search for: fsat

everyone, Just out of curiosity, I did a dtrace -n ''syscall:::entry { @num[execname, probefunc] = count(); }'' and looked at the entries produced by ''rm''. I see everything that rm did, *except* the unlinkat - which is unfortunate because I want to trace which processes have deleted which files. So - does dtrace contain unlinkat as a probe for a system call?

..._sigmask 282 getsockname 456 so_socket 528 fstat64 714 setsockopt 843 setcontext 946 ioctl 959 lwp_mutex_wakeup 1105 lwp_cond_broadcast 1430 close 1431 connect 2503 fsat 2505 getdents64 3894 fcntl 6785 doorfs 7043 resolvepath 8684 access 22627 send 73748 write 102515 stat64 126195 lwp_mutex_timedlock 339137 accept 273694273 read 285...