Re: Logging Access to HDD

[Michal Novotny <minovotn@redhat.com>]

On 04/19/2011 12:18 PM, Laszlo Ersek wrote:
> On 04/19/11 11:44, Sebastian Biedermann wrote:
>
>>>> For now, I want to log the disk accesses of a running windows 7 domU
>>>> instance.
>> I dont need to log every single byte, it would be enough to know which
>> file is accessed by the domU inside its image.
> Perhaps try Filemon from Sysinternals ^W^W^W Process Monitor:
>
> http://technet.microsoft.com/en-us/sysinternals/bb896645
>
Laszlo, those tools are basically using the API I mentioned above - the
FindFirstChange() or similar API I already mentioned. If Sebastian wants
it to be done for one-time or user-assisted monitoring then it's fine to
use those Sysinternals utilities however if his intention is to create
an application to be monitoring it "on-the-fly" then writing his own app
is better.

Michal

-- 
Michal Novotny <minovotn@redhat.com>, RHCE
Virtualization Team (xen userspace), Red Hat