test the syscallmonitor emit