Re: [RFC] "biological parent" pid

From: Helge Hafting
Date: Tue Feb 01 2005 - 04:09:11 EST


Tim Schmielau wrote:


I'm trying to reconstruct the complete history of processes from the BSD accounting records. However, this is not very useful if a large fraction of the processes look as if they were started by init.

The following program will print the history in a form vaguely resembling
pstree output from the accounting file:


Just having those original ppids won't really help you, if the process
is long gone with no trace of what it was. Consider adding logging to
"fork()" and "exec()" instead of doing this. Then you can reconstruct
history all the way back to the correct executables.

Helge Hafting
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/