Sponsored Content
Full Discussion: Finding a rogue process
Top Forums UNIX for Dummies Questions & Answers Finding a rogue process Post 302377558 by jim mcnamara on Friday 4th of December 2009 10:09:55 AM
Old 12-04-2009
Accounting would help a lot

start with the manpage
Code:
man -s 1M acct

for an overview - there is also a shell script: acctsh (1M) that kind of brings accounting features together for you.
 

9 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

finding process id

is there a way to find the process id of a process because i have same process invoked several times. when i need to kill them, i get confused with the id. Thanks, sskb :( (8 Replies)
Discussion started by: sskb
8 Replies

2. UNIX for Dummies Questions & Answers

Finding out process id in a scipt

Hi, If in a shell script i write a command ls > bla & ls The output is redirected to bla and the next ls starts as first one is going on in background. I want to find the PID of the first command. Thanks in advance (2 Replies)
Discussion started by: vibhor_agarwali
2 Replies

3. Shell Programming and Scripting

finding Background Process Id

Hi Gurus, How can i find background process is completed or not. I have mentioned my scenario below. Actually Pr1 Process is running in back ground, i just want to know whether this process completed or not. I can come to know the process id by typing pid=$! but i want to trigger... (4 Replies)
Discussion started by: krk_555
4 Replies

4. Linux

Need help in finding process

Hello, Iam running a apache webserver in CentOS recenlty a hacker has attacked my server using RFI attack and did something in my server.. After that everyday at 8Pm my httpd is using about 5000 pid's actually in normal it takes only about 30 - 40 pid's. and also exim uses 2000 pid's totally my... (2 Replies)
Discussion started by: dheeraj4uuu
2 Replies

5. Shell Programming and Scripting

Finding the process id of the process using the ports

Hi Any idea how to get the process id of the process using the ports lsof -i :portnumber does not work in my machine. I am on sun Solaris SPARC. Any suggestion is highly appreciated (1 Reply)
Discussion started by: kinny
1 Replies

6. UNIX for Advanced & Expert Users

Finding process id of subsequent process

hi all, I am trying to find the process id of the subsequent process created via fork and exec calls in perl. For eg: envVarSetter dataCruncher.exe < input.txt > output.txt When I fork and exec the above command, it returns only the pid of envVarSetter and I don't know how to find the... (9 Replies)
Discussion started by: matrixmadhan
9 Replies

7. AIX

AIX 6.1 rogue process starts at boot up

We are having a bit of trouble finding where the following process is being started from at bootup. /opt/IBM/tdsV6.2db2/itma/aix526/ud/bin/kuddb2 db2tdsWe have looked in the typical areas /etc/inittab & /etc/rc.d but have had no luck finding it, any ideas? (10 Replies)
Discussion started by: j_aix
10 Replies

8. Shell Programming and Scripting

Finding process which ended another process

Hello, The scenario is as follows, I have a background process running initially for which i know the PID on machine1. I use ssh from machine 2 to execute a script in machine 1. For some reason the back ground process is terminated. I would like to know which process caused the... (6 Replies)
Discussion started by: prasbala
6 Replies

9. Shell Programming and Scripting

Finding a file process ?

Hi, I am trying to find a file that have a different name than it should be processing, the file name is ( Fifa15 ) is there a command to use? I got that file by ps -ef | grep fifa15 but how do I know what is running ? thanks a lot, I am learning unix so sorry if that is a... (2 Replies)
Discussion started by: latinooo
2 Replies
acct(2) 							System Calls Manual							   acct(2)

Name
       acct - turn accounting on or off

Syntax
       acct(file)
       char *file;

Description
       The system is prepared to write a record in an accounting file for each process as it terminates.  This call, with a null-terminated string
       naming an existing file as argument, turns on accounting; records for each terminating process are appended to  file.   An  argument  of  0
       causes accounting to be turned off.

       The accounting file format is given in

       This  call  is  permitted  only to the superuser.  Accounting is automatically disabled when the file system the accounting file resides on
       runs out of space.  It is enabled when space once again becomes available.

Return Values
       On error, -1 is returned.  The file must exist and the call may be exercised only by the superuser.  It is erroneous  to  try  to  turn	on
       accounting when it is already on.  If successful, 0 is returned.

Diagnostics
       The system call will fail if one of the following is true:

       [EPERM]	      The caller is not the superuser.

       [ENOTDIR]      A component of the path prefix is not a directory.

       [ENAMETOOLONG] A component of a pathname exceeded 255 characters, or an entire pathname exceeded 1023 characters.

       [ENOENT]       The named file does not exist.

       [EACCES]       The path name is not a regular file.

       [EROFS]	      The named file resides on a read-only file system.

       [EFAULT]       The file points outside the process's allocated address space.

       [ELOOP]	      Too many symbolic links were encountered in translating the pathname.

       [EIO]	      An I/O error occurred while reading from or writing to the file system.

Restrictions
       No accounting is produced for programs running when a crash occurs.  In particular, nonterminating programs are never accounted for.

See Also
       acct(5), sa(8)

																	   acct(2)
All times are GMT -4. The time now is 07:53 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy