Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 8 Apr 2005 10:44:14 -0400
From:      Richard Morse <remorse@partners.org>
To:        Giorgos Keramidas <keramida@ceid.upatras.gr>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Any way to log all process launches?
Message-ID:  <AD66CFA0-A83C-11D9-B765-000A956EB07E@partners.org>
In-Reply-To: <20050408144104.GA75094@orion.daedalusnetworks.priv>
References:  <0C6023A0-A83B-11D9-B765-000A956EB07E@partners.org> <20050408144104.GA75094@orion.daedalusnetworks.priv>

next in thread | previous in thread | raw e-mail | index | archive | help
On 8 Apr 2005, at 10:41 AM, Giorgos Keramidas wrote:

> On 2005-04-08 10:32, Richard Morse <remorse@partners.org> wrote:
>> Hi!  I'm trying to track down an odd problem, for which it would be
>> very useful to be able to have the computer keep track of every
>> process that gets created -- ie, keep a list of every fork / exec that
>> occurs.  Is this possible?
>
> Yes, it is possible.  This is part of what `process accounting' does.
>
> Look at the manpages of accton(8), lastcomm(1); then check the
> accounting_enable knob in rc.conf(5) and /etc/defaults/rc.conf

Thanks!  I was looking under logging and auditing and tracing -- not 
accounting...

Ricky



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AD66CFA0-A83C-11D9-B765-000A956EB07E>