Hi, Is possible to have a kernel_arch_syscall_exit related to a process without the correspondent kernel_arch_syscall_entry? thanks, -- Ing. Gian Lorenzo Meocci http://www.meocci.it