UNIX for Dummies Questions & Answers

I need to write a script to monitor user processes that revert to parent process id = 1
I can do this with a grep " 1 " or awk and evaluation.
but
Is there a switch on the ps command or another command to specify parent id on proccesses?
I tried ps with the -p ppid=nnnnn but it doesnt seem to work.

thanks

On the most unix flavours the -f(ull) option will show the PPID

like
/logs: ps -f
UID PID PPID C STIME TTY TIME CMD
net400 24032 24268 2 17:02:15 pts/0 0:00 ps -f
net400 24268 13026 0 16:37:04 pts/0 0:00 -csh
/logs:

Yes. but I want to monitor processes that have PPID = 1
I want to know if there is a switch to identify PPID specific

For example: ps -ef -p 29538 will give me process id 29538
I dont see a switch in the man pages for ppid

Hi
I think the following thread addresses similar issue.

https://www.unix.com/unix-for-dummies-questions-and-answers/5529-finding-process-id.html?s=

Good Luck!
sskb

No. thats a lot of info. but doesnt give me an answer.
I am looking for an alternative to this:


for PID in `ps -ef |grep -v root| grep " 1 " | awk '{print $2}'`


The grep " 1" is giving me all processes running under PPID = 1.

I could also awk'{print $3}' and evaluate it for a value of 1

I found in the man pages a switch -p to identify proccesses for a PID.
I am wondering if maybe there is a switch for PPID that I'm missing when I look up the use of ps.

For a list of pid's that are not owned by root but have a ppid of 1, I would go with:

Code:

#! /usr/bin/ksh
ps -ef | sed 1d | while read user pid ppid junk ; do
      if [[ $user != root && $ppid = 1 ]] ; then
            echo $pid
      fi
done
exit 0

This works great. Thanks !