The fine documentation for DTrace's kernel function tracer contains a little note that you mighteasily miss if, like me, you were just skimming:

For each instruction set, there are a small number of functions thatdo not call other functions and are highly optimized by the compiler(so-called leaf functions ) that cannot be instrumented by FBT.

The first thing to know is that DTrace does not have any useful errormessages when you run into this. Instead of a helpful note about, say,'this

Rather than write an extensive reply to a comment on the originalentry as another comment, I'm doing it here.So, without further delay and in the traditional Usenet style:

Are you proposing every TLS secured service which does not providestrong ciphers shows up as if it were a cleartext service?

In my ideal world the short answer is yes; both bad ciphers and nociphers would show up as plain boring insecure connections. That weakciphers are somewhat harder to eavesdrop on than cleartext is notsomething that users