LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Reply
 
Search this Thread
Old 11-19-2009, 05:05 AM   #1
your_shadow03
Senior Member
 
Registered: Jun 2008
Location: Germany
Distribution: Slackware
Posts: 1,434
Blog Entries: 6

Rep: Reputation: 51
Need Suggestion regarding Process Tracking?


I have been trying hard to find out the tool or utlity which will save my day tracking what process really deleted my files and who is the owner of the command run on my Machine. I want every bit of information in my Linux Box without missing out the entire history of the process.
What my requirement is :


1. Information like processid, process name, file accessed by the process, command executed by the process, from which terminal or session process initiated.
2. File level auditing -- As of now I am without any tool listing all files that got deleted and not showing up any rm or unlink commands.

All I can think of some utility like psacct or auditing which can let me know eacj and every process history whats going on in my box.
Pls Suggest.
 
Old 11-19-2009, 06:34 PM   #2
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,974
Blog Entries: 11

Rep: Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879
http://www.google.com/linux?hl=en&q=...ng&btnG=Search



Cheers,
Tink
 
Old 11-19-2009, 10:57 PM   #3
your_shadow03
Senior Member
 
Registered: Jun 2008
Location: Germany
Distribution: Slackware
Posts: 1,434
Blog Entries: 6

Original Poster
Rep: Reputation: 51
I explored all options under the link but I am not able to understand.
Can you please suggest me some good tool?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Finding the Process ID of a Process While Initiating the Process senthilmuthiah Linux - Newbie 7 04-02-2009 10:37 AM
Monitoring tool on tracking user activity and process cye Linux - General 5 05-13-2008 10:15 PM
Tracking Background PRocess ajeetraina Linux - Newbie 1 02-01-2008 07:28 AM


All times are GMT -5. The time now is 12:29 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration