monitor kernel syscall module