17
13
I'm looking for a simple method that will log file system operations. It should display the name of the file being accessed or modified.
I'm familiar with powertop, and it appears this works to an extent, in so much that it show the user files that were written to. Is there any other utilities that support this feature.
Some of my findings:
powertop: best for write access logging, but more focused on CPU activity
iotop: shows real time disk access by process, but not file name
lsof: shows the open files per process, but not real time file access
iostat: shows the real time I/O performance of disk/arrays but does not indicate file or process
What is
nmbd
in the givenstrace
command? – dragosrsupercool – 2014-12-12T14:27:39.2701
fanotify
is a new filesystem notification framework in the Linux kernel (recently added around 2012). You may want to check that out. Tools and utilities that use it are still being written, so you may have to write one yourself, but it's much more robust than inotify, famin, or anything else you might've seen so far. – allquixotic – 2012-11-02T20:37:17.0333
A quick Google search for fanotify shows a tool called
– Thanh DK – 2013-04-23T07:26:25.057fatrace
from here.