process trace

[Fabrizio_6]

I have to trace a process and I would like to know the entire starting command line (ps command shows only a part of) and the files opened by an executable for read/write.

Tanks

[Uday_S_Ankolekar]

Hi,

try downloading lsof utility from hp's porting centre.

http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/lsof-4.61/

This is a good tool to have for the sysadmins.

-USA..

[A. Clay Stephenson · Accepted solution]

What you see of the command-line in ps -f is all you are going to see with any other tool. That is as much as the kernel knows. To see the open file, the best tool to use is lsof which can be downloaded from any of the HP-UX Porting Centre's. It's one of those tools that should be on every system. Fuser can also be used but lsof is much more convenient and powerful.

[Carlos Fernandez Riera]

You need 'tusc'.

[H.Merijn Brand (procura]

Tracing in what sense? If you want to do a lot of ps calls to see if a precess grows, or to trace which process user the most memory/cpu/..., top might be something to look at. lsof is good as the others noticed, but you can also use perl with Proc::ProcessTable giving you all the options of ps at your perl fingertips.

Attached is a script that uses this module. Example outpout of the script at the end of the script