02-09-2005
Which logs did you check?
10 More Discussions You Might Find Interesting
1. Programming
my project is very big,has many module and sub procedure that
written by others,so how to get info of thel file opened or unclosed in my project ?
I think there are two ways:
1. with pid_t get process info ,and via file table ( /usr/include/sys/file.h) to check file info.
2. in very... (2 Replies)
Discussion started by: nsun
2 Replies
2. Linux
hello,
i am going to work on image process under linux ... can someone give me some advices?
really thank you! (1 Reply)
Discussion started by: kangc
1 Replies
3. What is on Your Mind?
Check out this site. This will be helpful for all.
Link removed. (3 Replies)
Discussion started by: jadebellant
3 Replies
4. Programming
Hi,
I am wondering if there is a way to find out in a C software program if a particular process is running without having to write a file. In the past, I have been using the system command to execute a pgrep and output the info to a file. Then the C program reads the file to make the... (1 Reply)
Discussion started by: herbmiller
1 Replies
5. Programming
Can any one tell me how does 'ps' command get information about the processes from operating system data structures? (4 Replies)
Discussion started by: clintoo
4 Replies
6. AIX
Hi,
may be this is an AIX noob question:
my current C++ application runs on Linux and is quite memory consuming. Therefore, the application writes a logfile after it has finished containing memory information, CPU information, information on the running other processes besides my application... (5 Replies)
Discussion started by: DarthVader77
5 Replies
7. UNIX for Dummies Questions & Answers
I have a process that I'd like to kill. Doing a "ps -fu myusername" gives me:
UID PID PPID C STIME TTY TIME CMD
myusername 5443 1 0 10:05 ? 00:00:00 /bin/sh /some/path/crap.sh -s /yet/another/path/parentProcess
myusername 5593 5443 0 ... (2 Replies)
Discussion started by: mrwatkin
2 Replies
8. Red Hat
Hi, I have two questions about Linux with VMware:
(1) How to tell if the system is real or VMware virtual from a Linux platform without root privilege? (root can use 'dmidecode | grep -i vmware). The command 'dmesg | grep -i vmware' run by everyone is not always working for this purpose.
(2)... (2 Replies)
Discussion started by: aixlover
2 Replies
9. Hardware
Dear All,
I have developed one application in the Qt Creator. I have one requirment for get hardward information in the Linux system, Then i try dmidecode using and run in Qt.It will occur error message for "dev/mem" permission denied". So i try to terminal to run sudo ./application. it will ask... (1 Reply)
Discussion started by: JGops79
1 Replies
10. Linux
Dear all,
I have a Oracle BI server process which is running in one linux machine.
But the process gets killed itself automatically once every 3 days .
It has a DB connection with another server.
Is there any way to find out what is the reason behind this process kill.
And also... (2 Replies)
Discussion started by: jegaraman
2 Replies
LEARN ABOUT SUSE
ausearch_add_item
AUSEARCH_ADD_ITEM(3) Linux Audit API AUSEARCH_ADD_ITEM(3)
NAME
ausearch_add_item - build up search rule
SYNOPSIS
#include <auparse.h>
int ausearch_add_item(auparse_state_t *au, const char *field, const char *op, const char *value, ausearch_rule_t how);
DESCRIPTION
ausearch_add_item adds one search condition to the current audit search expression. The search conditions can then be used to scan logs,
files, or buffers for something of interest. The field value is the field name that the value will be checked for. The op variable
describes what kind of check is to be done. Legal op values are:
exists
just check that a field name exists
=
locate the field name and check that the value associated with it is equal to the value given in this rule.
!=
locate the field name and check that the value associated with it is NOT equal to the value given in this rule.
The value parameter is compared to the uninterpreted field value.
The how value determines how this search condition will affect the existing search expression if one is already defined. The possible val-
ues are:
AUSEARCH_RULE_CLEAR
Clear the current search expression, if any, and use only this search condition.
AUSEARCH_RULE_OR
If a search expression E is already configured, replace it by (E || this_search_condition).
AUSEARCH_RULE_AND
If a search expression E is already configured, replace it by (E && this_search_condition).
RETURN VALUE
Returns -1 if an error occurs; otherwise, 0 for success.
SEE ALSO
ausearch_add_expression(3), ausearch_add_interpreted_item(3), ausearch_add_timestamp_item(3), ausearch_add_regex(3), ausearch_set_stop(3),
ausearch_clear(3), ausearch_next_event(3), ausearch-expression(5).
AUTHOR
Steve Grubb
Red Hat Nov 2007 AUSEARCH_ADD_ITEM(3)