Date: Wed, 15 Feb 2006 18:32:23 -0800 From: Tim Utschig <tim@tetro.net> To: Glenn McCalley <techlist@bnetmd.net> Cc: freebsd-questions@freebsd.org Subject: Re: how to tell what ran what Message-ID: <20060216023223.GA14425@tetro.net> In-Reply-To: <002601c6326e$da0fd5a0$6601a8c0@bnetmd.net> References: <005701c63241$dbb3e220$6601a8c0@bnetmd.net> <43F3531E.8080205@cs.tu-berlin.de> <002601c6326e$da0fd5a0$6601a8c0@bnetmd.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Feb 15, 2006 at 03:31:46PM -0500, Glenn McCalley wrote: > If I can get a list of what programs, path and file name, called > sendmail over (say) the last 24 hours, one of them should jump off the > page with an unreasonable level of activitiy. A dirty hack would be to replace the sendmail binary with a script (or program) which records info about the parent process to some world- writable file or directory (perhaps create a unique file under a dir with perms 1773 owned by root:staff) before exec'ing the "real" sendmail binary. -- - Tim Utschig <tim@tetro.net>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060216023223.GA14425>