ble probe using its name
dtrace -n BEGIN

#list probes
dtrace -l

#list system calls
dtrace -l -n 'syscall:::entry' | less -N

#Syscall count by process name,
dtrace -n 'syscall:::entry { @num[execname] = count(); }'

#Syscall count by syscall name
dtrace -n 'syscall:::entry { @num[probefunc] = count(); }'


#Files opened by process name
dtrace -n 'syscall::open*:entry { printf("%s %s",execname,copyinstr(arg0)); }'

#new processes
dtrace -qn 'syscall::exec*:return { printf("%Y %s\n",walltimestamp,curpsinfo->pr_psargs); }'

# Read size distribution by process,
dtrace -n 'sysinfo:::readch { @dist[execname] = quantize(arg0); }'

#print stacks for each system call
dtrace -n 'syscall:::entry{ustack()}' | head -100

#number system calls for a certain command
#example (script in file syscall.d): dtrace -s syscall.d -c 'cp test test2'
syscall:::entry
/pid == $target/
{
        @[probefunc] = count();
}

#system calls as they are done for a certain command
#example (script in file syscall.d): dtrace -s syscall.d -c 'cp test test2'
syscall:::entry
/pid == $target/
{
        trace(probefunc);
}

