Hosting Provided By

RE: process accounting

From: Small, Jim <jim.small(at)eds.com>
Date: Thu May 29 2003 - 19:33:22 EDT

Well it depends on how you do it. With Solaris' BSM, the performance penalty is 5-10%. IMHO, peanuts compared to the wealth of information you can obtain from logging execs. Not just for malicious acts, but also for honest mistakes when people are sure what they did or what happened.

<> Jim

-----Original Message-----
wouldn't there be a big overhead if you log every execve() call ? Received on Fri May 30 19:03:09 2003

This message: [ Message body ]
Next message: Sandra Hernandez: "deny deleting a file for users"
Previous message: Petty, Robert: "Linux firewall/IDS/NAT suggestions"
Maybe in reply to: Vladislav Tchernev: "process accounting"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:01:20 EDT