Hello, It's somewhat bothersome that ktrace doesn't dump the actual values for the structures that were passed in as the arguments to a syscall. All you see are addresses, and may be you can see some translated to names, but that's about it. It would be nice if one can see inside the actual structures, which would be operation specific.
Would it be reasonable to add another facility, define the structures for ktr_header.ktr_buf, to be able to accommodate arbitrary structures and the definitions of such, and then start instrumenting the syscalls, where feasible, to dump their arguments into trace stream ? Thanks, Pawel. P.S. Not sure this is the right alias for this kind of discussions...