WHOWATCH(1) General Commands Manual WHOWATCH(1)NAME
whowatch - console, interactive, process and users monitoring tool.
DESCRIPTION
Whowatch is an console, interactive users and process monitoring tool. It displays information about the users currently logged on to the
machine, in real-time. Besides standard informations (login name, tty, host, user's process), the type of the connection (ie. telnet or
ssh) is shown. Display of users command line can be switch to tty idle time. Certain user can be selected and his processes tree may be
viewed as well as tree of all system processes. Tree may be displayed with additional column that shows owner of each process. In the
process tree mode SIGINT and SIGKILL signals can be sent to the selected process. Killing processes is just as simple and fun as deleting
lines on the screen.
Whowatch has no command line options or configuration file. All actions are performed in real time by pressing following keys:
Users list mode:
'up' 'down'
cursor movement
'i' toggle between user command line and idle time
'c' full command line on/off. Disabling full command line can save CPU time. It can give you also some additional information about
process executable.
'enter'
view selected user's processes tree.
't' all system processes (init tree)
Tree mode:
'up' 'down'
cursor movement
'enter'
go back to users list
'o' show processes owners
'c' full command line on/off. Disabling full command line can save CPU time. It can give you also some additional information about
process executable.
'Ctrl-I'
send INT signal to selected process
'Ctrl-K'
send KILL signal to selected process
PLUGINS
Whowatch has ability to load plugin during program run. Plugin prints information inside details window. Plugins gives flexibility: if
some specific information about process, user or system is needed then separate program could be written to obtain such information. Since
there are three kinds of deatils window (process, user and system) maximum three plugins can be loaded. Whowatch has very simple API to
write plugins.
FILES
Program reads /var/log/wtmp, /var/run/utmp. Under Linux program also reads files from /proc directory. Without read access to these files
whowatch funcionality will be limited or program will not even start.
SEE ALSO finger(1)ps(1), pstree(1), top(1), w(1), lsof(8), kill(1)killall(1)BUGS
Because lack of ut_pid in utmp and wtmp structures in *BSD systems, program tries to obtain pid of a login shell by analizing processes
controlling terminal and processes names. Under some conditions it may lead to incorrect results ie. there will be incorrect processes tree
associated with user's session.
AUTHOR
Michal Suszycki <mike@wizard.ae.krakow.pl>,
http://wizard.ae.krakow.pl/~mike
Tree functions written by Jan Bobrowski <jb@wizard.ae.krakow.pl>,
http://wizard.ae.krakow.pl/~jb
27 Feb 2000 WHOWATCH(1)
Check Out this Related Man Page
PSTREE(1) User Commands PSTREE(1)NAME
pstree - display a tree of processes
SYNOPSIS
pstree [-a, --arguments] [-c, --compact] [-h, --highlight-all, -Hpid, --highlight-pid pid] [-g] --show-pgids] [-l, --long]
[-n, --numeric-sort] [-N, --ns-sortns [-p, --show-pids] [-s, --show-parents] [-S, --ns-changes] [-t, --thread-names] [-T, --hide-threads]
[-u, --uid-changes] [-Z, --security-context] [-A, --ascii, -G, --vt100, -U, --unicode] [pid, user]
pstree -V, --version
DESCRIPTION
pstree shows running processes as a tree. The tree is rooted at either pid or init if pid is omitted. If a user name is specified, all
process trees rooted at processes owned by that user are shown.
pstree visually merges identical branches by putting them in square brackets and prefixing them with the repetition count, e.g.
init-+-getty
|-getty
|-getty
`-getty
becomes
init---4*[getty]
Child threads of a process are found under the parent process and are shown with the process name in curly braces, e.g.
icecast2---13*[{icecast2}]
If pstree is called as pstree.x11 then it will prompt the user at the end of the line to press return and will not return until that has
happened. This is useful for when pstree is run in a xterminal.
Certain kernel or mount parameters, such as the hidepid option for procfs, will hide information for some processes. In these situations
pstree will attempt to build the tree without this information, showing process names as question marks.
OPTIONS -a Show command line arguments. If the command line of a process is swapped out, that process is shown in parentheses. -a implicitly
disables compaction for processes but not threads.
-A Use ASCII characters to draw the tree.
-c Disable compaction of identical subtrees. By default, subtrees are compacted whenever possible.
-G Use VT100 line drawing characters.
-h Highlight the current process and its ancestors. This is a no-op if the terminal doesn't support highlighting or if neither the
current process nor any of its ancestors are in the subtree being shown.
-H Like -h, but highlight the specified process instead. Unlike with -h, pstree fails when using -H if highlighting is not available.
-g Show PGIDs. Process Group IDs are shown as decimal numbers in parentheses after each process name. -g implicitly disables com-
paction. If both PIDs and PGIDs are displayed then PIDs are shown first.
-l Display long lines. By default, lines are truncated to either the COLUMNS environment variable or the display width. If neither of
these methods work, the default of 132 columns is used.
-n Sort processes with the same ancestor by PID instead of by name. (Numeric sort.)
-N Show individual trees for each namespace of the type specified. The available types are: ipc, mnt, net, pid, user, uts. Regular
users don't have access to other users' processes information, so the output will be limited.
-p Show PIDs. PIDs are shown as decimal numbers in parentheses after each process name. -p implicitly disables compaction.
-s Show parent processes of the specified process.
-S Show namespaces transitions. Like -N, the output is limited when running as a regular user.
-t Show full names for threads when available.
-T Hide threads and only show processes.
-u Show uid transitions. Whenever the uid of a process differs from the uid of its parent, the new uid is shown in parentheses after
the process name.
-U Use UTF-8 (Unicode) line drawing characters. Under Linux 1.1-54 and above, UTF-8 mode is entered on the console with echo -e
' 33%8' and left with echo -e ' 33%@'
-V Display version information.
-Z (SELinux) Show security context for each process. This flag will only work if pstree is compiled with SELinux support.
FILES
/proc location of the proc file system
BUGS
Some character sets may be incompatible with the VT100 characters.
SEE ALSO ps(1), top(1).
psmisc 2016-06-18 PSTREE(1)