optionally monitor system call table