From owner-freebsd-questions@FreeBSD.ORG Thu May 11 23:32:24 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 47E1316A469 for ; Thu, 11 May 2006 23:32:24 +0000 (UTC) (envelope-from youshi10@u.washington.edu) Received: from mxout4.cac.washington.edu (mxout4.cac.washington.edu [140.142.33.19]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8DC4443D8F for ; Thu, 11 May 2006 23:32:09 +0000 (GMT) (envelope-from youshi10@u.washington.edu) Received: from smtp.washington.edu (smtp.washington.edu [140.142.32.139]) by mxout4.cac.washington.edu (8.13.6+UW06.03/8.13.6+UW06.03) with ESMTP id k4BNW853016417 for ; Thu, 11 May 2006 16:32:08 -0700 X-Auth-Received: from [128.208.4.96] (dzihan.cs.washington.edu [128.208.4.96]) (authenticated authid=youshi10) by smtp.washington.edu (8.13.6+UW06.03/8.13.6+UW06.03) with ESMTP id k4BNW60k031824 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Thu, 11 May 2006 16:32:08 -0700 Message-ID: <4463C976.30305@u.washington.edu> Date: Thu, 11 May 2006 16:32:06 -0700 From: Garrett Cooper User-Agent: Mozilla Thunderbird 1.0.8-1.1.1.1vy+fc4 (X11/20060419) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <7.0.0.16.2.20060511141310.06394960@msdi.ca> <20060511222158.GE76653@dan.emsphone.com> In-Reply-To: <20060511222158.GE76653@dan.emsphone.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Uwash-Spam: Gauge=IIIIIII, Probability=7%, Report='__CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __SANE_MSGID 0, __USER_AGENT 0' Subject: Re: Windows Filemon equivalent for freebsd X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 May 2006 23:32:24 -0000 Dan Nelson wrote: >In the last episode (May 11), Ian Lord said: > > >>Just a quick question, do you know a port that will do about the same >>thing as filemon for windows ? >> >>Basically, just a command line tool to list all access to disk showing >> >> 1- File being access >> 2- Success of failure >> 3- Process accessing the file >> >> > >"ktrace -di -p0 -ti" is the closest we have at the moment, but that >only logs the I/O actions themselves, not the syscalls generating the >I/O. Removing the "-ti" flag will tell ktrace to log all I/O and all >syscall activity, which may be information overload. If you're only >interested in a single process, take a look at the truss command. >If/when the port of Solaris' dtrace is completed, it will be able to do >exactly what you want and more. > > > Not sure about requirement #2, but the lsof port does similar things and I think accomplishes requirements #1 and #3 according to what you want. -Garrett