#!/usr/bin/perl -w use strict; for my $pid (0 .. 65536) { next if ( ( not -f("/proc/$pid/exe") ) || ( -f( readlink("/proc/$pid/exe") ) ) ); open( my $cmdline, '<', "/proc/$pid/cmdline" ) or die "open failed: $!"; my @cmdline = <$cmdline>; close( $cmdline ) or die "close failed: $!"; print "ALERT: '@cmdline' is running (pid $pid)\n"; { local $/ = "\x00"; open my $env, '<', "/proc/$pid/environ" or die "open failed: $!"; my @env = <$env>; close( $env ) or die "close failed: $!"; print "ALERT: environment: '@env'\n"; } }