1The following is a demonstration of the syscallbypid.d script, 2 3 4Here we run syscallbypid.d for a few seconds then hit Ctrl-C, 5 6 # syscallbypid.d 7 Tracing... Hit Ctrl-C to end. 8 ^C 9 PID CMD SYSCALL COUNT 10 11039 dtrace setcontext 1 11 11039 dtrace lwp_sigmask 1 12 7 svc.startd portfs 1 13 357 poold lwp_cond_wait 1 14 27328 java_vm lwp_cond_wait 1 15 1532 Xorg writev 1 16 11039 dtrace lwp_park 1 17 11039 dtrace schedctl 1 18 11039 dtrace mmap 1 19 361 sendmail pollsys 1 20 11039 dtrace fstat64 1 21 11039 dtrace sigaction 2 22 11039 dtrace write 2 23 361 sendmail lwp_sigmask 2 24 1659 mozilla-bin yield 2 25 11039 dtrace sysconfig 3 26 361 sendmail pset 3 27 20317 sshd read 4 28 361 sendmail gtime 4 29 20317 sshd write 4 30 27328 java_vm ioctl 6 31 11039 dtrace brk 8 32 1532 Xorg setcontext 8 33 1532 Xorg lwp_sigmask 8 34 20317 sshd pollsys 8 35 357 poold pollsys 13 36 1659 mozilla-bin read 16 37 20317 sshd lwp_sigmask 16 38 1532 Xorg setitimer 17 39 27328 java_vm pollsys 18 40 1532 Xorg pollsys 19 41 11039 dtrace p_online 21 42 1532 Xorg read 22 43 1659 mozilla-bin write 25 44 1659 mozilla-bin lwp_park 26 45 11039 dtrace ioctl 36 46 1659 mozilla-bin pollsys 155 47 1659 mozilla-bin ioctl 306 48 49In the above output, we can see that "mozilla-bin" with PID 1659 made the 50most system calls - 306 ioctl()s. 51