probe::syscall_any.return(3stap) — Linux manual page


PROBE::SYSCALL_ANY(3stap)  Syscall Any Tapset  PROBE::SYSCALL_ANY(3stap)

NAME         top

       probe::syscall_any.return - Record exit from a syscall

SYNOPSIS         top


VALUES         top

           return value of the syscall

           name of the syscall

           number of the syscall

CONTEXT         top

       The process performing the syscall

DESCRIPTION         top

       The syscall_any.return probe point is designed to be a low
       overhead that monitors all the syscalls returns via a kernel
       tracepoint. Because of the breadth of syscalls it monitors it
       provides no information about the syscall arguments, argstr
       string representation of those arguments, or a string
       interpretation of the return value (retval).

       This requires kernel 3.5+ and newer which have the
       kernel.trace(“sys_exit”) probe point.

SEE ALSO         top


COLOPHON         top

       This page is part of the systemtap (a tracing and live-system
       analysis tool) project.  Information about the project can be
       found at ⟨⟩.  If you have a bug
       report for this manual page, send it to
       This page was obtained from the project's upstream Git repository
       ⟨git://⟩ on 2023-06-24.  (At that
       time, the date of the most recent commit that was found in the
       repository was 2023-06-20.)  If you discover any rendering
       problems in this HTML version of the page, or you believe there
       is a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to

SystemTap Tapset Reference     April 2023      PROBE::SYSCALL_ANY(3stap)

Pages that refer to this page: tapset::syscall_any(3stap)