Date: Wed, 15 Feb 2006 14:44:34 -0600 (CST) From: "Brian Sobolak" <brian@planetshwoop.com> To: "Glenn McCalley" <techlist@bnetmd.net> Cc: freebsd-questions@freebsd.org Subject: Re: how to tell what ran what Message-ID: <46981.4.17.250.5.1140036274.squirrel@webmail.psys.org> In-Reply-To: <002601c6326e$da0fd5a0$6601a8c0@bnetmd.net> References: <005701c63241$dbb3e220$6601a8c0@bnetmd.net> <43F3531E.8080205@cs.tu-berlin.de> <002601c6326e$da0fd5a0$6601a8c0@bnetmd.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Glenn McCalley wrote: > > ----- Original Message ----- > From: "Björn König" <bkoenig@cs.tu-berlin.de> > To: "Glenn McCalley" <techlist@bnetmd.net> > Cc: <freebsd-questions@freebsd.org> > Sent: Wednesday, February 15, 2006 11:13 AM > Subject: Re: how to tell what ran what > > >> Glenn McCalley schrieb: >> >> > Is there a way to find out -which- -process- calls another process? >> >> Each process is associated with a parent; look at the ppid column: >> >> ps axo user,pid,ppid,command >> >> Björn >> >> > Thanks, I stated the question poorly. My fault. > Is historical info available and is it available by file name? > > I trying to find out (for example) what (unknown) program ran another > (known) program between 0900 and 1000 yesterday - something like that. > > I've got a customer sending our emails that he shouldn't - I don't know > which customer it is. The program that sends the mail is running as a cgi > so it all shows up as user "nobody". > > If I can get a list of what programs, path and file name, called sendmail > over (say) the last 24 hours, one of them should jump off the page with an > unreasonable level of activitiy. > The web server logs don't tell you anything in the URL data? A CGI script usually has some parameters which might provide some assistance. brian -- Brian Sobolak http://www.planetshwoop.com/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46981.4.17.250.5.1140036274.squirrel>