Sponsored Content
Top Forums UNIX for Dummies Questions & Answers Is it possible to find out how/when/who deleted particular dierectory on UNIX Aix3 Post 51204 by Perderabo on Thursday 13th of May 2004 09:25:15 AM
Old 05-13-2004
About ptrace... I have seen quite a few bugs in unix kernels. Most of the bugs seem unreasonable. And ptrace in particular seems to not get the kind of testing that a fork or an exec does.

I think that you want the rm or rmdir to actually work. If just should log as well. Remember other stuff is going on too.
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

lost or deleted data in Unix?

Quote: "Until the space is used for another file, it is not deleted and the data can be recovered (although it may require jumping through hoops)." Unquote I know this is true in the Windows world, but I didn't think it was true of Unix. I had always been told once it was deleted in Unix, it... (1 Reply)
Discussion started by: wmosley2
1 Replies

2. UNIX for Dummies Questions & Answers

Help comparing 2 files to find deleted records

Hi, I need to compare todays file to yesterdays file to find deletes. I cannot use comm -23 file.old file.new. Because each record may have a small change in it but is not really a delete. I have two delimited files. the first field in each file is static. All other fields may change. I... (2 Replies)
Discussion started by: eja
2 Replies

3. UNIX for Dummies Questions & Answers

is it possible to check logs in UNIX who deleted the files?

Hello, is it possible to check logs in UNIX who deleted the files? Is there logs in UNIX besides .sh_history? (1 Reply)
Discussion started by: james_falco
1 Replies

4. UNIX for Advanced & Expert Users

Unix ID deleted - What happen to process

I have an unix id (AIX system) which is used to run a couple of processes. They also write some log files into a file system (that is not in the home directory of the user id, but in different location). One bad day, the id was deleted accidentally. But the home directory, files and everything... (1 Reply)
Discussion started by: cmgreat
1 Replies

5. UNIX for Dummies Questions & Answers

recover deleted file in unix

hi after using rm command how to recover the deleted file (7 Replies)
Discussion started by: arulkumar
7 Replies

6. UNIX for Dummies Questions & Answers

how to recover deleted files in unix

Hi Experts, by mistake i deleted some files that are very important to the project. is there any way that i can recover those files,there is no backup for that but the details of the file we know. This will be a great help. Thanks (5 Replies)
Discussion started by: namishtiwari
5 Replies

7. UNIX for Dummies Questions & Answers

Restoring back a deleted file in unix.

Hi, Can any one tell me how to restore back the deleted file in unix? I know the file name. If i know the inode number of the file does help more to restore back the file? (1 Reply)
Discussion started by: siba.s.nayak
1 Replies

8. AIX

AIX emgr -l -u VUID command and differences from AIX3 to 6?

Hey, I currently only have access to an AIX 6.1 system with no interim fix information I.E. any emgr -l -u command results in the following: 'There is no efix data on this system' Could anyone provide me with valid output of a emgr -l -u VUID command when there IS efix data on a system for the... (0 Replies)
Discussion started by: bstullkid
0 Replies

9. UNIX for Dummies Questions & Answers

To find the Ip address of the user who deleted files

Hi, There were a few files deleted from a server by user xyz. The file names are:- /oraextME4/oradata/ME11G22/TEST_IMPORT_01.dbf /oraextME4/oradata/ME11G22/RKVITR1_03.dbf /oraextME4/oradata/ME11G22/TEST_IMPORT_02.dbf need to know the ip address of the terminal from which that... (10 Replies)
Discussion started by: Abhinav Jaiswal
10 Replies

10. UNIX for Advanced & Expert Users

How to list deleted files in UNIX?

Hi All, Its an interview question. I just want to know the answer of below question. 1) How to list deleted files in unix (13 Replies)
Discussion started by: pspriyanka
13 Replies
explain_ptrace(3)					     Library Functions Manual						 explain_ptrace(3)

NAME
explain_ptrace - explain ptrace(2) errors SYNOPSIS
#include <libexplain/ptrace.h> const char *explain_ptrace(int request, pid_t pid, void *addr, void *data); const char *explain_errno_ptrace(int errnum, int request, pid_t pid, void *addr, void *data); void explain_message_ptrace(char *message, int message_size, int request, pid_t pid, void *addr, void *data); void explain_message_errno_ptrace(char *message, int message_size, int errnum, int request, pid_t pid, void *addr, void *data); DESCRIPTION
These functions may be used to obtain explanations for errors returned by the ptrace(2) system call. explain_ptrace const char *explain_ptrace(int request, pid_t pid, void *addr, void *data); The explain_ptrace function is used to obtain an explanation of an error returned by the ptrace(2) system call. The least the message will contain is the value of strerror(errno), but usually it will do much better, and indicate the underlying cause in more detail. The errno global variable will be used to obtain the error value to be decoded. request The original request, exactly as passed to the ptrace(2) system call. pid The original pid, exactly as passed to the ptrace(2) system call. addr The original addr, exactly as passed to the ptrace(2) system call. data The original data, exactly as passed to the ptrace(2) system call. Returns: The message explaining the error. This message buffer is shared by all libexplain functions which do not supply a buffer in their argument list. This will be overwritten by the next call to any libexplain function which shares this buffer, including other threads. Note: This function is not thread safe, because it shares a return buffer across all threads, and many other functions in this library. Example: This function is intended to be used in a fashion similar to the following example: long result = ptrace(request, pid, addr, data); if (result < 0) { fprintf(stderr, "%s ", explain_ptrace(request, pid, addr, data)); exit(EXIT_FAILURE); } The above code example is available pre-packaged as the explain_ptrace_or_die(3) function. explain_errno_ptrace const char *explain_errno_ptrace(int errnum, int request, pid_t pid, void *addr, void *data); The explain_errno_ptrace function is used to obtain an explanation of an error returned by the ptrace(2) system call. The least the message will contain is the value of strerror(errno), but usually it will do much better, and indicate the underlying cause in more detail. errnum The error value to be decoded, usually obtained from the errno global variable just before this function is called. This is neces- sary if you need to call any code between the system call to be explained and this function, because many libc functions will alter the value of errno. request The original request, exactly as passed to the ptrace(2) system call. pid The original pid, exactly as passed to the ptrace(2) system call. addr The original addr, exactly as passed to the ptrace(2) system call. data The original data, exactly as passed to the ptrace(2) system call. Returns: The message explaining the error. This message buffer is shared by all libexplain functions which do not supply a buffer in their argument list. This will be overwritten by the next call to any libexplain function which shares this buffer, including other threads. Note: This function is not thread safe, because it shares a return buffer across all threads, and many other functions in this library. Example: This function is intended to be used in a fashion similar to the following example: long result = ptrace(request, pid, addr, data); if (result < 0) { int err = errno; fprintf(stderr, "%s ", explain_errno_ptrace(err, request, pid, addr, data)); exit(EXIT_FAILURE); } The above code example is available pre-packaged as the explain_ptrace_or_die(3) function. explain_message_ptrace void explain_message_ptrace(char *message, int message_size, int request, pid_t pid, void *addr, void *data); The explain_message_ptrace function is used to obtain an explanation of an error returned by the ptrace(2) system call. The least the mes- sage will contain is the value of strerror(errno), but usually it will do much better, and indicate the underlying cause in more detail. The errno global variable will be used to obtain the error value to be decoded. message The location in which to store the returned message. If a suitable message return buffer is supplied, this function is thread safe. message_size The size in bytes of the location in which to store the returned message. request The original request, exactly as passed to the ptrace(2) system call. pid The original pid, exactly as passed to the ptrace(2) system call. addr The original addr, exactly as passed to the ptrace(2) system call. data The original data, exactly as passed to the ptrace(2) system call. Example: This function is intended to be used in a fashion similar to the following example: long result = ptrace(request, pid, addr, data); if (result < 0) { char message[3000]; explain_message_ptrace(message, sizeof(message), request, pid, addr, data); fprintf(stderr, "%s ", message); exit(EXIT_FAILURE); } The above code example is available pre-packaged as the explain_ptrace_or_die(3) function. explain_message_errno_ptrace void explain_message_errno_ptrace(char *message, int message_size, int errnum, int request, pid_t pid, void *addr, void *data); The explain_message_errno_ptrace function is used to obtain an explanation of an error returned by the ptrace(2) system call. The least the message will contain is the value of strerror(errno), but usually it will do much better, and indicate the underlying cause in more detail. message The location in which to store the returned message. If a suitable message return buffer is supplied, this function is thread safe. message_size The size in bytes of the location in which to store the returned message. errnum The error value to be decoded, usually obtained from the errno global variable just before this function is called. This is neces- sary if you need to call any code between the system call to be explained and this function, because many libc functions will alter the value of errno. request The original request, exactly as passed to the ptrace(2) system call. pid The original pid, exactly as passed to the ptrace(2) system call. addr The original addr, exactly as passed to the ptrace(2) system call. data The original data, exactly as passed to the ptrace(2) system call. Example: This function is intended to be used in a fashion similar to the following example: long result = ptrace(request, pid, addr, data); if (result < 0) { int err = errno; char message[3000]; explain_message_errno_ptrace(message, sizeof(message), err, request, pid, addr, data); fprintf(stderr, "%s ", message); exit(EXIT_FAILURE); } The above code example is available pre-packaged as the explain_ptrace_or_die(3) function. SEE ALSO
ptrace(2) process trace explain_ptrace_or_die(3) process trace and report errors COPYRIGHT
libexplain version 0.52 Copyright (C) 2010 Peter Miller explain_ptrace(3)
All times are GMT -4. The time now is 10:02 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy