A Stateful Approach to Generate Synthetic Events from Kernel Traces

Table 2

Semantic events to state changes.

Semantic events	Corresponding state change
File open (fd)	Changes the state of the input fd to opened
File read (fd, count)	Changes the state of the input fd to read
File close (fd)	Changes the state of the input fd to closed
Kill process (p1)	Changes the state of the input p1 to killed