https://github.com/coder543/procmon
procmon is designed to let you create rules for reacting to processes as they are created, destroyed, and just running.
https://github.com/coder543/procmon
Last synced: 3 months ago
JSON representation
procmon is designed to let you create rules for reacting to processes as they are created, destroyed, and just running.
- Host: GitHub
- URL: https://github.com/coder543/procmon
- Owner: coder543
- License: lgpl-2.1
- Created: 2012-09-04T02:08:16.000Z (almost 13 years ago)
- Default Branch: master
- Last Pushed: 2012-09-04T02:25:37.000Z (almost 13 years ago)
- Last Synced: 2025-01-09T18:09:41.042Z (5 months ago)
- Language: C
- Size: 105 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README
- License: LICENSE
Awesome Lists containing this project
README
SUMMARY
This is a really simple (but powerful) tool, so I won't waste your time.
You write a rules script, there is no standardized extension at this point.
To run the script, run procmon SCRIPTNAME
The scripts are written in a type of broken English befitting a very simple interpreter -- like this one.
CONDITION
STATEMENT
STATEMENT
STATEMENT
STATEMENT
...
endifand repeat.
STATEMENT takes the form of any normal bash script file, until the interpreter finds 'endif'.
CONDITION takes the form of the following.
if (starts|dies|running) (the|any|all) "procname";
Were you to type any or all in the condition, you would then be allowed to have multiple process names, each individually inside quotation marks and separated by spaces.
I'm sure the interpretation engine's logic is not 100% reliable, but it works in the general cases I've tested with.
The interpreter loops over the system list of processes once per second.