TRACE-CMD.DAT.V(5) libtracefs TRACE-CMD.DAT.V(5) (NAME) trace-cmd.dat.v7 - trace-cmd (SYNOPSIS) trace-cmd.dat ignore (DESCRIPTION) trace-cmd(1) <> . . trace-cmd ( trace-cmd-report(1)). (INITIAL FORMAT) : 0x17 0x08 0x44 : "tracing" ('\0') : "7\0" (endianness) : 0 = little endian 1 = big endian "long" : 4 - 32-bit long values 8 - 64-bit long values : long . [ . ] . : "name\0version\0" "name" "version" . "none" . OPTIONS . . OPTIONS . . : (FORMAT OF THE SECTION HEADER) <2 bytes> unsigned short integer, ID of the section. <2 bytes> unsigned short integer, section flags: 1 = the section is compressed. <4 bytes> ID of a string, description of the section. <8 bytes> long long unsigned integer, size of the section in the file. . . . (COMPRESSION FORMAT OF THE FILE SECTIONS) . : <4 bytes> unsigned int, size of compressed data in this section. <4 bytes> unsigned int, size of uncompressed data. binary compressed data, with the specified size. (COMPRESSION FORMAT OF THE TRACE DATA) BUFFER FLYRECORD BUFFER LATENCY . . . (chunks) . . : <4 bytes> unsigned int, count of chunks. . : <4 bytes> unsigned int, size of compressed data in this chunk. <4 bytes> unsigned int, size of uncompressed data, aligned with the trace page size. binary compressed data, with the specified size. . . (OPTIONS SECTION) Section ID: 0 . . : <2 bytes> unsigned short integer, ID of the option. <4 bytes> unsigned integer, size of the option's data. bytes of the size specified above, data of the option. : DONE: id 0, size 8 . DONE : <8 bytes> long long unsigned integer, offset in the trace file where the next options section is located. 0 . DATE: id 1, size vary DATE null (Generic Time of Day) . CPUSTAT: id 2, size vary CPUSTAT null </stats>> . (CPU) CPUSTAT . BUFFER: id 3, size vary BUFFER flyrecord . BUFFER . BUFFER : <8 bytes> long long unsigned integer, offset in the trace file where the BUFFER FLYRECORD section is located, containing flyrecord trace data. a null terminated ASCII string, name of the trace instance. "" (top instance) . a null terminated ASCII string, trace clock used for events timestamps in this trace instance. <4 bytes> unsigned integer, size of the trace buffer page. <4 bytes> unsigned integer, count of the CPUs with trace data. CPU : <4 bytes> unsigned integer, ID of the CPU. <8 bytes> long long unsigned integer, offset in the trace file where the trace data for this CPU is located. <8 bytes> long long unsigned integer, size of the trace data for this CPU. TRACECLOCK: id 4, size vary TRACECLOCK null <> . UNAME: id 5, size vary UNAME null . uname() . HOOK: id 6, size vary HOOK null : . OFFSET: id 7, size vary OFFSET null . CPUCOUNT: id 8, size 4 CPUCOUNT : <4 bytes> unsigned integer, number of CPUs in the system. VERSION: id 9, size vary VERSION null trace-cmd . PROCMAPS: id 10, size vary PROCMAPS null . : \n \n ... ... ... TRACEID: id 11, size 8 TRACEID : <8 bytes> long long unsigned integer, trace session identifier. TIME_SHIFT: id 12, size vary TIME_SHIFT (host) (guest) . . . TIME_SHIFT : <8 bytes> long long unsigned integer, trace identifier of the peer (usually the host). <4 bytes> unsigned integer, flags specific to the time synchronization protocol, used in this trace session. <4 bytes> unsigned integer, number of traced CPUs. CPU : <4 bytes> unsigned integer, count of the recorded timestamps corrections for this CPU. , , , GUEST: id 13, size vary GUEST . . GUEST . . GUEST : a null terminated ASCII string, name of the guest. <8 bytes> long long unsigned integer, trace identifier of the guest for this session. <4 bytes> unsigned integer, number of guest's CPUs. CPU: <4 bytes> unsigned integer, ID of the CPU. <4 bytes> unsigned integer, PID of the host task, emulating this guest CPU. TSC2NSEC: id 14, size 16 TSC2NSEC TSC . TSC2NSEC : <4 bytes> unsigned integer, time multiplier. <4 bytes> unsigned integer, time shift. <8 bytes> unsigned long long integer, time offset. STRINGS: id 15, size vary STRINGS nul . HEADER_INFO: id 16, size 8 HEADER_INFO : <8 bytes> long long unsigned integer, offset into the trace file where the HEADER INFO section is located FTRACE_EVENTS: id 17, size 8 FTRACE_EVENTS : <8 bytes> long long unsigned integer, offset into the trace file where the FTRACE EVENT FORMATS section is located. EVENT_FORMATS: id 18, size 8 EVENT_FORMATS : <8 bytes> long long unsigned integer, offset into the trace file where the EVENT FORMATS section is located. KALLSYMS: id 19, size 8 KALLSYMS : <8 bytes> long long unsigned integer, offset into the trace file where the KALLSYMS section is located. PRINTK: id 20, size 8 PRINTK : <8 bytes> long long unsigned integer, offset into the trace file where the TRACE_PRINTK section is located. CMDLINES: id 21, size 8 CMDLINES : <8 bytes> long long unsigned integer, offset into the trace file where the SAVED COMMAND LINES section is located. BUFFER_TEXT: id 22, size BUFFER_LAT (latency) . BUFFER_LAT : <8 bytes> long long unsigned integer, offset in the trace file where the BUFFER LATENCY section is located, containing latency trace data. a null terminated ASCII string, name of the trace instance. "" . a null terminated ASCII string, trace clock used for events timestamps in this trace instance. BTF_FILE: id 23, size 8 BTF_FILE : /sys/kernel/btf/vmlinux trace.dat. . LAST_BOOT_INFO: id 24, size vary LAST_BOOT_INFO last_boot_info . ":" last_boot_info . . MODULES_FILE: id 25, size 8 MODULES_FILE : /proc/modules trace.dat. . (HEADER INFO SECTION) Section ID: 16 : "header_page\0" . debugfs/tracing/events/header_page . : \fBcommit\fR long . : field: local_t commit; offset:8; \fBsize:8;\fR signed:1; long . : "header_event\0" . debugfs/tracing/events/header_event . trace-cmd (ring buffer) . (FTRACE EVENT FORMATS SECTION) Section ID: 17 Ftrace . Ftrace . Ftrace . : Ftrace. Ftrace : debugfs/tracing/events/ftrace//format (EVENT FORMATS SECTION) Section ID: 18 . (event systems) . debugfs/tracing/events \fBftrace\fR . : null . . : . : debugfs/tracing/events///format (KALLSYMS SECTION) Section ID: 19 . . : /proc/kallsyms TRACE_PRINTK (TRACE_PRINTK SECTION) Section ID: 20 trace_printk() . : debugfs/tracing/printk_formats printk . debugfs/tracing/printk_formats . (SAVED COMMAND LINES SECTION) Section ID: 21 (PID) . PID . debugfs/tracing/saved_cmdlines . FLYRECORD (BUFFER FLYRECORD SECTION) flyrecord . CPU . BUFFER FLYRECORD BUFFER CPU . (padding) CPU CPU ( ) . Ftrace . trace-cmd \fBmmap(2)\fR . (mmap) . (BUFFER TEXT SECTION) .ft C Section ID: 22 (latency) debugfs/tracing/trace . (STRINGS SECTION) .ft Section ID: 15 . nul . . . BTF (BTF FILE SECTION) Section ID: 23 BTF ( ) . /sys/kernel/btf/vmlinux . (MODULES FILE SECTION) Section ID: 25 ( ) . /proc/modules . (SEE ALSO) trace-cmd(1), trace-cmd-record(1), trace-cmd-report(1), trace-cmd-start(1), trace-cmd-stop(1), trace-cmd-extract(1), trace-cmd-reset(1), trace-cmd-split(1), trace-cmd-list(1), trace-cmd-listen(1), trace-cmd.dat(5) (AUTHOR) Steven Rostedt (RESOURCES) https://git.kernel.org/pub/scm/utils/trace-cmd/trace-cmd.git (COPYING) (C) 2010 Red Hat, Inc. (GPL) . (NOTES) 1. rostedt@goodmis.org mailto:rostedt@goodmis.org libtracefs 03/09/2026 TRACE-CMD.DAT.V(5)