Watching a file system
Matthew Dillon
dillon at apollo.backplane.com
Tue Jun 26 12:46:16 PDT 2007
:Is there a way to log all pathnames accessed by a specific mounted
:file system?
:------
:Dave Hayes - Consultant - Altadena CA, USA - dave at jetcafe.org
:>>> The opinions expressed above are entirely my own <<<
You can monitor system calls made by programs with ktrace.
you can monitor *MODIFYING* operations to filesystems with the
journaling support, e.g.:
mountctl -a -o fd=1 /tmp:monitor | jscan -d
Hmm. mountctl -l doesn't work. I'll go fix that.
-Matt
Matthew Dillon
<dillon at backplane.com>
More information about the Users
mailing list