[01:24] <Keybuk> quest procwatch% sudo ./forkwatch
[01:24] <Keybuk> 16484 -> 19420
[01:24] <Keybuk> 19420 -> 19421
[01:24] <Keybuk> 19421 -> 19422
[01:25] <Keybuk> (daemonising process being watched)
[01:57] <sadmac> Keybuk: how?
[01:58] <Keybuk> darkest magic ;)
[01:58] <sadmac> Keybuk: open source??
[01:58] <Keybuk> obviously
[01:59] <sadmac> Keybuk: url then?
[01:59] <Keybuk> no url
[01:59] <Keybuk> just on my machine
[02:01] <sadmac> I don't believe you then X:(
[02:01] <sadmac> whoa, I waay mistyped that smilie
[02:01] <sadmac> he's gonna have to go to a special school
[02:01] <Keybuk> which bit don't you believe? :p
[02:01] <sadmac> You didn't do the forking! Code or GTFO!

[02:02] <Keybuk> the code of forkwatch won't look that interesting to you
[02:02] <Keybuk> it opens a netlink socket and listens on it
[02:02] <Keybuk> reading the messages containing the parent and child pids
[02:03] <sadmac> my lkml dump doesn't have anything interesting from you...
[02:04] <sadmac> Keybuk: did you look into pjones' suggestion of just "write a utrace module?"
[02:04] <Keybuk> yes
[02:05] <Keybuk> I also looked into other people's suggestions as well of interesting ways to do it
[02:05] <Keybuk> and when I got to the bit of the kernel which I had to modify
[02:05] <Keybuk> found out that somebody had already got there before me
[02:06] <sadmac> so this is already upstream?
[02:06] <Keybuk> yes
[02:06]  * sadmac pulls open the documentation folder in his git tree...
[02:06] <Keybuk> since 2.6.14
[02:06] <Keybuk> ah, see
[02:06] <Keybuk> that's the rub
[02:06] <Keybuk> it's almost completely undocumented
[02:07] <Keybuk> what documentation there is was written by somebody with only a passing familiarity with English
[02:07] <Keybuk> I had to pretty much figure it all out from first principles
[02:07] <Keybuk> but now I have, I get messages when a process forks (or just calls clone)
[02:07] <Keybuk> and when a process calls exit
[02:07] <Keybuk> and when it calls exec
[02:07] <sadmac> Keybuk: oh, KERNEL 2.6.14
[02:07] <sadmac> Keybuk: I thought it was one of those weird british dates for a second
[02:08] <Keybuk> you know you guys are unique in writing the date middle-endian, right?
[02:08] <Keybuk> and that middle-endian is batshit insane whichever way you look at it?
[02:09] <sadmac> what's wrong with bat shit?
[02:09] <Keybuk> it leaves a bad taste in the mouth
[02:10] <sadmac> you're doing it wrong. Put it on toast wedges, then melt cheese over them in a toaster oven, and sprinkle with cayanne
[02:10] <Keybuk> you're American
[02:10] <Keybuk> you don't even deserve to use the word "Cheese"
[02:13] <sadmac> Keybuk: http://www.ratemyeverything.net/post/2277/The_Typical_Mac_User.aspx
[02:16] <Keybuk> hey, you started it :p
[02:17] <sadmac> noted
[02:18] <sadmac> Keybuk: I clicked on a female friend's blog in my feed reader yesterday, thinking it was yours. After reading 2 paragraphs of her feminist critique of a novel she read there was a full 15 seconds when I thought you were a transexual and had neglected to mention :)
[02:18] <Keybuk> I'm sure you would have noticed
[02:20] <sadmac> Keybuk: I'm slow at 3am, and my feed reader is text only so no visual cues. But yeah, it sounded nothing like you.
[10:15] <keesj> Keybuk: how to you do most development, do you use a virtual machine?
[10:16] <keesj> also would this new tracing core posibly make it possible to have sub inits possibly running as user process
[15:24] <Keybuk> keesj: most development I just use the test suite
[15:24] <Keybuk> otherwise I replace the running init on my system ;)
[15:24] <Keybuk> or use vmware
[15:46] <sadmac2> Keybuk: what? no kvm?
[15:48] <Keybuk> no
[15:50] <Keybuk> I hate freedom
[15:51] <sadmac2> Keybuk: Hitler would have used vmware.
[15:51] <Keybuk> and Hitler would have preferred a nation of Blond haired, Blue eyed boys