syscall

Assuming we're not a 64-bit app making a 32-bit syscall: srl \% i0, 0, \% o0! copy 1st arg, clear high bits srl \% i1, 0, \% o1! copy 2nd arg, clear high bits ldx [\% g1 + CPU_STATS_SYS_SYSCALL], \% g2 inc \% g2! cpu_stats. sys.syscall++ stx \% g2, [\% g1 + CPU_STATS_SYS_SYSCALL]

Planet Sun 2008

The differences occur in the fact that kernels run in ring 1 rather than ring 0, and that they 'syscall' to Xen to access hardware rather than doing it themselves.

Snell-Pym » Xen 2007

The 'syscall' element of the probe is called a 'provider' and, in our case, permits to enable probes on 'entry' (start) to any 'open'

Phrack Issue #63 (The Lost Circle of Hackers) 2005

If we were to step into this we would step into the syscall which is a mess to trace when just beginning.

doggdot.us 2009

So that evening I head down to the datacentre and take a look... to find that it's died handling the exit syscall from Apache.

Snell-Pym » Web server upgrade 2008

So that evening I head down to the datacentre and take a look... to find that it's died handling the exit syscall from Apache.

Snell-Pym » 2008 » April 2008

I'd gone as far as to ktrace an httpd process running a PHP app, and found that it produced an identical syscall trace to PHP run from the command line - up until it tried to read back from the socket, whereupon it gave a one-byte buffer, so read only the first byte, then hung thereafter.

Snell-Pym » Fixed network access from PHP apps - but broke Wordpress even more… 2007

I'd gone as far as to ktrace an httpd process running a PHP app, and found that it produced an identical syscall trace to PHP run from the command line - up until it tried to read back from the socket, whereupon it gave a one-byte buffer, so read only the first byte, then hung thereafter.

Snell-Pym » 2007 » December 2007

The whole 'syscall:: open: entry' construction is called a 'probe' and defines a location or activity to which dtrace binds a request to perform a set of 'actions'.

Phrack Issue #63 (The Lost Circle of Hackers) 2005

** Print exec event syscall:: exec: return, syscall:: exece: return

Phrack Issue #63 (The Lost Circle of Hackers) 2005