PROC_EVENT_EXIT
if (filter_data[0] == PROC_EVENT_EXIT) {
ev->what = PROC_EVENT_EXIT;
(what == PROC_EVENT_EXIT)) {
PROC_EVENT_COREDUMP | PROC_EVENT_EXIT)
case PROC_EVENT_EXIT: