On OS X El Capitan, my log file system.log feels with hundreds of the following lines at times
03/07/2016 11:52:17.000 kernel[0]: hfs_clonefile: cluster_read failed - 34
but there is no indication of the process where this happens. Apart from that, Disk Utility could not find any fault with the file system. But I would still like to know what is going on and it seems to me that dtrace should be perfectly suited to find out that faulty process but I am stuck. I know of the function return probe but it seems to require the PID, e.g.
dtrace -n 'pidXXXX::hfs_clonefile:return { printf("ret: %d", arg1); }'
Is there a way to tell dtrace to probe all processes? And then how would I print the process name?
34is for "disk full" errors. – Andrew Henle Jul 2 at 15:47hfs_clonefileis encountering an error? Is there more going on than log messages? That is, are there "real" symptoms of a problem? For what it's worth,hfs_clonefile()is not a syscall. It seems to be a function internal to the HFS(+) file system implementation. – Ken Thomases Jul 2 at 16:36