Overall, this looks like a good idea. > + > +int get_comm(char *pid, char *comm, int len)
Please use more glibc style function signature, like: int get_comm(const char *pid, char *comm, size_t len) And maybe even int get_command_name(pid_t pid, char *comm, size_t len)