Date: Thu, 17 Nov 2005 17:15:12 +0000 (GMT) From: Robert Watson <rwatson@FreeBSD.org> To: "Giovanni P. Tirloni" <gpt@tirloni.org> Cc: freebsd-hackers@freebsd.org, Cornelis Swanepoel <rools.ster@gmail.com> Subject: Re: Filesystem monitoring question Message-ID: <20051117171414.L77687@fledge.watson.org> In-Reply-To: <437CB004.2000401@tirloni.org> References: <a9f55af40511170707n3dd70429t48d85acf9b3be5f4@mail.gmail.com> <437CB004.2000401@tirloni.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 17 Nov 2005, Giovanni P. Tirloni wrote: > Using kqueue you can monitor a file/directory for changes and have it > trigger something when that event happens. But you want to monitor you > whole partition.. perhaps intercept some syscalls ? Depending on your requirements, you may be able to use ktrace(1) to monitor the path lookups of all processes on the system by logging them to a file and tracking the file. With Audit support, shortly to be imported into the tree, you'll be able to do similar things, although in a more configurable way. Robert N M Watson
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051117171414.L77687>