Maybe a dumb question, but: why would $pid show up as -1 fairly consistently in a "probe kernel.function("sys_wait4").call" probe? Thanks, Nick