#!/usr/sbin/dtrace -s #pragma D option quiet proc::: /execname == "ls"/ { /*printf("%s(%d) EXEC %s\n", execname, pid, args[0]);*/ printf("%s(%d) %s\n", execname, pid, probename); } /* proc::: /probename != "signal-send" && probename != "signal-handle" && probename != "exec" / { printf("%s(%d)\n", execname, pid); } */ syscall:::entry /execname == "ls"/ { }