From owner-freebsd-fs@FreeBSD.ORG Wed May 18 00:43:25 2005 Return-Path: Delivered-To: freebsd-fs@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B9B1916A4CE for ; Wed, 18 May 2005 00:43:25 +0000 (GMT) Received: from osl1smout1.broadpark.no (osl1smout1.broadpark.no [80.202.4.58]) by mx1.FreeBSD.org (Postfix) with ESMTP id 180C043D8D for ; Wed, 18 May 2005 00:43:25 +0000 (GMT) (envelope-from des@des.no) Received: from osl1sminn1.broadpark.no ([80.202.4.59]) by osl1smout1.broadpark.no (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTP id <0IGN006Z3ZUDUCA0@osl1smout1.broadpark.no> for freebsd-fs@freebsd.org; Wed, 18 May 2005 04:49:25 +0200 (CEST) Received: from dsa.des.no ([80.203.228.37]) by osl1sminn1.broadpark.no (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTP id <0IGN0085YU5KHUH0@osl1sminn1.broadpark.no> for freebsd-fs@freebsd.org; Wed, 18 May 2005 02:46:32 +0200 (CEST) Received: by dsa.des.no (Pony Express, from userid 666) id 6FEFC45165; Wed, 18 May 2005 02:42:45 +0200 (CEST) Received: from xps.des.no (xps.des.no [10.0.0.12]) by dsa.des.no (Pony Express) with ESMTP id ABEE045131; Wed, 18 May 2005 02:42:39 +0200 (CEST) Received: by xps.des.no (Postfix, from userid 1001) id 9672233C3B; Wed, 18 May 2005 02:42:39 +0200 (CEST) Date: Wed, 18 May 2005 02:42:39 +0200 From: des@des.no (=?iso-8859-1?q?Dag-Erling_Sm=F8rgrav?=) In-reply-to: <20050517175208.GG73108@core.310.ru> To: Stanislav Sedov Message-id: <8664xhtlds.fsf@xps.des.no> MIME-version: 1.0 Content-type: text/plain; charset=iso-8859-1 Content-transfer-encoding: quoted-printable X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on dsa.des.no References: <20050517175208.GG73108@core.310.ru> User-Agent: Gnus/5.110002 (No Gnus v0.2) Emacs/21.3 (berkeley-unix) X-Spam-Status: No, score=-2.8 required=5.0 tests=ALL_TRUSTED,AWL autolearn=disabled version=3.0.2 X-Spam-Level: cc: freebsd-fs@freebsd.org Subject: Re: Tracing files accessed by a process X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 May 2005 00:43:25 -0000 Stanislav Sedov writes: > On Tue, May 17, 2005 at 09:21:05AM -0700, Stephan Wehner wrote: > > What would be the recommended way to obtain the list of files that a > > process has accessed, from start to finish? > You can use ktrace program and then analyze it output (open(2) calls). you need to track NAMI operations; open(2) is not (by far) the only syscall that can reference a file by its name. 'ktrace -tn' is your friend. DES --=20 Dag-Erling Sm=F8rgrav - des@des.no