Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 12 down vote favorite
7

I would like to get a log of all processes that are launched with the time that they were launched and the arguments they were launched with. Is this possible in Linux?

share|improve this question
@new123456 that's exactly what I was looking for! Thanks a lot! I just tried it out and it works if I execute the command "auditctl -a task,always" after each reboot, ie. it doesn't start logging unless I execute this command, so this is perfect. – runeks Jun 1 '11 at 19:16
1  
@runeks All right, I've posted this as an answer so that this question can be marked answered. – new123456 Jun 1 '11 at 20:04

3 Answers

up vote 17 down vote accepted

Your starting point should be auditd.

Try something like this:

apt-get install auditd
auditctl -a task,always
ausearch -i -sc execve
share|improve this answer
up vote 1 down vote

I needed to do this, except (1) I didn't need the time and (2) I was only interested in processes that are started by a given process, and its children and subsequent descendants. Also, in the environment I was using, it wasn't possible to get auditd or accton, but there was valgrind.

Prefix the following to the process of interest on the command line:

valgrind --trace-children=yes

The information you need will be in the log output displayed on STDERR.

share|improve this answer
up vote 0 down vote

You can try cat ~/.bash_history There is system log viewer,this can help you out.

share|improve this answer
~/.bash_history only contains commands I've executed in a terminal, apparently. I'm looking for a log of all the programs executed, for example when I click an icon to open up my e-mail client, gedit, or I open up my browser, and my browser executes another process by itself. new123456's answer did the trick. – runeks Jun 1 '11 at 19:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.