Error returns an Action that will be used to send the calling process the specified errno when the syscall is made.

New returns a new syscall context for use.

Allow the syscall to be completed.

Kill the calling process of the syscall.

Trap and coredump the calling process of the syscall.

Arg represents an argument to the syscall with the argument's index, the operator to apply when matching, and the argument's value at that time.

Context holds syscalls for the current process to limit the type of actions the calling process can make.

Syscall is the specified syscall, action, and any type of arguments to filter on.

Action is the type of action that will be taken when a syscall is performed.

Operator that is used for argument comparison.