syscall::read:entry, syscall::write:entry, sysinfo:::readch /pid == $1/ { elapsed[probefunc] = timestamp ; } syscall::read:entry, syscall::write:entry, sysinfo:::readch /pid == $1/ { printf("%s(%d, 0x%x, %4d)", probefunc, arg0, arg1, arg2); } syscall::read:return, syscall::write:return, sysinfo:::readch /pid == $1 && elapsed[probefunc] != 0/ { printf("\t\t = %d\n", arg1); printf("Above took %d nanoseconds\n",timestamp - elapsed[probefunc]); }