Watching a file system

Matthew Dillon dillon at
Tue Jun 26 12:46:16 PDT 2007

:Is there a way to log all pathnames accessed by a specific mounted
:file system? 
:Dave Hayes - Consultant - Altadena CA, USA - dave at 
:>>> The opinions expressed above are entirely my own <<<

    You can monitor system calls made by programs with ktrace.

    you can monitor *MODIFYING* operations to filesystems with the
    journaling support, e.g.:

    mountctl -a -o fd=1 /tmp:monitor | jscan -d

    Hmm. mountctl -l doesn't work.  I'll go fix that.

					Matthew Dillon 
					<dillon at>

More information about the Users mailing list