Module current 

Functions

read_syscall

Reads the current syscall from /proc/<pid>/syscall. Format: “syscall_num arg1 arg2 arg3 arg4 arg5 arg6” (hex args on some kernels). Returns (syscall_number, args). Returns None if unreadable or not in a syscall.