lastwords - print syscalls before exit. Uses DTrace. lastwords command This prints the last few system calls for processes matching the given name, when they exit. This makes use of a ring buffer so that the impact on the system is minimised. Since this uses DTrace, only the root user or users with the dtrace_kernel privilege can run this command. Solaris stable - needs the syscall and proc providers.

Catch last few syscalls for dying netscape processes, # lastwords netscape

TIME time of syscall return, ns

PID process ID

EXEC process name (execname)

SYSCALL system call

RETURN return value for the system call

ERR errno for the system call

/usr/demo/dtrace/ring.d

DTrace Guide "Buffers and Buffering" chapter (docs.oracle.com) See the DTraceToolkit for further documentation under the Docs directory. The DTraceToolkit docs may include full worked examples with verbose descriptions explaining the output. lastwords will sample until a command with that name exits. dtruss(1M), dtrace(1M)