UNIX for Advanced & Expert Users

IMO, most of this type of monitoring is either for an advanced security trusted system, where it is usually built-in. Or, the case where users who should not have privilege, do have it. i.e., usually politics.

Some systems will not let LD_LIBRARY_PRELOAD work on executables:

Code:

     int setuid(uid_t uid)
     int setegid(gid_t egid)
     int seteuid(uid_t euid)
     int setgid(gid_t gid)

That change group or uid. FWIW.

It took me a while to remember, but if finally managed to put my failing main memory to work:

The product i had in mind was called "snoopy" and should be downloadable via Sourceforge. I implemented it once in conjunction with syslog-ng (see freshmeat for a download) on RHEL4 and RHEL5 (i386 as well as x86_64), but failed to bring it to work on AIX.

I hope this helps.

bakunin