What is the best approach for this?  I don't see a syscall that looks appropriate - but that doesn't mean there is not one.

Would I simply do an audit on the lpr command?  Or is it another command?

I need the ability to monitor printing to both file and device, FROM, linux shell as well as console or GUI.

Can someone advise me on how to accomplish this please?

Thanks in advance,