Subject: Re: Am I hallucinating again?
To: Peter Seebach <firstname.lastname@example.org>
From: Steven M. Bellovin <email@example.com>
Date: 09/14/2004 07:44:16
In message <200409140637.i8E6b7HI028002@guild.plethora.net>, Peter Seebach writ
>I am convinced that, once in the past, I used a Unix system which logged (via
>syslog?) all system-initiated terminations of processes. For instance,
>I just upgraded memory in my laptop, and I've had a half-dozen instances of
>programs just suddenly shutting down without warning... It'd be great if I
>had some kind of logging of what happened to them.
>They don't seem to coredump, which is itself a little disturbing.
>I'm running memtest in the mean time, but... I am curious as to whether this
>feature really existed.
If you have accounting turned on, lastcomm will show you processes that
died with signals and/or core dumps.
--Steve Bellovin, http://www.research.att.com/~smb