better DTrace probes, snoop script