The center has written software to extract similar information from IRIX audit trail data. The command is called myja.
syntax:
myja [-help] [-p PID] [-P PPID] [-d YYMMDD] [-c command]
where PID = process id
PPID = parent process id
YYMMDD = Year Month and Day
By default myja extracts all data from the audit trail for all processes belonging to the user from current audit data. By using these options the data extracted can be narrowed to a specific process id, process group or command. Additionally, data can be extracted for a specific date.
Caveats:
- Audit data is quite large and the amount of audit data available changes depending on usage and disk availability
- The command can be very slow because the data is stored in large compressed files. If you are not sure what you are looking for, NSCEE recommends that you write the output to a file
- Audit data is recorded at process termination. So data for currently running processes is not available through this command.
[an error occurred while processing this directive]