On Mon, Aug 11, 2008 at 11:25:54AM -0700, Yi wrote: > Hi, > > How can I tell if a syscall::read:entry is fired when reading from a > socket? Since arg0 is the file descriptor, how can I tell if this is a > socket instead of a regular file? Thanks!
syscall::read:entry
/ fds[arg0].fi_fs == "sockfs" /
{
}
_______________________________________________
dtrace-discuss mailing list
[email protected]
