Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to establish if my linux kernel is using sysenter/sysexit instructions to initiate and terminate system calls from user space.

The kernel I'm running is "".

Any Ideas?


share|improve this question

sysenter/sysexit depends more on your CPU than the kernel - Linux has utilized it since the early 2.5 days. Linux picks either SYSENTER, SYSCALL or legacy int 80 methods depending on what type of CPU it is running on.

Not sure how you could confirm that it's actually being used. I don't think Systemtap or LTT will look at a low enough level. Maybe you could instrument the kernel and add some tracepoints in the vDSO code...

share|improve this answer

Only suggestion I can think of would be to use the Linux Trace Toolkit to create a kernel dump and dig through the system calls.

share|improve this answer

You might consider looking into SystemTap. With that, you should be able to write a script that triggers an action whenever an event of your liking, including system calls, occurs.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.