<?xml version="1.0"?>
-<facility name="stack_arch" arch="i386">
+<facility name="stack_arch">
<description>The stack facility has events related to getting process stack.</description>
- <event name="process_dump">
- <description>Process EIP on the user stack</description>
+ <event name="irq_dump_kernel_stack">
+ <description>Dump EIPs on the kernel stack</description>
<field name="eip"> <description>Sequence of EIP</description>
- <sequence write="custom">
- <uint/>
- <ulong/>
- </sequence>
- </field>
+ <sequence>
+ <uint/>
+ <ulong/>
+ </sequence>
+ </field>
</event>
- <event name="kernel_dump">
- <description>EIP on the kernel stack</description>
+ <event name="nmi_dump_kernel_stack">
+ <description>Dump EIPs on the kernel stack</description>
<field name="eip"> <description>Sequence of EIP</description>
- <sequence write="custom">
- <uint/>
- <ulong/>
- </sequence>
- </field>
+ <sequence>
+ <uint/>
+ <ulong/>
+ </sequence>
+ </field>
+ </event>
+
+ <event name="syscall_dump_kernel_stack">
+ <description>Dump EIPs on the kernel stack</description>
+ <field name="eip"> <description>Sequence of EIP</description>
+ <sequence>
+ <uint/>
+ <ulong/>
+ </sequence>
+ </field>
+ </event>
+
+ <event name="irq_dump_process32_stack">
+ <description>Dump process EIPs on the user stack for a 32 bits process</description>
+ <field name="eip"> <description>Sequence of EIP</description>
+ <sequence>
+ <uint/>
+ <uint_fixed size="4"/>
+ </sequence>
+ </field>
+ </event>
+
+ <event name="syscall_dump_process32_stack">
+ <description>Dump process EIPs on the user stack for a 32 bits process</description>
+ <field name="eip"> <description>Sequence of EIP</description>
+ <sequence>
+ <uint/>
+ <uint_fixed size="4"/>
+ </sequence>
+ </field>
</event>
</facility>