intercept system calls via ptrace(2)