4/22 ok, so maybe a dumb question, but a coworker just asked me and I'm
not sure the answer: so is it possible to view the standard
output of a process running on your system? I do have root. thx
\_ truss/strace, with the option to print the entire syscalls
\_ ok, let me rephrase: there is a process running on my system.
I did not start it. I am root. I have just the process id
(from ps) ... is there some way I can see std out/err? thx
\_ you can't see what has -already- gone out to stdout/stderr
if you look at the write() calls for stdout/stderr (by fd)
you can see what it is putting out -now-. truss -p pid
\_ try /proc/<pid>/fd \
\_______________\_ this was all helpful. thanks. |