On Thu, Nov 14, 2002 at 09:12:51PM +0100, Ralf Baechle wrote: > Unlikely to help him. The return value 4183 of socket that he's observing > is the syscall number of socket(2). Thank you, I should have noticed that one right off. My sprinkle of printks already tells me that strace is a liar - no surprise there. strace says: socket(PF_PACKET, SOCK_DGRAM, 0) = 4183 socket(PF_PACKET, SOCK_DGRAM, 0) = 4183 socket(PF_PACKET, SOCK_DGRAM, 0) = -1 EAFNOSUPPORT (Address family not supported by protocol) printk says: sys_socket returning 0 sys32_socket returning 0 sys_socket returning -124 sys32_socket returning -124 Note strace sees 3 syscalls. I only printk at the return statement, and there are 2 of those. I'll add more printks... -- greg