syscall.sh / x86 / inotify_add_watch

inotify_add_watch

add a watch to an initialized inotify instance

sys_inotify_add_watch(int fd, const char *path, u32 mask)
number292 (0x124)
abii386
entry pointsys_inotify_add_watch
sinceLinux 3.3
man pageinotify_add_watch(2)
sourceelixir.bootlin.com

Registers

registervalue
eax292, the syscall number
ebxint fd
ecxconst char *path
edxu32 mask
eaxthe return value

Then run int 0x80 to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/x86/inotify_add_watch