Hello, Thanks, your advice was very helpful, and more to the point - it works :)
Here is my "enhanced" version :) dtrace -x jstackstrsize=2048 -n syscall::write:entry'/strstr(fds[arg0].fi_pathname,"nohup.out")!=0/{printf("%s,%d wrote to %s\n",execname,pid,fds[arg0].fi_pathname); jstack();}' My first encounter with dtrace was productive, nice tool in my book. Frenky -- This message posted from opensolaris.org _______________________________________________ dtrace-discuss mailing list dtrace-discuss@opensolaris.org