A system() invocation is governed by buffer switchrate. The system() action 
executes only when the containing buffer gets read. With default buffer policy 
and switchrate, almost a second could go by before that happens.

So any process thread that fires the probe but terminates before the system() 
action gets a chance will escape tracing. I tried grabbing ls(1) without using 
stop(), for example, and got complained at every time.

There's an example of deliberately stalling the system() action to foil the 
date(1) command by upping the switchrate. P. 136 of the Dynamic Tracing Guide 
(Sep 2008), part no 817-6223-12.
-- 
This message posted from opensolaris.org
_______________________________________________
dtrace-discuss mailing list
dtrace-discuss@opensolaris.org

Reply via email to