#!/usr/sbin/dtrace -s syscall::open*:entry /execname == $$1/ { self->filename = arg0; } syscall::open*:return /errno != 0 && self->filename != NULL && execname == $$1/ { printf("%s returned %d", copyinstr(self->filename), errno); self->filename = NULL; }