Home » Questions » Computers [ Ask a new question ]

monitor all changes to files on UNIX system

monitor all changes to files on UNIX system

I'm trying to figure out what changes to disk an app does.. and it's very messy. I'd like a way to monitor my entire file system for a few seconds to know which files have been accessed and written to. I thought of checking the modified date.. but of course it takes ages to do that for every file... there must be a cleverer way!

Asked by: Guest | Views: 84
Total answers/comments: 1
Guest [Entry]

Check out fs_usage (shows all filesystem activity), creatbyproc.d (just file creation), filebyproc.d (just file opens), opensnoop (similar, different format), and rwsnoop (reads and writes).