Any way to log all process launches?
mime at traveller.cz
Fri Apr 8 11:02:01 PDT 2005
Richard Morse wrote:
> On 8 Apr 2005, at 10:41 AM, Giorgos Keramidas wrote:
> > On 2005-04-08 10:32, Richard Morse <remorse at partners.org> wrote:
> >> Hi! I'm trying to track down an odd problem, for which it would be
> >> very useful to be able to have the computer keep track of every
> >> process that gets created -- ie, keep a list of every fork / exec that
> >> occurs. Is this possible?
> > Yes, it is possible. This is part of what `process accounting' does.
> > Look at the manpages of accton(8), lastcomm(1); then check the
> > accounting_enable knob in rc.conf(5) and /etc/defaults/rc.conf
> Thanks! I was looking under logging and auditing and tracing -- not
If you need more detailed information some patches at garage.freebsd.pl
might be interesting - especially lrexec. It may be a bit outdated but
it provides you with the information standard utilities don't.
More information about the freebsd-questions