[01:24] quest procwatch% sudo ./forkwatch [01:24] 16484 -> 19420 [01:24] 19420 -> 19421 [01:24] 19421 -> 19422 [01:25] (daemonising process being watched) [01:57] Keybuk: how? [01:58] darkest magic ;) [01:58] Keybuk: open source?? [01:58] obviously [01:59] Keybuk: url then? [01:59] no url [01:59] just on my machine [02:01] I don't believe you then X:( [02:01] whoa, I waay mistyped that smilie [02:01] he's gonna have to go to a special school [02:01] which bit don't you believe? :p [02:01] You didn't do the forking! Code or GTFO! [02:01] [02:02] the code of forkwatch won't look that interesting to you [02:02] it opens a netlink socket and listens on it [02:02] reading the messages containing the parent and child pids [02:03] my lkml dump doesn't have anything interesting from you... [02:04] Keybuk: did you look into pjones' suggestion of just "write a utrace module?" [02:04] yes [02:05] I also looked into other people's suggestions as well of interesting ways to do it [02:05] and when I got to the bit of the kernel which I had to modify [02:05] found out that somebody had already got there before me [02:06] so this is already upstream? [02:06] yes [02:06] * sadmac pulls open the documentation folder in his git tree... [02:06] since 2.6.14 [02:06] ah, see [02:06] that's the rub [02:06] it's almost completely undocumented [02:07] what documentation there is was written by somebody with only a passing familiarity with English [02:07] I had to pretty much figure it all out from first principles [02:07] but now I have, I get messages when a process forks (or just calls clone) [02:07] and when a process calls exit [02:07] and when it calls exec [02:07] Keybuk: oh, KERNEL 2.6.14 [02:07] Keybuk: I thought it was one of those weird british dates for a second [02:08] you know you guys are unique in writing the date middle-endian, right? [02:08] and that middle-endian is batshit insane whichever way you look at it? [02:09] what's wrong with bat shit? [02:09] it leaves a bad taste in the mouth [02:10] you're doing it wrong. Put it on toast wedges, then melt cheese over them in a toaster oven, and sprinkle with cayanne [02:10] you're American [02:10] you don't even deserve to use the word "Cheese" [02:13] Keybuk: http://www.ratemyeverything.net/post/2277/The_Typical_Mac_User.aspx [02:16] hey, you started it :p [02:17] noted [02:18] Keybuk: I clicked on a female friend's blog in my feed reader yesterday, thinking it was yours. After reading 2 paragraphs of her feminist critique of a novel she read there was a full 15 seconds when I thought you were a transexual and had neglected to mention :) [02:18] I'm sure you would have noticed [02:20] Keybuk: I'm slow at 3am, and my feed reader is text only so no visual cues. But yeah, it sounded nothing like you. [10:15] Keybuk: how to you do most development, do you use a virtual machine? [10:16] also would this new tracing core posibly make it possible to have sub inits possibly running as user process [15:24] keesj: most development I just use the test suite [15:24] otherwise I replace the running init on my system ;) [15:24] or use vmware [15:46] Keybuk: what? no kvm? [15:48] no [15:50] I hate freedom [15:51] Keybuk: Hitler would have used vmware. [15:51] and Hitler would have preferred a nation of Blond haired, Blue eyed boys === sadmac_ is now known as sadmac