Date: Wed, 18 May 2005 02:42:39 +0200 From: des@des.no (=?iso-8859-1?q?Dag-Erling_Sm=F8rgrav?=) To: Stanislav Sedov <stas@310.ru> Cc: freebsd-fs@freebsd.org Subject: Re: Tracing files accessed by a process Message-ID: <8664xhtlds.fsf@xps.des.no> In-Reply-To: <20050517175208.GG73108@core.310.ru> References: <e66d1efb05051709216223f53f@mail.gmail.com> <20050517175208.GG73108@core.310.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
Stanislav Sedov <stas@310.ru> writes: > On Tue, May 17, 2005 at 09:21:05AM -0700, Stephan Wehner wrote: > > What would be the recommended way to obtain the list of files that a > > process has accessed, from start to finish? > You can use ktrace program and then analyze it output (open(2) calls). you need to track NAMI operations; open(2) is not (by far) the only syscall that can reference a file by its name. 'ktrace -tn' is your friend. DES --=20 Dag-Erling Sm=F8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8664xhtlds.fsf>