add detection loop for syscall headers