1PROBE::SYSCALL_ANY(3stap)     Syscall Any Tapset     PROBE::SYSCALL_ANY(3stap)
2
3
4

NAME

6       probe::syscall_any.return - Record exit from a syscall
7

SYNOPSIS

9       syscall_any.return
10

VALUES

12       syscall_nr
13           number of the syscall
14
15       name
16           name of the syscall
17
18       retval
19           return value of the syscall
20

CONTEXT

22       The process performing the syscall
23

DESCRIPTION

25       The syscall_any.return probe point is designed to be a low overhead
26       that monitors all the syscalls returns via a kernel tracepoint. Because
27       of the breadth of syscalls it monitors it provides no information about
28       the syscall arguments, argstr string representation of those arguments,
29       or a string interpretation of the return value (retval).
30
31       This requires kernel 3.5+ and newer which have the
32       kernel.trace(“sys_exit”) probe point.
33

SEE ALSO

35       tapset::syscall_any(3stap)
36
37
38
39SystemTap Tapset Reference       November 2022       PROBE::SYSCALL_ANY(3stap)