| line |
!l |
l&&!r |
l&&r |
condition |
|
439
|
0 |
0 |
0 |
$key =~ /time$/ and $proc->{$key} =~ /\.0*$/ |
|
|
0 |
0 |
0 |
$key =~ /time$/ and $proc->{$key} =~ /\.0*$/ and $self->{'zero_time'} |
|
456
|
0 |
0 |
0 |
$key =~ /flt$/ and $proc->{$key} eq 0 |
|
|
0 |
0 |
0 |
$key =~ /flt$/ and $proc->{$key} eq 0 and $self->{'zero_flt'} |
|
497
|
0 |
0 |
0 |
$^O =~ /linux/ and $? eq 256 |
|
542
|
0 |
0 |
0 |
$line_split[2] =~ /^txt$/ and not $self->{'txt'} |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^[Pp][Ii][Pp][Ee]$/ and not $self->{'pipe'} |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^[Uu][Nn][Ii][Xx]$/ and not $self->{'unix'} |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^[Ff][Ii][Ff][Oo]$/ and not $self->{'fifo'} |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^[Rr][Ee][Gg]$/ and $line_split[7] =~ /\.so$/ || $line_split[7] =~ /\.so\.[0-9]$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.jar$/ |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^[Rr][Ee][Gg]$/ and $line_split[7] =~ /\.so$/ || $line_split[7] =~ /\.so\.[0-9]$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.jar$/ and not $self->{'memreglib'} |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^a\_inode$/ and not $self->{'a_inode'} |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^[Vv][Rr][Ee][Gg]$/ and $line_split[7] =~ m[^/$] |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^[Vv][Rr][Ee][Gg]$/ and $line_split[7] =~ m[^/$] and not $self->{'vregroot'} |
|
861
|
0 |
0 |
0 |
$mem >= '10000' and $mem < '1000000' |
|
|
0 |
0 |
0 |
$mem >= '1000000' and $mem < '1000000000' |
| line |
l |
!l&&r |
!l&&!r |
condition |
|
497
|
0 |
0 |
0 |
$? eq 0 or $^O =~ /linux/ and $? eq 256 |
|
542
|
0 |
0 |
0 |
$line_split[3] =~ /^IPv/ or $line_split[2] =~ /^txt$/ and not $self->{'txt'} |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^IPv/ or $line_split[2] =~ /^txt$/ and not $self->{'txt'} or $line_split[3] =~ /^[Pp][Ii][Pp][Ee]$/ and not $self->{'pipe'} |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^IPv/ or $line_split[2] =~ /^txt$/ and not $self->{'txt'} or $line_split[3] =~ /^[Pp][Ii][Pp][Ee]$/ and not $self->{'pipe'} or $line_split[3] =~ /^[Uu][Nn][Ii][Xx]$/ and not $self->{'unix'} |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^IPv/ or $line_split[2] =~ /^txt$/ and not $self->{'txt'} or $line_split[3] =~ /^[Pp][Ii][Pp][Ee]$/ and not $self->{'pipe'} or $line_split[3] =~ /^[Uu][Nn][Ii][Xx]$/ and not $self->{'unix'} or $line_split[3] =~ /^[Ff][Ii][Ff][Oo]$/ and not $self->{'fifo'} |
|
|
0 |
0 |
0 |
$line_split[7] =~ /\.so$/ || $line_split[7] =~ /\.so\.[0-9]$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.jar$/ |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^IPv/ or $line_split[2] =~ /^txt$/ and not $self->{'txt'} or $line_split[3] =~ /^[Pp][Ii][Pp][Ee]$/ and not $self->{'pipe'} or $line_split[3] =~ /^[Uu][Nn][Ii][Xx]$/ and not $self->{'unix'} or $line_split[3] =~ /^[Ff][Ii][Ff][Oo]$/ and not $self->{'fifo'} or $line_split[3] =~ /^[Rr][Ee][Gg]$/ and $line_split[7] =~ /\.so$/ || $line_split[7] =~ /\.so\.[0-9]$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.jar$/ and not $self->{'memreglib'} |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^IPv/ or $line_split[2] =~ /^txt$/ and not $self->{'txt'} or $line_split[3] =~ /^[Pp][Ii][Pp][Ee]$/ and not $self->{'pipe'} or $line_split[3] =~ /^[Uu][Nn][Ii][Xx]$/ and not $self->{'unix'} or $line_split[3] =~ /^[Ff][Ii][Ff][Oo]$/ and not $self->{'fifo'} or $line_split[3] =~ /^[Rr][Ee][Gg]$/ and $line_split[7] =~ /\.so$/ || $line_split[7] =~ /\.so\.[0-9]$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.jar$/ and not $self->{'memreglib'} or $line_split[3] =~ /^a\_inode$/ and not $self->{'a_inode'} |
|
|
0 |
0 |
0 |
$line_split[3] =~ /^IPv/ or $line_split[2] =~ /^txt$/ and not $self->{'txt'} or $line_split[3] =~ /^[Pp][Ii][Pp][Ee]$/ and not $self->{'pipe'} or $line_split[3] =~ /^[Uu][Nn][Ii][Xx]$/ and not $self->{'unix'} or $line_split[3] =~ /^[Ff][Ii][Ff][Oo]$/ and not $self->{'fifo'} or $line_split[3] =~ /^[Rr][Ee][Gg]$/ and $line_split[7] =~ /\.so$/ || $line_split[7] =~ /\.so\.[0-9]$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.so\.[0-9]+\.[0-9]+\.[0-9]+$/ || $line_split[7] =~ /\.jar$/ and not $self->{'memreglib'} or $line_split[3] =~ /^a\_inode$/ and not $self->{'a_inode'} or $line_split[3] =~ /^[Vv][Rr][Ee][Gg]$/ and $line_split[7] =~ m[^/$] and not $self->{'vregroot'} |
|
595
|
0 |
0 |
0 |
$self->{'dont_dedup'} or $dont_add |
|
599
|
0 |
0 |
0 |
$line_split[3] =~ /[Vv][Rr][Ee][Gg]/ or $line_split[3] =~ /[Rr][Ee][Gg]/ |
|
|
0 |
0 |
0 |
$line_split[3] =~ /[Vv][Rr][Ee][Gg]/ or $line_split[3] =~ /[Rr][Ee][Gg]/ or $line_split[3] =~ /[Vv][Dd][Ii][Dd]/ |
|
|
0 |
0 |
0 |
$line_split[3] =~ /[Vv][Rr][Ee][Gg]/ or $line_split[3] =~ /[Rr][Ee][Gg]/ or $line_split[3] =~ /[Vv][Dd][Ii][Dd]/ or $line_split[3] =~ /[Vv][Cc][Hh][Rr]/ |
|
605
|
0 |
0 |
0 |
$line_split[2] =~ /u/ or $line_split[2] =~ /rw/ |
|
|
0 |
0 |
0 |
$line_split[2] =~ /u/ or $line_split[2] =~ /rw/ or $line_split[2] =~ /wr/ |
|
|
0 |
0 |
0 |
not $line_split[2] =~ /u/ or $line_split[2] =~ /r/ |
|
|
0 |
0 |
0 |
not $line_split[2] =~ /u/ or $line_split[2] =~ /w/ |
|
667
|
0 |
0 |
0 |
$line->[1] =~ /[Vv][Rr][Ee][Gg]/ or $line->[1] =~ /[Rr][Ee][Gg]/ |
|
|
0 |
0 |
0 |
$line->[1] =~ /[Vv][Rr][Ee][Gg]/ or $line->[1] =~ /[Rr][Ee][Gg]/ or $line->[1] =~ /[Vv][Dd][Ii][Dd]/ |
|
|
0 |
0 |
0 |
$line->[1] =~ /[Vv][Rr][Ee][Gg]/ or $line->[1] =~ /[Rr][Ee][Gg]/ or $line->[1] =~ /[Vv][Dd][Ii][Dd]/ or $line->[1] =~ /[Vv][Cc][Hh][Rr]/ |
|
674
|
0 |
0 |
0 |
$line->[0] =~ /u/ or $line->[0] =~ /rw/ |
|
|
0 |
0 |
0 |
$line->[0] =~ /u/ or $line->[0] =~ /rw/ or $line->[0] =~ /wr/ |
|
|
0 |
0 |
0 |
not $line->[0] =~ /u/ or $line->[0] =~ /r/ |
|
|
0 |
0 |
0 |
not $line->[0] =~ /u/ or $line->[0] =~ /w/ |
|
836
|
0 |
0 |
0 |
$hours > 0 or $minutes > 0 |