On Sunday 25 February 2007 03:22, Avishay Traeger wrote: > To do it from the kernel, you can create a module that: > - on loading, replaces the existing system call pointers to functions > that collect the desired data and calls the original functions. This is very interesting, can you outline, point out, how it is done? How can you replace a system call pointer to function from inside a module dynamically? finding something like ~file_operations~ structure of all active file systems? is there something more generic? > - on unloading, restores the original system call pointers. -- Regards, Tzahi. -- Tzahi Fadida Blog: http://tzahi.blogsite.org | Home Site: http://tzahi.webhop.info WARNING TO SPAMMERS: see at http://members.lycos.co.uk/my2nis/spamwarning.html -- To unsubscribe from this list: send an email with "unsubscribe kernelnewbies" to ecartis@xxxxxxxxxxxx Please read the FAQ at http://kernelnewbies.org/FAQ