topic Re: process table in Operating System - Linux

process table

jerry1 — Tue, 10 Feb 2004 14:46:56 GMT

Would anyone out there happen to have a
script or would know how to capture particular
account processes and log them.

ps -ef gives you the current snapshot of what
is running but how would you capture particular
process in real time to a log file without
have dups entires.

Doing a:

ps -ef|grep -v |grep -i >>pslog

doesn't give you realtime data.

acctcom does not have the info needed either.

Re: process table

Wing Tung Leung — Wed, 11 Feb 2004 03:20:53 GMT

What do you exactly want to log? Memory usage? CPU? If having a snapshot each second is "real time" enough you could combine the ps command and PID for listing the wanted data.

If you want to log memory usage whenever it changes, you need something to trace all your memory allocation/free calls. Like strace on GNU/Linux systems.

Re: process table

jerry1 — Wed, 11 Feb 2004 08:53:10 GMT

I would like to see what processes as oracle
are being run minus the ones I already know
are okay. So if you have 50 oracle processes
running at any one time. I would exclude the
ones I know are okay based on the string
of the process name running and capture
the other processes as they run. But, a process that I don't know about may only run for a second or two or a minute or two.
If I am taking a snapshot every 5 or 15 minutes or even 1 minute. I will miss those processes in between. See the dilemma.
It's almost like I would have to be listening
or looking somewhere for the next process
that the kernel is going to run and determine
if I want to log or not log that process to
a file.
Is there a process table or directory somewhere that can be utilized to at least
capture this info?

Re: process table

Olivier Drouin — Wed, 11 Feb 2004 09:04:43 GMT

like the other thread said... /proc would be your best bet. You have access to every process running in realtime with their command line and
mucho interesting stuff.

Maybe process accounting but I dont know that very well.

You will miss some of them with crontab.

Re: process table

Paul Cross_1 — Wed, 11 Feb 2004 11:10:42 GMT

Have you tried process accounting? I don't know how configurable it is, but you could probably script something from the output.
http://www.tldp.org/HOWTO/Process-Accounting/

Re: process table

jerry1 — Wed, 11 Feb 2004 12:52:56 GMT

Whoops, I am in the wrong forum. This question needs to be in the HP sysadmin
forums. No wonder /proc was not there.

Re: process table

Mario Stargard — Wed, 11 Feb 2004 19:16:22 GMT

You could use auditing. Might be hard to fish out the details you need, but it'll all be there.

Mario