Comment by flakes

Curious, what were you using for doing syscall logging? LD_PRELOAD tricks, or ebpf filtering?