process_info_linux.go

// This file is licensed under the MIT License.
// This product includes software developed at Datadog (https://www.datadoghq.com/).
// Copyright © 2015 Kentaro Kuribayashi <kentarok@gmail.com>
// Copyright 2014-present Datadog, Inc.

package gops

// Build a hash pid -> ppid
func buildPIDHash(processInfos []*ProcessInfo) (hash map[int32]int32) {
	hash = make(map[int32]int32)
	for _, processInfo := range processInfos {
		hash[processInfo.PID] = processInfo.PPID
	}
	return
}

// Return whether the PID is of a kernel thread, based on whether it has
// the init process (PID 1) as ancestor
func isKernelThread(pid int32, pidHash map[int32]int32, depth int32) bool {
	if pid == 1 {
		return false
	}
	// Once we reach this level of recursion we know it's not a kernel thread.
	// Also, avoids a possible infinite recursion as our process list is not
	// necessarily consistent.
	if depth > 2 {
		return false
	}

	ppid, ok := pidHash[pid]
	if !ok {
		return true
	}

	return isKernelThread(ppid, pidHash, depth+1)
}

// Name processes "kernel" if they're a kernel thread
func postProcess(processInfos []*ProcessInfo) {
	pidHash := buildPIDHash(processInfos)
	for _, processInfo := range processInfos {
		if isKernelThread(processInfo.PID, pidHash, 0) {
			processInfo.Name = "kernel"
		}
	}
}