Watching a file system

Matthew Dillon dillon at apollo.backplane.com
Tue Jun 26 12:46:16 PDT 2007


:Is there a way to log all pathnames accessed by a specific mounted
:file system? 
:------
:Dave Hayes - Consultant - Altadena CA, USA - dave at jetcafe.org 
:>>> The opinions expressed above are entirely my own <<<

    You can monitor system calls made by programs with ktrace.

    you can monitor *MODIFYING* operations to filesystems with the
    journaling support, e.g.:

    mountctl -a -o fd=1 /tmp:monitor | jscan -d

    Hmm. mountctl -l doesn't work.  I'll go fix that.

					-Matt
					Matthew Dillon 
					<dillon at backplane.com>





More information about the Users mailing list