*>::operator=(std::pair<bool, Val*>&&)
81        0.0056  bro                      std::vector<Frame*, std::allocator<Frame*> >::pop_back()
81        0.0056  kallsyms                 __vfs_read
81        0.0056  tg3                      /tg3
80        0.0056  bro                      file_analysis::Hash::DeliverStream(unsigned char const*, unsigned long)
79        0.0055  bro                      EqExpr::Fold(Val*, Val*) const
79        0.0055  bro                      analyzer::tcp::TCP_Endpoint::CheckHistory(unsigned int, char)
79        0.0055  bro                      std::__cxx11::_List_base<analyzer::Analyzer*, std::allocator<analyzer::Analyzer*> >::_M_clear()
79        0.0055  kallsyms                 reschedule_interrupt
78        0.0054  bro                      TypeList::TypeList(BroType*)
78        0.0054  bro                      std::queue<threading::BasicInputMessage*, std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> > >::front()
78        0.0054  kallsyms                 hrtimer_wakeup
78        0.0054  kallsyms                 security_file_permission
77        0.0053  bro                      BinaryExpr::StringFold(Val*, Val*) const
77        0.0053  bro                      Reassembler::TrimToSeq(unsigned long)
77        0.0053  bro                      Tag::~Tag()
77        0.0053  bro                      analyzer::Tag::~Tag()
77        0.0053  bro                      analyzer::tcp::ContentLine_Analyzer::SkipDeliveries() const
77        0.0053  bro                      operator<(IPAddr const&, IPAddr const&)
76        0.0053  bro                      FieldExpr::Assign(Frame*, Val*, Opcode)
76        0.0053  bro                      ListVal::~ListVal()
76        0.0053  bro                      void __gnu_cxx::new_allocator<threading::BasicOutputMessage*>::destroy<threading::BasicOutputMessage*>(threading::BasicOutputMessage**)
76        0.0053  kallsyms                 mark_page_accessed
75        0.0052  bro                      TraceState::DoTrace() const
75        0.0052  bro                      analyzer::tcp::TCP_Flags::TCP_Flags(tcphdr const*)
75        0.0052  bro                      std::deque<file_analysis::AnalyzerSet::Modification*, std::allocator<file_analysis::AnalyzerSet::Modification*> >::empty() const
75        0.0052  bro                      update_history(analyzer::tcp::TCP_Flags, analyzer::tcp::TCP_Endpoint*, unsigned long, int)
75        0.0052  bro                      void std::allocator_traits<std::allocator<threading::BasicInputMessage*> >::destroy<threading::BasicInputMessage*>(std::allocator<threading::BasicInputMessage*>&, threading::BasicInputMessage**)
75        0.0052  kallsyms                 apic_send_IPI_self
75        0.0052  kallsyms                 run_local_timers
74        0.0051  bro                      RuleMatcher::InitEndpoint(analyzer::Analyzer*, IP_Hdr const*, int, RuleEndpointState*, bool, analyzer::pia::PIA*)
74        0.0051  kallsyms                 current_kernel_time64
74        0.0051  libc-2.27.so             htonl
73        0.0051  bro                      Event::~Event()
73        0.0051  bro                      std::_Deque_iterator<threading::BasicOutputMessage*, threading::BasicOutputMessage*&, threading::BasicOutputMessage**>::_S_buffer_size()
73        0.0051  bro                      std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > >::insert_iterator(std::__cxx11::list<Trigger*, std::allocator<Trigger*> >&, std::_List_iterator<Trigger*>)
73        0.0051  bro                      std::queue<threading::BasicInputMessage*, std::deque<threading::BasicInputMessage*, std::allocator<threading::BasicInputMessage*> > >::pop()
73        0.0051  bro                      std::unique_lock<std::mutex>* std::__uninitialized_copy<false>::__uninit_copy<std::move_iterator<std::unique_lock<std::mutex>*>, std::unique_lock<std::mutex>*>(std::move_iterator<std::unique_lock<std::mutex>*>, std::move_iterator<std::unique_lock<std::mutex>*>, std::unique_lock<std::mutex>*)
73        0.0051  libc-2.27.so             fwrite
72        0.0050  bro                      Event::Dispatch(bool)
72        0.0050  bro                      analyzer::http::HTTP_Message::IsOrig()
72        0.0050  bro                      analyzer::tcp::TCP_Endpoint::ValidChecksum(tcphdr const*, int) const
72        0.0050  bro                      file_analysis::Manager::GetFile(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, Connection*, analyzer::Tag, bool, bool, char const*)
72        0.0050  bro                      std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> >::pop_front()
72        0.0050  bro                      std::move_iterator<std::unique_lock<std::mutex>*>::base() const
72        0.0050  bro                      void std::vector<std::unique_lock<std::mutex>, std::allocator<std::unique_lock<std::mutex> > >::emplace_back<std::unique_lock<std::mutex> >(std::unique_lock<std::mutex>&&)
72        0.0050  kallsyms                 memset
72        0.0050  kallsyms                 smp_call_function_many
72        0.0050  ld-2.27.so               _dl_fixup
72        0.0050  libc-2.27.so             isupper
71        0.0049  bro                      Connection::SetLastTime(double)
71        0.0049  bro                      FuncType::Flavor() const
71        0.0049  bro                      addr_port_canon_lt(IPAddr const&, unsigned int, IPAddr const&, unsigned int)
71        0.0049  bro                      bool __gnu_cxx::__is_null_pointer<char>(char*)
71        0.0049  bro                      std::_List_node<threading::BasicThread*>::_M_valptr()
71        0.0049  bro                      threading::DebugMessage::~DebugMessage()
70        0.0049  bro                      Dictionary::InitForIteration() const
70        0.0049  bro                      HashKey::Size() const
70        0.0049  bro                      Val::AsTable() const
70        0.0049  bro                      std::vector<std::unique_lock<std::mutex>, std::allocator<std::unique_lock<std::mutex> > >::size() const
70        0.0049  kallsyms                 cpumask_next
69        0.0048  bro                      BroType::~BroType()
69        0.0048  bro                      analyzer::tcp::TCP_Endpoint::SeqWraps() const
69        0.0048  bro                      escapeReservedContent(ODesc*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, char const*, int)
69        0.0048  bro                      std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > std::__copy_move_a2<false, std::_List_iterator<Trigger*>, std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > > >(std::_List_iterator<Trigger*>, std::_List_iterator<Trigger*>, std::insert_iterator<std::__cxx11::list<Trigger*, std::allocator<Trigger*> > >)
69        0.0048  kallsyms                 add_transaction_credits
68        0.0047  bro                      ConnID::~ConnID()
68        0.0047  bro                      PriorityQueue::Swap(int, int)
68        0.0047  bro                      RecordVal::~RecordVal()
68        0.0047  bro                      VectorVal::Assign(unsigned int, Val*, Opcode)
68        0.0047  bro                      analyzer::Analyzer::DeliverPacket(int, unsigned char const*, bool, unsigned long, IP_Hdr const*, int)
68        0.0047  bro                      analyzer::tcp::TCP_Analyzer::UpdateConnVal(RecordVal*)
68        0.0047  bro                      net_is_processing_suspended()
67        0.0047  bro                      BifFunc::bro_to_lower(Frame*, ValPList*)
67        0.0047  bro                      CompositeHash::SingleValHash(int, char*, BroType*, Val*, bool) const
67        0.0047  bro                      HashKey::Hash() const
67        0.0047  bro                      Val::InternalInt() const
67        0.0047  bro                      __gnu_cxx::__aligned_membuf<threading::BasicThread*>::_M_ptr()
67        0.0047  bro                      long const& std::min<long>(long const&, long const&)
67        0.0047  bro                      std::_List_iterator<threading::BasicThread*>::_List_iterator(std::__detail::_List_node_base*)
67        0.0047  libc-2.27.so             __libc_enable_asynccancel
66        0.0046  bro                      IP_Hdr::IsFragment() const
66        0.0046  bro                      __gnu_cxx::__aligned_membuf<analyzer::Analyzer*>::_M_ptr()
66        0.0046  bro                      std::__cxx11::list<iosource::Manager::Source*, std::allocator<iosource::Manager::Source*> >::_M_node_count() const
66        0.0046  bro                      std::deque<threading::BasicOutputMessage*, std::allocator<threading::BasicOutputMessage*> >::begin()
66        0.0046  bro                      streq(char const*, char const*)
66        0.0046  bro                      void __gnu_cxx::new_allocator<CallInfo>::construct<CallInfo, CallInfo>(CallInfo*, CallInfo&&)
66        0.0046  kallsyms                 unlock_page
65        0.0045  bro                      analyzer::http::HTTP_Message::RequestBuffer(int*, char**)
65        0.0045  bro                      threading::BasicOutputMessage::~BasicOutputMessage()
64        0.0044  bro                      BoolExpr::DoSingleEval(Frame*, Val*, Expr*) const
64        0.0044  bro                      IPAddr::IPAddr()
64        0.0044  bro                      expire_timers(iosource::PktSrc*)
64        0.0044  bro                      net_update_time(double)
64        0.0044  bro                      std::vector<Val*, std::allocator<Val*> >::_M_default_append(unsigned long)
64        0.0044  bro                      yyparse()
64        0.0044  kallsyms                 do_select
64        0.0044  kallsyms                 jbd2_journal_dirty_metadata
63        0.0044  bro                      Dictionary::Dictionary(dict_order, int)
63        0.0044  bro                      Dictionary::Insert(DictEntry*, int)
63        0.0044  bro                      bool std::operator==<file_analysis::AnalyzerSet::Modification*, file_analysis::AnalyzerSet::Modification*&, file_analysis::AnalyzerSet::Modification**>(std::_Deque_iterator<file_analysis::AnalyzerSet::Modification*, file_analysis::AnalyzerSet::Modification*&, file_analysis::AnalyzerSet::Modification**> const&, std::_Deque_iterator<file_analysis::AnalyzerSet::Modification*, file_analysis::AnalyzerSet::Modification*&, file_analysis::AnalyzerSet::Modification**> const&)
63        0.0044  bro                      file_analysis::File::DataIn(unsigned char const*, unsigned long)
63        0.0044  bro                      std::__cxx11::_List_base<Trigger*, std::allocator<Trigger*> >::_M_init()
63        0.0044  bro                      void std::_Destroy_aux<false>::__destroy<std::unique_lock<std::mutex>*>(std::unique_lock<std::mutex>*, std::unique_lock<std::mutex>*)
63        0.0044  bro                      void std::vector<CallInfo, std::allocator<CallInfo> >::emplace_back<CallInfo>(CallInfo&&)
63        0.0044  kallsyms                 ext4_file_write_iter
62        0.0043  bro                      Dictionary::Length() const
62        0.0043  bro                      HashKey::CopyKey(void const*, int) const
62        0.0043  bro                      analyzer::Analyzer::GetAnalyzerTag() const
62        0.0043  bro                      analyzer::mime::MIME_Entity::FlushData()
62        0.0043  bro                      std::_List_iterator<threading::BasicThread*>::operator*() const
62        0.0043  bro                      unsigned long const& std::max<unsigned long>(unsigned long const&, unsigned long const&)
62        0.0043  kallsyms                 shmem_getpage_gfp
62        0.0043  libc-2.27.so             _IO_file_underflow@@GLIBC_2.2.5
61        0.0042  bro                      CompositeHash::CompositeHash(TypeList*)
61        0.0042  bro                      Event::Event(EventHandlerPtr, ValPList*, unsigned long, unsigned int, TimerMgr*, BroObj*)
61        0.0042  bro                      FuncType::YieldType()
61        0.0042  bro                      IterCookie::IterCookie(int, int)
61        0.0042  bro                      do_split_string(StringVal*, RE_Matcher*, int, int)
61        0.0042  bro                      rules_parse()
61        0.0042  bro                      std::_List_iterator<threading::BasicThread*>::operator++(int)
61        0.0042  bro                      std::vector<Func::Body, std::allocator<Func::Body> >::end() const
61        0.0042  kallsyms                 __generic_file_write_iter
61        0.0042  kallsyms                 copy_page_to_iter
61        0.0042  kallsyms                 sys_read
60        0.0042  bro                      Bstr_cmp(BroString const*, BroString const*)
60        0.0042  bro                      analyzer::conn_size::ConnSize_Analyzer::UpdateConnVal(RecordVal*)
60        0.0042  bro                      file_analysis::boolPDict::Lookup(char const*) const
60        0.0042  bro                      std::__cxx11::list<iosource::Manager::Source*, std::allocator<iosource::Manager::Source*> >::size() const


More information about the bro-dev mailing list