#! stap -p4 probe kprobe.function("sys_open") {} probe kernel.function("sys_close") {}