use syscall names if available
tidy up types for ktrace