[mod.computers.vax] Undocumented VMS command SET WATCH FILE /CLASS=...

KROON@HGRRUG51.BITNET (Peter A. Kroon, KVI, +31-50-633618) (09/05/86)

After some experimenting I found the following:
The VMS command SET WATCH seems to be a command that allows you to monitor
all XQP activity of your process. Its syntax is as follows:

    $ SET WATCH option /CLASS = [NO]ALL
                                NONE
                                [NO]ATTRIBUTES
                                [NO]CONTROL_FUNCTIONS
                                [NO]DIRECTORY_OPERATIONS
                                [NO]DUMP
                                [NO]ATTACHED
                                [NO]MAJOR_FUNCTIONS
                                [NO]QUOTA_OPERATIONS


where (currently?) the only option is the keyword FILE.
I don't understand the command in all its glory but I found some of the
classes very useful if I want to get some insight in:

o Why is a program using so damned much         (/CLASS=QUOTA_OPERATIONS)
  disquota?

o How is this program fiddling around with
  my system's files? (e.g. trojan horses)       (/CLASS=MAJOR_FUNCTIONS)

Good luck, and let me know if you find other nice applications.

Peter A. Kroon, K.V.I. Groningen, Netherlands. KROON@HGRRUG51.BITNET