Filternig/logging by the exe name ?

Filternig/logging by the exe name ?

[Yakov Lerner]

Which filter allows me to filter/log by the name of the executable ?
Can I log the name of the executable [that was the sender or
receiver of the packet/connection], using such module ?
(talking about outgoing connection, in this case)

Thanks
Yakov

Re: Filternig/logging by the exe name ?

[Jan Engelhardt]

Hi,

On Feb 10 2007 17:50, Yakov Lerner wrote:
>
> Which filter allows me to filter/log by the name of the executable ?
> Can I log the name of the executable [that was the sender or
> receiver of the packet/connection], using such module ?
> (talking about outgoing connection, in this case)

Consider the case where there is no process executable attached to a 
socket.


Jan
-- 
ft: http://freshmeat.net/p/chaostables/

Re: Filternig/logging by the exe name ?

[Yakov Lerner]

On 2/12/07, Jan Engelhardt <jengelh@linux01.gwdg.de> wrote:
> Hi,
>
> On Feb 10 2007 17:50, Yakov Lerner wrote:
> >
> > Which filter allows me to filter/log by the name of the executable ?
> > Can I log the name of the executable [that was the sender or
> > receiver of the packet/connection], using such module ?
> > (talking about outgoing connection, in this case)
>
> Consider the case where there is no process executable attached to a
> socket.

Empty string would be reasonable representation of the process name in
such case, no ?
How common are sockets without process attached ?

Yakov