kqueue EVFILT_PROC and child process pid
site_archiver@lists.apple.com Delivered-To: Darwin-dev@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to :content-type:content-transfer-encoding:mime-version:subject:date :x-mailer; bh=f5FxhQd/U6YLBL/f1K9sht3bHE4+2rds/wV7Op7C/QI=; b=DpgJj9PoLDfw7CAej4aIdkO3b5bhKjVVuAcEFVGzMkBCkK7HGKsmjZF1bRvif/r8Cw eCZIgc0mGRjZWyuQDchZhofZodTfFDTB1yeL9BYDurJE97/yyZf9zLnOnJ0OWsyBm0BF DZSOox2sLzVBLqV7Xq0q1r6BPi8Y3+GuuSUrg= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:to:content-type:content-transfer-encoding :mime-version:subject:date:x-mailer; b=e7hXIuhQMDjEHYqpBnYnpxI9Bu4Fmn+Qlh8jk0Q3NVvtPnTS0z6vwI1/6kqg43RS18 EdKL0yhbIW6/skvMULfYnl/41cghD6xaNt/SxbizkHJ0oWg0r0NSe+wJTKDJOMLFzlkw fspO0L2TX7uR1bNmuvzU3QRps0lcF5Sp1VfcU= How could I know the pid of child process? Thank you in advance. -- Sincerely, Rustam Muginov _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... Then using kqueue with EVFILT_PROC i can get the notification that observed process forked/execed a child process. Additionaly, how much overhead for the system adds observing all of the running processes? Is it any other, more lightweight way to watch for newer spawned processes then kqueue? This email sent to site_archiver@lists.apple.com
participants (1)
-
Rustam Muginov