Any way to log all process launches?

[Michal Mertl]

Richard Morse wrote:
> On 8 Apr 2005, at 10:41 AM, Giorgos Keramidas wrote:
> 
> > On 2005-04-08 10:32, Richard Morse <remorse at partners.org> wrote:
> >> Hi!  I'm trying to track down an odd problem, for which it would be
> >> very useful to be able to have the computer keep track of every
> >> process that gets created -- ie, keep a list of every fork / exec that
> >> occurs.  Is this possible?
> >
> > Yes, it is possible.  This is part of what `process accounting' does.
> >
> > Look at the manpages of accton(8), lastcomm(1); then check the
> > accounting_enable knob in rc.conf(5) and /etc/defaults/rc.conf
> 
> Thanks!  I was looking under logging and auditing and tracing -- not 
> accounting...

If you need more detailed information some patches at garage.freebsd.pl
might be interesting - especially lrexec. It may be a bit outdated but
it provides you with the information standard utilities don't.

Michal