Apologies for cross posting but I have been looking at the probes fired when a snapshot is created. I get paulj at openindiana:~/programming/dtrace$ pfexec ./snapshots.d dtrace: script ''./snapshots.d'' matched 54 probes CPU ID FUNCTION:NAME 0 37478 zfs_secpolicy_snapshot:entry 0 39588 zfs_secpolicy_snapshot_perms:entry 0 39589 zfs_secpolicy_snapshot_perms:return 0 37479 zfs_secpolicy_snapshot:return 0 37614 zfs_ioc_snapshot:entry 0 39426 snapshot_namecheck:entry 0 39427 snapshot_namecheck:return 0 40262 dmu_objset_snapshot:entry 0 36158 dmu_objset_snapshot_one:entry 0 36159 dmu_objset_snapshot_one:return 0 36154 snapshot_check:entry 0 38072 dsl_dataset_snapshot_check:entry 0 36312 dsl_dataset_snapshot_reserve_space:entry 0 36313 dsl_dataset_snapshot_reserve_space:return 0 38073 dsl_dataset_snapshot_check:return 0 36155 snapshot_check:return 1 36154 snapshot_check:entry 1 38072 dsl_dataset_snapshot_check:entry 1 36312 dsl_dataset_snapshot_reserve_space:entry 1 36313 dsl_dataset_snapshot_reserve_space:return 1 38073 dsl_dataset_snapshot_check:return 1 36155 snapshot_check:return 1 36156 snapshot_sync:entry 1 37952 dsl_dataset_snapshot_sync:entry 1 39738 dsl_scan_ds_snapshotted:entry 1 39739 dsl_scan_ds_snapshotted:return 1 37953 dsl_dataset_snapshot_sync:return 1 36157 snapshot_sync:return 1 40263 dmu_objset_snapshot:return 1 37615 zfs_ioc_snapshot:return Matching entry to return there seems to be two stages check permissions then create. The creation seems to be wrapped by zfs_ioc_snapshot:entry/return There are probes for pool and zfs filesystem creations which include the word create (zfs_create_fs and zfs_ioc_pool_create) , any idea why snapshots are treated differently? Cheers Paul -- This message posted from opensolaris.org