Bernd Finger wrote:
> Hi all,
>
> I'd like to know if it's possible to stop a process (using the stop()
> destructive action, for example) shortly before it exits? If I do
> something like:
>
> proc:::exit
> /uid == 4/
> {
> stop();
> }
>
> it's apparently already too late. The Dynamic Tracing guide mentions
> that stop() will force the process to stop when it next leaves the
> kernel, so maybe it's not possible to stop the process at this point in
> time (e.g. because it will no longer be running after it next leaves the
> kernel). Is there any other probe that will fire in time so that the
> process can be stopped before it exits?
have you tried libc's exit() entry point, thus:
pid4:lic:exit:entry
(syntax from memory, please verify).
HTH
Michael
--
Michael Schuster http://blogs.sun.com/recursion
Recursion, n.: see 'Recursion'
_______________________________________________
dtrace-discuss mailing list
[email protected]
