Is their anyway to track down a proccess by it's command, and see how it got started, and a log of what happened. Because just a minute ago, the user nobody, with the command 'duy' spawned about 15 proccesses, creating the server load to skyrocket. I had to skill -u nobody to get the server back to normal load.

What all would you do to track this down?

Thanks

I would find that file and inspect the contents of it. It is always good to have set ulimits so problems like that cannot happen.

process accounting will do some of what you are looking for but...you pay a premium in overhead for every process being logged.

lsof - list open files may help you out also.

ps -ef will tell you the parent and child of every process that has one.. as will pstree

they should tell you what started each process