process table scanning

[jerry1]

Would anyone out there happen to have a
script or would know how to capture particular
account processes and log them.

ps -ef gives you the current snapshot of what
is running but how would you capture particular
process in real time to a log file without
have dups entires.

Doing a:

ps -ef|grep -v |grep -i >>pslog

doesn't give you realtime data.

acctcom does not have the info needed either.

[Mark Travis · Accepted solution]

The /proc filesystem is fun.

That's a realtime peek into kernel process tables disguised as a filesystem.

"man proc" ought to give more information.

so

find /proc/[0-9]* -name cmdline -exec cat {} \;

gives you the name of all running processes as they were launched from the command line.

[jerry1]

This is strange. Somehow I ended up with
two exact postings of this message with
two different people responding to either
one or the other. ???

Can a moderator out there combine the replies
to one or the other posts?


Thanks Mark, I'll check it out.

[jerry1]

This is the wrong forum. I will re-post this
message to the HP forum.