From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
	id 1NyxoX-0006eI-Oa
	for qemu-devel@nongnu.org; Mon, 05 Apr 2010 21:42:49 -0400
Received: from [140.186.70.92] (port=38498 helo=eggs.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.43) id 1NyxoW-0006e5-Iy
	for qemu-devel@nongnu.org; Mon, 05 Apr 2010 21:42:49 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69)
	(envelope-from <vince@csl.cornell.edu>) id 1NyxoU-00053G-V6
	for qemu-devel@nongnu.org; Mon, 05 Apr 2010 21:42:48 -0400
Received: from csl.cornell.edu ([128.84.224.10]:4325 helo=vlsi.csl.cornell.edu)
	by eggs.gnu.org with esmtp (Exim 4.69)
	(envelope-from <vince@csl.cornell.edu>) id 1NyxoU-00051p-Rh
	for qemu-devel@nongnu.org; Mon, 05 Apr 2010 21:42:46 -0400
Date: Mon, 5 Apr 2010 21:41:52 -0400 (EDT)
From: Vince Weaver <vince@csl.cornell.edu>
Subject: Re: [Qemu-devel] full dynamic instruction trace for MIPS target
In-Reply-To: <639622.90232.qm@web43140.mail.sp1.yahoo.com>
Message-ID: <Pine.LNX.4.61.1004052137390.18868@cluizel.csl.cornell.edu>
References: <639622.90232.qm@web43140.mail.sp1.yahoo.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
List-Id: qemu-devel.nongnu.org
List-Unsubscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/pipermail/qemu-devel>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: =?iso-8859-1?Q?Boris_C=E1mara?= <vesmar@rocketmail.com>
Cc: qemu-devel@nongnu.org


> I think the correct way to get the full instruction trace on a MIPS 
> emulated processor is:

the way you describe is slow because you are constantly re-generating the 
TBs.  The best way to do this is to add your instrumentation to the TBs.

I have code that does that for a recent version of Qemu here:
  http://www.csl.cornell.edu/~vince/projects/qemusim/

although it outputs Basic-Block vectors, not a full memory trace like you 
want.  It has been validated to match proper instruction counts using 
hardware performnce counters though.

I also have code creating full instruction/memory traces for Qemu MIPS 
that can be found here:
  http://www.csl.cornell.edu/~vince/projects/qemu-trace/

but it's against Qemu from 2007 pre-dating the TCG changeover so of 
limited use probably.  I hvae some code somewhere that updated this to 
work with TCG but I don't know what happened to it.

Vince