Logging tool

A system comprising a processor and coupled memory, said processor is adapted to execute a logging tool within a live production environment, said processor being adapted to:

• instrument a computer program with a plurality of hooks, the plurality of hooks is embedded within functions of interest of the computer program;
• initialize a mock stack of the logging tool, the mock stack is initialized within a data segment belonging to a process executing the computer program, the data segment is separate from a stack segment used for a call stack of the computer program, the process is executed within the live production environment;
• track, using the mock stack, function executions of the computer program and maintain indications of the function executions;
• initialize an endpoint module in the data segment,
• track, using the endpoint module invocations of endpoints and maintain indications of the invocations,
• direct the plurality of hooks to interact with the mock stack and with the endpoint module during execution of the computer program;
• determine, for an invocation of a function that is hooked by a hook of the plurality of hooks, whether a call flow of the function is firstly encountered, wherein the call flow of the function comprises a flow from a calling function that invoked the function to the function, wherein the call flow of the function is identified based on the mock stack;
• and
• determine, based on the endpoint module, at least one endpoint that triggered the invocation of the function.

A computer program product comprising a non-transitory computer readable medium retaining program instructions, which program instructions when read by a processor, cause the processor to execute a logging tool within a live production environment, said processor being adapted to:

• instrument a computer program with a plurality of hooks, the plurality of hooks is embedded within functions of interest of the computer program;
• initialize a mock stack of the logging tool, the mock stack is initialized within a data segment belonging to a process executing the computer program, the data segment is separate from a stack segment used for a call stack of the computer program, the process is executed within the live production environment;
• track, using the mock stack, function executions of the computer program and to maintain indications of the function executions;
• initialize an endpoint module in the data segment;
• track, using the endpoint module, invocations of endpoints and maintain indications of the invocations;
• direct the plurality of hooks to interact with the mock stack and with the endpoint module during execution of the computer program;
• determine, for an invocation of a function that is hooked by a hook of the plurality of hooks, whether a call flow of the function is firstly encountered, wherein the call flow of the function comprises a flow from a calling function that invoked the function to the function, wherein the call flow of the function is identified based on the mock stack;
• and
• determine, based on the endpoint module, at least one endpoint that triggered the invocation of the function.