+ <type name="signal_name">
+ <enum>
+ <label name="SIGHUP" value="1"/> <description>Hangup (POSIX).</description>
+ <label name="SIGINT" value="2"/> <description>Interrupt (ANSI).</description>
+ <label name="SIGQUIT" value="3"/> <description>Quit (POSIX).</description>
+ <label name="SIGILL" value="4"/> <description>Illegal instruction (ANSI).</description>
+ <label name="SIGTRAP" value="5"/> <description>Trace trap (POSIX).</description>
+ <label name="SIGABRT" value="6"/> <description>Abort (ANSI).</description>
+ <label name="SIGBUS" value="7"/> <description>BUS error (4.2 BSD).</description>
+ <label name="SIGFPE" value="8"/> <description>Floating-point exception (ANSI).</description>
+ <label name="SIGKILL" value="9"/> <description>Kill, unblockable (POSIX).</description>
+ <label name="SIGUSR1" value="10"/> <description>User-defined signal 1 (POSIX).</description>
+ <label name="SIGSEGV" value="11"/> <description>Segmentation violation (ANSI).</description>
+ <label name="SIGUSR2" value="12"/> <description>User-defined signal 2 (POSIX).</description>
+ <label name="SIGPIPE" value="13"/> <description>Broken pipe (POSIX).</description>
+ <label name="SIGALRM" value="14"/> <description>Alarm clock (POSIX).</description>
+ <label name="SIGTERM" value="15"/> <description>Termination (ANSI).</description>
+ <label name="SIGSTKFLT" value="16"/> <description>Stack fault.</description>
+
+ <label name="SIGCHLD" value="17"/> <description>Child status has changed (POSIX).</description>
+ <label name="SIGCONT" value="18"/> <description>Continue (POSIX).</description>
+ <label name="SIGSTOP" value="19"/> <description>Stop, unblockable (POSIX).</description>
+ <label name="SIGTSTP" value="20"/> <description>Keyboard stop (POSIX).</description>
+ <label name="SIGTTIN" value="21"/> <description>Background read from tty (POSIX).</description>
+ <label name="SIGTTOU" value="22"/> <description>Background write to tty (POSIX).</description>
+ <label name="SIGURG" value="23"/> <description>Urgent condition on socket (4.2 BSD).</description>
+ <label name="SIGXCPU" value="24"/> <description>CPU limit exceeded (4.2 BSD).</description>
+ <label name="SIGXFSZ" value="25"/> <description>File size limit exceeded (4.2 BSD).</description>
+ <label name="SIGVTALRM" value="26"/> <description>Virtual alarm clock (4.2 BSD).</description>
+ <label name="SIGPROF" value="27"/> <description>Profiling alarm clock (4.2 BSD).</description>
+ <label name="SIGWINCH" value="28"/> <description>Window size change (4.3 BSD, Sun).</description>
+ <label name="SIGIO" value="29"/> <description>I/O now possible (4.2 BSD). (aka SIGPOLL)</description>
+ <label name="SIGPWR" value="30"/> <description>Power failure restart (System V).</description>
+ <label name="SIGSYS" value="31"/> <description>Bad system call.</description>
+ </enum>
+ </type>
+
+ <type name="itimer_kind">
+ <enum>
+ <label name="ITIMER_REAL" value="0"/> <description>decrements in real time,
+ and delivers SIGALRM upon expiration.</description>
+ <label name="ITIMER_VIRTUAL" value="1"/> <description>decrements only when the
+ process is executing, and delivers SIGVTALRM upon expiration.</description>
+ <label name="ITIMER_PROF" value="2"/> <description>decrements both when the
+ process executes and when the system is executing on behalf of the
+ process. Coupled with ITIMER_VIRTUAL, this timer is usually used to
+ profile the time spent by the application in user and kernel space.
+ SIGPROF is delivered upon expiration.</description>
+ </enum>
+ </type>
+
+ <event name="process_fork">
+ <description>Process fork</description>
+ <field name="parent_pid"> <description>PID of the parent process</description> <int/> </field>
+ <field name="child_pid"> <description>PID of the child process</description> <int/> </field>
+ <field name="child_tgid"> <description>Thread group ID of the child process (POSIX PID)</description> <int/> </field>