syscall tapset reorg again?

syscall tapset reorg again?

[Martin Hunt]

Hien,

I checked in returnstr(). So a simple probe might look like this:

probe syscall.close {
        printf("%s: %s(%s) = ", execname(), name, argstr)
}

probe syscall.close.return {
        printf("%s\n", returnstr(returnp))
}

syscalls that return pointers should set returnp to 2 in
the return probe to indicate that returnstr should display the output in
hex.

---

I think it is time to attempt a reorganization of the syscalls. Actually
we probably should have done this first. Instead of syscalls.stp,
syscalls2.stp and aux_syscalls.stp, I think we need something like
syscall_net.stp, syscall_file.stp, syscall_process.stp, syscall_ipc.stp,
and syscall_misc.stp. This makes it easier to work on related syscalls.
Plus it should speed up the translation process. We can combine the
probes with the functions they use. Or perhaps it is better to put them
in their own set of files; net_funcs.stp, file_funcs.stp, etc. These
could be useful to script writers even if not using the syscall tapset.

Martin