Operating systems engineers have developed tracing tools that log details about process execution at the kernel level. These tools make it easier to understand the actual execution that takes place on real systems. Unfortunately, uncovering certain types of useful information in kernel trace data is nearly impossible through manual inspection of a trace log. To detect interesting interprocess communication patterns and other recurring runtime execution patterns in operating system trace logs, we employ data mining techniques, in particular, frequent pattern mining. We present a framework for mining kernel trace data, making use of frequent pattern mining in conjunction with special considerations for the temporal characteristics of kernel trace data. We report our findings using our framework to isolate processes responsible for systemic problems on a LINUX system and demonstrate our framework is versatile and efficient.
Frequent pattern mining for kernel trace data REF is a recent work aiming at the detection of recurring runtime execution patterns, such as inter-process communication patterns.
Frequent pattern mining for kernel trace data
SAC '08
Computer Science