path syscall finally captured.