pub fn read_syscall(pid: i32) -> Option<(u64, [u64; 6])>Expand description
Reads the current syscall from /proc/<pid>/syscall.
Format: “syscall_num arg1 arg2 arg3 arg4 arg5 arg6” (hex args on some kernels).
Returns (syscall_number, args). Returns None if unreadable or not in a syscall.