1

Possible Duplicate:
How can I log all process launches in Linux

Hello,
due to a freeze problem of my Ubuntu 10.10 (it is not isolatable) I though about logging every executable of the kernel somehow in any file to see what happens last when a freeze occures the next time to not lose valuable information.
I found acct but this is obviously not what I'm looking for. Actually it logs just user commands and those things. I need something which logs in a much "deeper" level. The best would be some kind of script which records every interrupt. Does anybody know some tool like that?

5

2 Answers 2

1

You might try a 'ps' -aux that will list all processes running on the system at a point in time. You could put it into a shell script to iteratively run over time, probably with a sleep in between iterations. A 'top' runs continuously and lists the largest users of system resources. It also has flags that can tailor its output (man top or man ps)

Alan

1
  • ps is not low level enough. AFAIK it is not possible to get kernel interrupts with it. I will get auditd a try.
    – Bevor
    Dec 18, 2010 at 9:18
0

Gilles' comment was the solution:

Maybe you can get a kernel core dump. See also CrashdumpRecipe and other Ubuntu kernel debugging topics.

Not the answer you're looking for? Browse other questions tagged .