prototype finished syscall detection