On Dec 25, 2007, at 5:13 AM, wan_jm wrote: > what is differenct between syscall::write:entry fbt::write:entry > > are the two probe fires at the same place.
There's a difference. syscall provider is a "semantics" provider. You can be sure that it'll fire off regardless of how the actual functions that handle syscalls in the kernel are named. It is also reasonable to expect it to fire not only on Solaris but under any OS that supports a notion of a system call and has a DTrace ported to it. fbt provider on the other hand, is very kernel implementation dependent. It will only fire for functions that you list in the probe and you will be in charge of knowing what these functions are doing. Here's a test: what makes you believe that fbt::write corresponds to a system call write, in the first place? Thanks, Roman. _______________________________________________ dtrace-discuss mailing list [email protected]
