Monitoring and Managing Linux Processes

Section 1: Process

What is process?

A process is a running instance of a launched, executable program. A process consists of:

• an address space of allocated memory,
• secuirty properties including ownership credentials and privileges
• one or more execution threads of program code, and
• the process state.

An existing(Parent) process duplicates its own address space(fork) to create a new(child) process structure. Every new process is assigned a unique process ID(PID) for tracking and security. The PID and the Parents? Process ID(PPID) are elements of the new process enviroment. All processes are descendants of the first system process, systemd.

Listing processes

the ps command is used for listing current processes. The command can provide detailed process infomation, include:

• the UID which determines process privileges
• PID
• the CPU and real time already expended
• how much memory the process has allocated in various locations
• the location of process STDOUT, known as the controlling terminal, and
• the current process state

Note: The linux version of ps supports three option formats, including:

• UNIX(POSIX) options
• BSD options
• GNU long options

for example, ps -aux not the same as ps aux

Monitoring and Managing Linux Processes

原文：http://www.cnblogs.com/elewei/p/4767696.html