Method of monitoring multiple computer system calls using one routine and non-executable configuration file

A method of monitoring multiple computer system calls using one user-definable routine and non-executable configuration file, comprising steps of:

• a) determining on a computer a user-definable number of system calls to be monitored so that a user may select which system call to monitor, wherein each system call of the system calls produces data that is particular to the each system call;
• b) determining the data produced by the each system call of the system calls to be recorded for the each system call determined in step (a);
• c) creating a non-executable configuration file that includes system call types and associated data of the data determined in step (a) and step (b), respectively, wherein the non-executable configuration file is written in Extensible Markup Language that includes the system calls and the associated data determined in step (a) and step (b), respectively;
• d) modifying a system call table in a computer operating system to replace pointers to system call routines that correspond to the system calls determined in step (a) with pointers to the one user-definable routine;
• e) if a system call type of the system call types determined in step (a) occurs during an execution of a computer program then jumping to and executing the one user-definable routine, wherein the one user-definable routine is comprised of the following steps:
• a. reading the non-executable configuration file to determine what data from the associated data to record for the system call type that occurred;
• b. jumping to a system call routine corresponding to a system call to execute the system call for the system call type that occurred;
• c. returning from the system call routine to the one user-definable routine with data produced by the system call routine;
• d. recording the data returned from the system call routine that is included in the non-executable configuration file for the system call type;
• and
• f) returning to the step (e),
• wherein the step of reading the non-executable configuration file to determine what the data to record for the system call type that occurred is comprised of a step of reading the non-executable configuration file written in the Extensible Markup Language to determine what the data to record for the system call type that occurred,
• wherein the step of recording the data returned from the system call routine that is included in the non-executable configuration file for the system call type is comprised of a step of recording the data returned from the system call routine that is included in the non-executable configuration file for the system call.