Sorry to be a pain here but My problem was how can i modify ps output, after i check ps's syscalls (i don't check kernel space calls, just syscalls), i find syscall::open:entry ask info about the process, and syscall::write:return write the data to the terminal/console etc.....
Does this not seem to be a way of asking how to hide the output when looking for a particular string i.e in a ps , more of a rootkit type idea. I may be way wrong here.... -- This message posted from opensolaris.org _______________________________________________ dtrace-discuss mailing list dtrace-discuss@opensolaris.org
