Selective logging of network requests based on subsets of the program that were executed

摘要

In an embodiment, in response to detecting a request by a program to access a network, if the request is the first time that the program requests to access the network, a subset of instructions is replaced in the program with supervisor call instructions. The supervisor call instructions cause respective interrupts of execution of the program. In response to each of the respective interrupts of execution of the program, the supervisor call instructions that caused the respective interrupts are replaced with the respective swapped instructions, and if a number of the respective interrupts of execution exceed a trap threshold, all remaining of the respective swapped instructions are stored to the program.

主权项

1. A method comprising:
in response to detecting a request by a program to access a network, if the request is a first time that the program requests to access the network, replacing a subset of instructions in the program with supervisor call instructions and saving the subset of instructions as respective swapped instructions, wherein the supervisor call instructions cause respective interrupts of execution of the program; if a number of network accesses requested by the program is less than a first network threshold, performing complete logging of the request; and in response to each of the respective interrupts of execution of the program, replacing the supervisor call instructions that caused the respective interrupts with the respective swapped instructions and if a number of the respective interrupts of execution exceed a trap threshold, storing all remaining of the respective swapped instructions to the program.