From 06f87caa73b23ab33f842013f390d962301b9dd4 Mon Sep 17 00:00:00 2001 From: "Edinaldo P. Silva" Date: Wed, 22 Jul 2015 11:52:06 +0700 Subject: system/forkstat: Added (process monitoring tool). Signed-off-by: Willy Sudiarto Raharjo --- system/forkstat/README | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 system/forkstat/README (limited to 'system/forkstat/README') diff --git a/system/forkstat/README b/system/forkstat/README new file mode 100644 index 0000000000..0ca19a6e64 --- /dev/null +++ b/system/forkstat/README @@ -0,0 +1,9 @@ +forkstat (process fork/exec/exit monitoring tool). + +Forkstat is a program that logs process fork(), exec() and exit() activity. +It is useful for monitoring system behaviour and to track down rogue processes +that are spawning off processes and potentially abusing the system. + +Note that forkstat uses the Linux netlink connector to gather process activity +and this may miss events if the system is overly busy. +Netlink connector also requires root privilege. -- cgit v1.2.3