From b1787ebb76fcda1ded0a95d18f68a60816578939 Mon Sep 17 00:00:00 2001
From: skyper <5938498+SkyperTHC@users.noreply.github.com>
Date: Wed, 1 Nov 2023 15:16:08 +0000
Subject: [PATCH] Update README.md

---
 README.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index d739dcc..1425b37 100644
--- a/README.md
+++ b/README.md
@@ -1635,7 +1635,7 @@ Consider using [zap-args](#bash-hide-arguments) to hide the the arguments and /d
 <a id="dtrace"></a>
 **9.ii Sniff all SHELL sessions with dtrace**
 
-Especially useful for Solaris/SunOS and FreeBSD (pfSense). It uses kernel probes.
+Especially useful for Solaris/SunOS and FreeBSD (pfSense). It uses kernel probes to trace *all* sshd processes.
 
 Copy this "D Script" to the target system to a file named `d`:
 ```c
@@ -1648,8 +1648,8 @@ syscall::write:entry
 
 Start a dtrace and log to /tmp/.log:
 ```sh
-### Start probe as background process (csh & bash)
-(dtrace -sd >&/tmp/.log &)
+### Start kernel probe as background process.
+(dtrace -sd >/tmp/.log &)
 ```
 
 <a id="ssh-sniffing-strace"></a>