* Linux kernel file access monitoring @ 2006-08-10 17:10 Fabio Miranda Hamburger 2006-08-10 17:32 ` Markus Rechberger 0 siblings, 1 reply; 3+ messages in thread From: Fabio Miranda Hamburger @ 2006-08-10 17:10 UTC (permalink / raw) To: linux-c-programming Hello, Anyone know can I monitor in real time all the files that are open(), read(), stat[64]() and close() in a Linux kernel ? I assume setuid privileges. If a tool exists for this task, let me know. Thanks for the continued effort of the list in providing support for Linux developers. Regards, --- Fabio Andres Miranda Ingenieria de sistemas informaticos Universidad Latina - Costa Rica http://ns.isi.ulatina.ac.cr/~fabmirha ^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Linux kernel file access monitoring 2006-08-10 17:10 Linux kernel file access monitoring Fabio Miranda Hamburger @ 2006-08-10 17:32 ` Markus Rechberger [not found] ` <Pine.LNX.4.64.0608101143320.5917@ns.isi.ulatina.ac.cr> 0 siblings, 1 reply; 3+ messages in thread From: Markus Rechberger @ 2006-08-10 17:32 UTC (permalink / raw) To: Fabio Miranda Hamburger; +Cc: linux-c-programming Hey, Something like "lsof"? Markus On 8/10/06, Fabio Miranda Hamburger <fabmirha@ns.isi.ulatina.ac.cr> wrote: > Hello, > > Anyone know can I monitor in real time all the files that are open(), > read(), stat[64]() and close() in a Linux kernel ? > > I assume setuid privileges. If a tool exists for this task, let me know. > > Thanks for the continued effort of the list in providing support for Linux > developers. > > Regards, > > > --- > Fabio Andres Miranda > Ingenieria de sistemas informaticos > Universidad Latina - Costa Rica > http://ns.isi.ulatina.ac.cr/~fabmirha > > > > - > To unsubscribe from this list: send the line "unsubscribe > linux-c-programming" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html > -- Markus Rechberger ^ permalink raw reply [flat|nested] 3+ messages in thread
[parent not found: <Pine.LNX.4.64.0608101143320.5917@ns.isi.ulatina.ac.cr>]
* Re: Linux kernel file access monitoring [not found] ` <Pine.LNX.4.64.0608101143320.5917@ns.isi.ulatina.ac.cr> @ 2006-08-10 17:59 ` Markus Rechberger 0 siblings, 0 replies; 3+ messages in thread From: Markus Rechberger @ 2006-08-10 17:59 UTC (permalink / raw) To: Fabio Miranda Hamburger; +Cc: linux-c-programming Another way that comes into mind would be to manipulate the filesystem driver.. Though I haven't seen any exported kernel function that does this... Markus On 8/10/06, Fabio Miranda Hamburger <fabmirha@ns.isi.ulatina.ac.cr> wrote: > Markus, > > lsof doesnt allow to keep showing file information forever, instead, it > prints out the info and quit. > > Think of "tail -f" command that keep hooked showing lseek() output. > > Let me know another workaround, > > Thanks, > > --- > Fabio Andres Miranda > Ingenieria de sistemas informaticos > Universidad Latina - Costa Rica > http://ns.isi.ulatina.ac.cr/~fabmirha > > > > > -- Markus Rechberger ^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2006-08-10 17:59 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-08-10 17:10 Linux kernel file access monitoring Fabio Miranda Hamburger
2006-08-10 17:32 ` Markus Rechberger
[not found] ` <Pine.LNX.4.64.0608101143320.5917@ns.isi.ulatina.ac.cr>
2006-08-10 17:59 ` Markus Rechberger
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).