socket
Implemented in Antinomie 0.7.0 · Syscall list
Synopsis
Section titled “Synopsis”long socket(int family, int type, int protocol);| Number (x86-64) | 41 |
| ABI | common |
| Kernel entry point | sys_socket |
This is the raw kernel prototype from the pinned Linux 6.12.94 schema, not the libc wrapper.
Description
Section titled “Description”Creates a communication endpoint of a given domain, type and protocol and returns a descriptor for it.
Arguments
Section titled “Arguments”| Name | Type | Meaning |
|---|---|---|
family (arg0) |
int |
Address family: AF_INET, AF_INET6, AF_UNIX, … |
type (arg1) |
int |
Socket type (SOCK_STREAM, SOCK_DGRAM, …) with optional SOCK_NONBLOCK and SOCK_CLOEXEC. |
protocol (arg2) |
int |
Protocol number, usually 0 to pick the default. |
Return value
Section titled “Return value”On success: A new file descriptor (a non-negative number).
In an Antinomie trace the Return column and the ret filter field show the raw kernel return value. On failure that is the negative errno, for example -2 for ENOENT, not the -1 plus errno that the libc wrapper gives. syscall.errno holds the positive errno and syscall.success is false.
Common errors
Section titled “Common errors”| Raw return | Name | Meaning |
|---|---|---|
-13 |
EACCES |
Permission denied. |
-97 |
EAFNOSUPPORT |
The address family is not supported. |
-24 |
EMFILE |
The process has too many open file descriptors. |
-93 |
EPROTONOSUPPORT |
The protocol is not supported. |
Man page
Section titled “Man page”Captured by Antinomie
Section titled “Captured by Antinomie”Coverage mark: Implemented. All arguments are plain values, recorded as the raw argument words at entry. There is no pointee to copy and no known gap.
Every call is recorded as an Entry record (the six argument words and the pointees copied at entry) and an Exit record (the return value and the pointees copied at exit).
Arguments
Section titled “Arguments”| Argument | When | How | Recorded field key | Condition |
|---|---|---|---|---|
family (arg0) |
Entry | raw scalar word | args.0, args.family |
|
type (arg1) |
Entry | raw scalar word; Syscall Trace also decodes it into flag names (socket_type group), listing unknown bits separately |
args.1, args.type |
|
protocol (arg2) |
Entry | raw scalar word | args.2, args.protocol |
Filter fields
Section titled “Filter fields”- Result:
ret,syscall.errno,syscall.success,syscall.duration_ns. - Argument words:
args.family(arg0),args.type(arg1),args.protocol(arg2);args.0toargs.5by position.
See Syscall Trace filter for the full syntax.
For what the capture statuses mean, see Capture statuses. For what is never recorded, see Known gaps.