At 2:23 -0800 7/11/07, pgjw pgjw wrote:
>Any other ideas? :-)
It's very likely that the syscall provider will see these operations,
even though they're coming from Rosetta. It's also very likely that
writes to the serial driver are going through one of the following
syscall probes:
$ sudo dtrace -l -n "syscall::*write*:"
ID PROVIDER MODULE FUNCTION NAME
17598 syscall write entry
17599 syscall write return
17832 syscall writev entry
17833 syscall writev return
17898 syscall pwrite entry
17899 syscall pwrite return
18228 syscall aio_write entry
18229 syscall aio_write return
18384 syscall write_nocancel entry
18385 syscall write_nocancel return
18414 syscall writev_nocancel entry
18415 syscall writev_nocancel return
18420 syscall pwrite_nocancel entry
18421 syscall pwrite_nocancel return
It's hard to be sure exactly which one, but you could set probes on
them all, see which ones are hit, and then refine things from there.
S+E
--
Quinn "The Eskimo!" <http://www.apple.com/developer/>
Apple Developer Relations, Developer Technical Support, Core OS/Hardware
_______________________________________________
dtrace-discuss mailing list
[email protected]
