#!/usr/sbin/dtrace -s #pragma D option flowindent syscall::mmap:entry /execname == "cat"/ { printf("mmap %x %dK %s\n", arg0, arg1/1024, fds[arg4].fi_pathname ); self->in = 1; } syscall::mmap:return /execname == "cat"/ { printf( "mmaped: %x", arg0); /* return value */ self->in = 0; } fbt:::entry,fbt:::return /execname == "cat" && self->in/ { }