* Linux kernel file access monitoring
@ 2006-08-10 17:10 Fabio Miranda Hamburger
2006-08-10 17:32 ` Markus Rechberger
0 siblings, 1 reply; 3+ messages in thread
From: Fabio Miranda Hamburger @ 2006-08-10 17:10 UTC (permalink / raw)
To: linux-c-programming
Hello,
Anyone know can I monitor in real time all the files that are open(),
read(), stat[64]() and close() in a Linux kernel ?
I assume setuid privileges. If a tool exists for this task, let me know.
Thanks for the continued effort of the list in providing support for Linux
developers.
Regards,
---
Fabio Andres Miranda
Ingenieria de sistemas informaticos
Universidad Latina - Costa Rica
http://ns.isi.ulatina.ac.cr/~fabmirha
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Linux kernel file access monitoring
2006-08-10 17:10 Linux kernel file access monitoring Fabio Miranda Hamburger
@ 2006-08-10 17:32 ` Markus Rechberger
[not found] ` <Pine.LNX.4.64.0608101143320.5917@ns.isi.ulatina.ac.cr>
0 siblings, 1 reply; 3+ messages in thread
From: Markus Rechberger @ 2006-08-10 17:32 UTC (permalink / raw)
To: Fabio Miranda Hamburger; +Cc: linux-c-programming
Hey,
Something like "lsof"?
Markus
On 8/10/06, Fabio Miranda Hamburger <fabmirha@ns.isi.ulatina.ac.cr> wrote:
> Hello,
>
> Anyone know can I monitor in real time all the files that are open(),
> read(), stat[64]() and close() in a Linux kernel ?
>
> I assume setuid privileges. If a tool exists for this task, let me know.
>
> Thanks for the continued effort of the list in providing support for Linux
> developers.
>
> Regards,
>
>
> ---
> Fabio Andres Miranda
> Ingenieria de sistemas informaticos
> Universidad Latina - Costa Rica
> http://ns.isi.ulatina.ac.cr/~fabmirha
>
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe
> linux-c-programming" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
>
--
Markus Rechberger
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Linux kernel file access monitoring
[not found] ` <Pine.LNX.4.64.0608101143320.5917@ns.isi.ulatina.ac.cr>
@ 2006-08-10 17:59 ` Markus Rechberger
0 siblings, 0 replies; 3+ messages in thread
From: Markus Rechberger @ 2006-08-10 17:59 UTC (permalink / raw)
To: Fabio Miranda Hamburger; +Cc: linux-c-programming
Another way that comes into mind would be to manipulate the filesystem driver..
Though I haven't seen any exported kernel function that does this...
Markus
On 8/10/06, Fabio Miranda Hamburger <fabmirha@ns.isi.ulatina.ac.cr> wrote:
> Markus,
>
> lsof doesnt allow to keep showing file information forever, instead, it
> prints out the info and quit.
>
> Think of "tail -f" command that keep hooked showing lseek() output.
>
> Let me know another workaround,
>
> Thanks,
>
> ---
> Fabio Andres Miranda
> Ingenieria de sistemas informaticos
> Universidad Latina - Costa Rica
> http://ns.isi.ulatina.ac.cr/~fabmirha
>
>
>
>
>
--
Markus Rechberger
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2006-08-10 17:59 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-08-10 17:10 Linux kernel file access monitoring Fabio Miranda Hamburger
2006-08-10 17:32 ` Markus Rechberger
[not found] ` <Pine.LNX.4.64.0608101143320.5917@ns.isi.ulatina.ac.cr>
2006-08-10 17:59 ` Markus Rechberger
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).