Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Possible Duplicate:
How can I log all process launches in Linux

Hello,
due to a freeze problem of my Ubuntu 10.10 (it is not isolatable) I though about logging every executable of the kernel somehow in any file to see what happens last when a freeze occures the next time to not lose valuable information.
I found acct but this is obviously not what I'm looking for. Actually it logs just user commands and those things. I need something which logs in a much "deeper" level. The best would be some kind of script which records every interrupt. Does anybody know some tool like that?

share|improve this question

marked as duplicate by Diago Jan 9 '11 at 20:38

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
Audit subsystem. –  Ignacio Vazquez-Abrams Dec 17 '10 at 18:27
2  
i.e. start with superuser.com/questions/222912/… –  Gilles Dec 18 '10 at 0:32
    
Maybe you can get a kernel core dump. See also CrashdumpRecipe and other Ubuntu kernel debugging topics. –  Gilles Dec 18 '10 at 0:36
    
Thanks Gilles, this is what I'm looking for. Can you post is as answer, so I can check it answered. –  Bevor Dec 18 '10 at 9:32

2 Answers 2

You might try a 'ps' -aux that will list all processes running on the system at a point in time. You could put it into a shell script to iteratively run over time, probably with a sleep in between iterations. A 'top' runs continuously and lists the largest users of system resources. It also has flags that can tailor its output (man top or man ps)

Alan

share|improve this answer
    
ps is not low level enough. AFAIK it is not possible to get kernel interrupts with it. I will get auditd a try. –  Bevor Dec 18 '10 at 9:18
up vote 0 down vote accepted

Gilles' comment was the solution:

Maybe you can get a kernel core dump. See also CrashdumpRecipe and other Ubuntu kernel debugging topics.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.