ps + acct

[Frank Sorenson]

Daniel wrote:
> ps aux will show which processes is running with the parameters used.
> acct will log which command was executed.  I want a combination of the
> two to show which command was executed with what parameters as well as
> who ran it when and when it stopped.  I need this for a Fedora box and
> an Ubuntu box.
>
> Any help would be appreciated,
> Daniel
I suggest looking into systemtap (http://sourceware.org/systemtap/).  
There's even an example that you can probably modify for your needs 
(/usr/share/systemtap/tapset/process.stp).

Frank