dtrace-infiltrate
dtrace-infiltrate
dtrace-infiltrate
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Hiding from `ps`<br />
ps on OSX uses sysctl(KERN_PROC) for retrieving<br />
all pids.<br />
Then uses the mach api for process<br />
info.<br />
Mach api uses kern_return_t for<br />
all functions. Sizes/offsets/etc<br />
passed by reference too.