man > whowatch(1)

WHOWATCH(1)                            General Commands Manual                           WHOWATCH(1)

NAME
       whowatch - console, interactive, process and users monitoring tool.

DESCRIPTION
       Whowatch  is an console, interactive users and process monitoring tool.  It displays informa‐
       tion about the users currently logged on to the machine, in real-time.  Besides standard  in‐
       formation  (login name, tty, host, user's process), the type of the connection (ie. telnet or
       ssh) is shown.  Display of users command line can be switch to tty idle time.   Certain  user
       can be selected and his processes tree may be viewed as well as tree of all system processes.
       Tree  may  be  displayed  with  additional  column  that shows owner of each process.  In the
       process tree mode SIGINT, SIGHUP, SIGTERM and SIGKILL signals can be  sent  to  the  selected
       process. Killing processes is just as simple and fun as deleting lines on the screen.

       Whowatch  has  no  command  line options or configuration file.  All actions are performed in
       real time by pressing following keys:

       Users list mode:

       'up' 'down'
              cursor movement

       'i'    toggle between user command line and idle time

       'c'    full command line on/off. Disabling full command line can save CPU time.  It can  give
              you also some additional information about process executable.

       'enter'
              view selected user's processes tree.

       't'    all system processes (init tree)

       Tree mode:

       'up' 'down'
              cursor movement

       'enter'
              go back to users list

       'o'    show processes owners

       'c'    full  command line on/off. Disabling full command line can save CPU time.  It can give
              you also some additional information about process executable.

       'Ctrl-I'
              send INT signal to selected process

       'Ctrl-K'
              send KILL signal to selected process

       'Ctrl-U'
              send HUP signal to selected process

       'Ctrl-T'
              send TERM signal to selected process


PLUGINS
       Whowatch has ability to load plugin during program run.   Plugin  prints  information  inside
       details  window.  Plugins gives flexibility: if some specific information about process, user
       or system is needed then separate program could be written to obtain such information.  Since
       there are three kinds of deatils window (process, user and system) maximum three plugins  can
       be loaded.  Whowatch has very simple API to write plugins.




FILES
       Program  reads  /var/log/wtmp, /var/run/utmp. Under Linux program also reads files from /proc
       directory. Without read access to these  files  whowatch  funcionality  will  be  limited  or
       program will not even start.


SEE ALSO
       finger(1) ps(1), pstree(1), top(1), w(1), lsof(8), kill(1) killall(1)


BUGS
       Because  lack  of ut_pid in utmp and wtmp structures in *BSD systems, program tries to obtain
       pid of a login shell by analyzing processes controlling terminal and processes  names.  Under
       some  conditions  it may lead to incorrect results ie. there will be incorrect processes tree
       associated with user's session.


AUTHOR
       Michal Suszycki <mike AT wizard.pl>,
       http://wizard.ae.krakow.pl/~mike
       Tree functions written by Jan Bobrowski <jb AT wizard.pl>,
       http://wizard.ae.krakow.pl/~jb

                                             27 Feb 2000                                 WHOWATCH(1)