small documentation fixes

- ustack/kstack: indent output to conform with recent changes
- Add ntop to the list of functions
- Small adjustments to follow the documentation style

docs/reference_guide.md

@@ -1096,48 +1096,48 @@ Examples:
 Attaching 1 probe...
 [...]
 @[
-ip_output+1
-tcp_transmit_skb+1308
-tcp_write_xmit+482
-tcp_release_cb+225
-release_sock+64
-tcp_sendmsg+49
-sock_sendmsg+48
-sock_write_iter+135
-__vfs_write+247
-vfs_write+179
-sys_write+82
-entry_SYSCALL_64_fastpath+30
+    ip_output+1
+    tcp_transmit_skb+1308
+    tcp_write_xmit+482
+    tcp_release_cb+225
+    release_sock+64
+    tcp_sendmsg+49
+    sock_sendmsg+48
+    sock_write_iter+135
+    __vfs_write+247
+    vfs_write+179
+    sys_write+82
+    entry_SYSCALL_64_fastpath+30
 ]: 1708
 @[
-ip_output+1
-tcp_transmit_skb+1308
-tcp_write_xmit+482
-__tcp_push_pending_frames+45
-tcp_sendmsg_locked+2637
-tcp_sendmsg+39
-sock_sendmsg+48
-sock_write_iter+135
-__vfs_write+247
-vfs_write+179
-sys_write+82
-entry_SYSCALL_64_fastpath+30
+    ip_output+1
+    tcp_transmit_skb+1308
+    tcp_write_xmit+482
+    __tcp_push_pending_frames+45
+    tcp_sendmsg_locked+2637
+    tcp_sendmsg+39
+    sock_sendmsg+48
+    sock_write_iter+135
+    __vfs_write+247
+    vfs_write+179
+    sys_write+82
+    entry_SYSCALL_64_fastpath+30
 ]: 9048
 @[
-ip_output+1
-tcp_transmit_skb+1308
-tcp_write_xmit+482
-tcp_tasklet_func+348
-tasklet_action+241
-__do_softirq+239
-irq_exit+174
-do_IRQ+74
-ret_from_intr+0
-cpuidle_enter_state+159
-do_idle+389
-cpu_startup_entry+111
-start_secondary+398
-secondary_startup_64+165
+    ip_output+1
+    tcp_transmit_skb+1308
+    tcp_write_xmit+482
+    tcp_tasklet_func+348
+    tasklet_action+241
+    __do_softirq+239
+    irq_exit+174
+    do_IRQ+74
+    ret_from_intr+0
+    cpuidle_enter_state+159
+    do_idle+389
+    cpu_startup_entry+111
+    start_secondary+398
+    secondary_startup_64+165
 ]: 11430
 ```
 
@@ -1155,62 +1155,62 @@ Attaching 1 probe...
 ^C
 
 @[
-__open_nocancel+65
-command_word_completion_function+3604
-rl_completion_matches+370
-bash_default_completion+540
-attempt_shell_completion+2092
-gen_completion_matches+82
-rl_complete_internal+288
-rl_complete+145
-_rl_dispatch_subseq+647
-_rl_dispatch+44
-readline_internal_char+479
-readline_internal_charloop+22
-readline_internal+23
-readline+91
-yy_readline_get+152
-yy_readline_get+429
-yy_getc+13
-shell_getc+469
-read_token+251
-yylex+192
-yyparse+777
-parse_command+126
-read_command+207
-reader_loop+391
-main+2409
-__libc_start_main+231
-0x61ce258d4c544155
+    __open_nocancel+65
+    command_word_completion_function+3604
+    rl_completion_matches+370
+    bash_default_completion+540
+    attempt_shell_completion+2092
+    gen_completion_matches+82
+    rl_complete_internal+288
+    rl_complete+145
+    _rl_dispatch_subseq+647
+    _rl_dispatch+44
+    readline_internal_char+479
+    readline_internal_charloop+22
+    readline_internal+23
+    readline+91
+    yy_readline_get+152
+    yy_readline_get+429
+    yy_getc+13
+    shell_getc+469
+    read_token+251
+    yylex+192
+    yyparse+777
+    parse_command+126
+    read_command+207
+    reader_loop+391
+    main+2409
+    __libc_start_main+231
+    0x61ce258d4c544155
 ]: 9
 @[
-__open_nocancel+65
-command_word_completion_function+3604
-rl_completion_matches+370
-bash_default_completion+540
-attempt_shell_completion+2092
-gen_completion_matches+82
-rl_complete_internal+288
-rl_complete+89
-_rl_dispatch_subseq+647
-_rl_dispatch+44
-readline_internal_char+479
-readline_internal_charloop+22
-readline_internal+23
-readline+91
-yy_readline_get+152
-yy_readline_get+429
-yy_getc+13
-shell_getc+469
-read_token+251
-yylex+192
-yyparse+777
-parse_command+126
-read_command+207
-reader_loop+391
-main+2409
-__libc_start_main+231
-0x61ce258d4c544155
+    __open_nocancel+65
+    command_word_completion_function+3604
+    rl_completion_matches+370
+    bash_default_completion+540
+    attempt_shell_completion+2092
+    gen_completion_matches+82
+    rl_complete_internal+288
+    rl_complete+89
+    _rl_dispatch_subseq+647
+    _rl_dispatch+44
+    readline_internal_char+479
+    readline_internal_charloop+22
+    readline_internal+23
+    readline+91
+    yy_readline_get+152
+    yy_readline_get+429
+    yy_getc+13
+    shell_getc+469
+    read_token+251
+    yylex+192
+    yyparse+777
+    parse_command+126
+    read_command+207
+    reader_loop+391
+    main+2409
+    __libc_start_main+231
+    0x61ce258d4c544155
 ]: 18
 ```
 
@@ -1299,8 +1299,14 @@ Tracing block I/O sizes > 0 bytes
 - `system(char *fmt)` - Execute shell command
 - `exit()` - Quit bpftrace
 - `cgroupid(char *path)` - Resolve cgroup ID
+- `ntop(int af, int addr)` - Convert IP address data to text
 
-Some of these are asynchronous: the kernel queues the event, but some time later (milliseconds) it is processed in user-space. The asynchronous actions are: <tt>printf()</tt>, <tt>time()</tt>, and <tt>join()</tt>. Both <tt>ksym()</tt> and <tt>usym()</tt>, as well as the variables <tt>kstack</tt> and </tt>ustack</tt>, record addresses synchronously, but then do symbol translation asynchronously.
+Some of these are asynchronous: the kernel queues the event, but some time
+later (milliseconds) it is processed in user-space. The asynchronous actions
+are: <tt>printf()</tt>, <tt>time()</tt>, and <tt>join()</tt>. Both
+<tt>ksym()</tt> and <tt>usym()</tt>, as well as the variables <tt>kstack</tt>
+and </tt>ustack</tt>, record addresses synchronously, but then do symbol
+translation asynchronously.
 
 A selection of these are discussed in the following sections.
 
@@ -1518,7 +1524,7 @@ Attaching 2 probes...
 @opens: 119
 ```
 
-## 13. `cgroupid`: Resolve cgroup ID
+## 13. `cgroupid()`: Resolve cgroup ID
 
 Syntax: `cgroupid(char *path)`
 
@@ -1541,7 +1547,7 @@ And in other terminal:
 # cat /etc/shadow
 ```
 
-## 14. `ntop`: Convert IP address data to text
+## 14. `ntop()`: Convert IP address data to text
 
 Syntax: `ntop(int af, int addr)`
 

man/man8/bpftrace.8

@@ -262,7 +262,7 @@ Processor ID
 Process name
 .
 .TP
-\fBstack\fR
+\fBkstack\fR
 Kernel stack trace
 .
 .TP