Hi Steve, The syscall is unmount, not umount?
Best Regards Nan Xiao (肖楠) Skype: xiaonan19830818 Jabber/XMPP: nanx...@xmpp.ru.net Telegram: nanxiao Personal website (Chinese): http://nanxiao.me/ Personal website (English): http://nanxiao.me/en Chinese DTrace website: http://chinadtrace.org/ From: STEVE Date: 2016-01-25 12:17 To: dtrace-discuss Subject: [dtrace-discuss] syscall::unmount: doesn't work in OS X 10.11.2 Hi, I recently had an issue that SMB share volume hosted on a NetApp cluser cannot be ejected. lsof shows nothing regarding this volume. I also did a packet trace when reproducing this issue. However, there is no tree-disconnect (SMB command to disconnect the share) in the trace. I suspect that something local that was preventing the un-mount operation. I have an idea to trace the unmount(2) system call see where the operation was blocked by looking at the stack trace with the following dtrace one-liner: bash-3.2# dtrace -n 'syscall::unmount:return {@[ustack(),pid,execname]=count()}' dtrace: description 'syscall::unmount:return ' matched 1 probe dtrace: error on enabled probe ID 1 (ID 469: syscall::unmount:return): invalid user access in action #2 ^C bash-3.2# As you can see, the one-liner doesn't work. I don't understand the error message. How can I proceed for this issue? Appreciate for any inputs! Thank you! Steve Zhou dtrace-discuss | Archives | Modify Your Subscription ------------------------------------------- dtrace-discuss Archives: https://www.listbox.com/member/archive/184261/=now RSS Feed: https://www.listbox.com/member/archive/rss/184261/25769126-e243886f Modify Your Subscription: https://www.listbox.com/member/?member_id=25769126&id_secret=25769126-8d47a7b2 Powered by Listbox: http://www.listbox.com
