Method and apparatus for operating system event notification mechanism using file system interface

• US 8,935,579 B2
• Filed: 04/11/2012
• Issued: 01/13/2015
• Est. Priority Date: 01/31/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Jann, Joefon, Pattnaik, Pratap, Burugula, Ramanjaneya Sarma, Dubey, Niteesh
• Primary Examiner(s): TRUONG, LOAN
• Application Number:
  US13/444,707
• Publication Number:
  US 20120198479A1
• Time in Patent Office: 1,007 Days
• Field of Search: 714/48, 714/57, 714/39
• US Class Current: 714/48
• CPC Class Codes: G06F 11/3466 Performance evaluation by tracing or monitoring
• CPC Class Codes: G06F 2201/86 Event-based monitoring
• CPC Class Codes: G06F 9/542 Event management; Broadcasting; Multicasting; Notifications

Abstract

A method and structure for OS event notification, including a central processing unit (CPU) and a memory including instructions for an event notification mechanism for monitoring operating system events in an operating system (OS) being executed by the CPU. The OS includes a kernel having a plurality of kernel subcomponents that provide services to one or more applications executing in the OS in a user mode, using system calls to the kernel. The OS event notification mechanism is capable of monitoring events within the kernel, at a level below the user mode level. The OS event notification mechanism includes Application Program Interfaces (APIs) that are standard for the OS.

Claims

1. An apparatus, comprising:

a central processing unit (CPU); and

a memory including instructions for an event notification mechanism for monitoring operating system events in an operating system (OS) being executed by said CPU, said event notification mechanism providing, upon an occurrence of an event registered by at least one event consumer, a notification to each event consumer that has registered to be notified upon occurrence of said registered event,

wherein said OS comprises a kernel comprising a plurality of kernel subcomponents that provide services to one or more applications executing in said OS in a user mode, using system calls to said kernel,

wherein said OS event notification mechanism is capable of monitoring events within said kernel, at a level below said user mode level,

wherein any arbitrary event in said operating system, including any event inside said kernel, as well as any event in applications operating in said user mode, can be selected for monitoring, said OS event notification mechanism thereby spanning both user-level events and kernel-level events, and wherein said OS event notification mechanism comprises Application Program Interfaces (APIs) that are standard for said OS.

2. The apparatus of claim 1, wherein said OS standard APIs comprise filesystem APIs that are standard for said OS, said standard filesystem APIs used for accessing files and filesystems in said OS.

3. The apparatus of claim 1, wherein said OS event notification mechanism uses special types of files pre-assigned to said OS event notification mechanism.

4. The apparatus of claim 3, wherein said special types of files comprise files represented by a pre-assigned extension name.

5. The apparatus of claim 3, wherein said special types of files are stored in preassigned directory extension names.

6. The apparatus of claim 3, wherein said OS event notification mechanism uses said special types of files to permit event consumers to one or more of:

register for an event notification;

receive an event notification when a registered event occurs; and

retrieve details of an event that has occurred.

7. The apparatus of claim 3, wherein said OS event notification mechanism monitors a health of said OS, and wherein using said special types of files eliminates a need for a polling event notification method or for a specialized monitoring API (Application Program Interface) to register an interest in being notified of an event, to receive an event notification when a registered event occurs, and to get more details on event after occurrences.

8. The apparatus of claim 3, wherein said special types of files comprise a pseudo filesystem.

9. The apparatus of claim 8, wherein said pseudo filesystem is designed to provide a facility to aggregate multiple event requests from multiple event consumers into one request to an event producer, a mechanism to provide non-destructive reads to event consumers, and a mechanism to provide a stack trace of a program that caused an event to be triggered.

10. The apparatus of claim 1, wherein said using of standard APIs of said OS permits said event notification mechanism to be used in monitoring applications written in any standard computer language.

11. The apparatus of claim 3, wherein said special types of files are located in pre-assigned locations in a file system, as pre-assigned files respectively associated with defined events.

12. A method of monitoring operating system (OS) events, said method comprising:

storing instructions in a memory that execute an event notification mechanism for monitoring events in an OS and for notifying an event consumer upon occurrence of an event for which said event consumer has registered for notification,

wherein said OS comprises a kernel comprising a plurality of kernel subcomponents that provide services to one or more applications executing in said OS in a user mode, using system calls to said kernel, and

wherein said OS event notification mechanism is capable of monitoring events within aid kernel, at a level below said user mode level.

13. The method of claim 12, wherein said OS event notification mechanism is also capable of monitoring events in applications operating in a level of said user mode, as well as monitoring events within said kernel, said OS event notification mechanism thereby spanning both user-level events and kernel-level events.

14. The method of claim 12, wherein said operating system event notification mechanism is implemented using special types of files,

wherein said special types of files comprise filesystem interfaces that are standard to said OS, and

wherein said special types of files can be represented by a pre-assigned extension name.

15. The method of claim 14, wherein said OS event notification mechanism uses said standard filesystem interfaces to permit event consumers for one or more of:

registering for an event notification;

receiving an event notification when a registered event occurs; and

getting details of an event that has occurred.

16. The method of claim 14, wherein said special types of files can be stored in a pre-assigned directory extension name.

17. The method of claim 13, wherein said OS event notification mechanism monitors a health of said OS, and wherein using said special types of files eliminates a need for a polling event notification method or for a specialized monitoring API (Application Program Interface) to register an interest in being notified of an event, to receive an event notification when a registered event occurs, and to get more details on event after occurrences.

18. A non-transitory, computer-readable storage medium, tangibly embodying a sequence of computer-readable instructions that implement the method defined in claim 12.

19. The storage medium of claim 18, as comprising one of:

a memory device in a computer currently executing an instance of an OS being monitored;

a memory device in a computer currently storing instruction for selectively executing an instance of an OS to be monitored;

a standalone memory device intended to be inserted into computer I/O device for purpose of downloading the computer-readable instructions onto the computer; and

a memory device in a computer to which can be connected for downloading the computer-readable instructions onto another computer.

20. The method of claim 15, wherein an event to be monitored is registered by an event consumer by using said standard filesystem interfaces to open a file of said preassigned extension name and writing an event-specific value into said file.