Date: Fri, 08 Apr 2005 20:01:50 +0200 From: Michal Mertl <mime@traveller.cz> To: Richard Morse <remorse@partners.org> Cc: freebsd-questions@freebsd.org Subject: Re: Any way to log all process launches? Message-ID: <1112983310.627.1.camel@genius2.i.cz> In-Reply-To: <AD66CFA0-A83C-11D9-B765-000A956EB07E@partners.org> References: <0C6023A0-A83B-11D9-B765-000A956EB07E@partners.org> <20050408144104.GA75094@orion.daedalusnetworks.priv> <AD66CFA0-A83C-11D9-B765-000A956EB07E@partners.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Richard Morse wrote: > On 8 Apr 2005, at 10:41 AM, Giorgos Keramidas wrote: > > > On 2005-04-08 10:32, Richard Morse <remorse@partners.org> wrote: > >> Hi! I'm trying to track down an odd problem, for which it would be > >> very useful to be able to have the computer keep track of every > >> process that gets created -- ie, keep a list of every fork / exec that > >> occurs. Is this possible? > > > > Yes, it is possible. This is part of what `process accounting' does. > > > > Look at the manpages of accton(8), lastcomm(1); then check the > > accounting_enable knob in rc.conf(5) and /etc/defaults/rc.conf > > Thanks! I was looking under logging and auditing and tracing -- not > accounting... If you need more detailed information some patches at garage.freebsd.pl might be interesting - especially lrexec. It may be a bit outdated but it provides you with the information standard utilities don't. Michal
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1112983310.627.1.camel>