Nice and useful commands

To capture the running state of the system. Start with the running processes on the system. Enter the following:

(ps -aux; ps -auxeww; lsof) > current_procs.txt

Grab the contents of the /proc directory. Enter the following:

tar -cvpf proc_directory.tar /proc/[0-9]*

Take a snapshot of the network state of the system. Enter the following:

(date; uname -a; netstat -p; netstat -rn; arp -v) > network_status.txt

Take a snapshot of the currently active and kernel memory.

dd bs=1024 < /dev/mem > mem
dd bs=1024 < /dev/kmem > kmem

Taking a Disk Snapshot:

dd if=/dev/hda1 bs=1024 > hda1

If you enjoyed this post, please consider to leave a comment or subscribe to the feed and get future articles delivered to your feed reader.

Comments

No comments yet.

Leave a comment

(required)

(required)