linux-netlink-process-monitoring

Brief

Linux process monitor implemented using Netlink mechanism.
This monitor allows registration of callbacks on Linux process events (exec, forc etc.).

Permissions

Since only supoer users can open netlinc communication ports, sudo have
to be used when running any process monitoring processes.

Build

This project is using Cmake to generate make files.
To generate project binaries execute the following commands
while starting from CMakeLists.txt directory:

• mkdir build
• cd build
• cmake ..
• make

Binaries

lib_process_monitor

Static library containig all process monitoring functionality.

monitor_example

Executable that uses lib_process_monitor to log process events.
This executable registers logger callback to the process events monitor
and prints events to stdout.

TODOs

• Callback context should be shared_ptr, and be released when callback is deleted.
• Limit max number of messages in queue.