Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

File monitor (like Sysinternal's Filemon) for Linux?

  • 18-09-2013 9:54am
    #1
    Registered Users, Registered Users 2 Posts: 10,288 ✭✭✭✭


    Is there a file monitor, similar to FileMon from Sysinternals, for Linux?
    I can use lsof but it's not quite what I'm looking for.

    Thanks


Comments

  • Registered Users, Registered Users 2 Posts: 1,110 ✭✭✭Skrynesaver


    Could you specify your requirements more completely?

    Many of us have little or no dealing with Windows hosts but are quite experienced in monitoring / tracing issues in Unix / Linux


  • Registered Users, Registered Users 2 Posts: 10,288 ✭✭✭✭Standard Toaster


    I 'had' a nagios perl module that works fine when run as root but failed to load when ran as a standard user. I managed, through trial and error, to track it down to a permissions issue which is now working fine.

    This brought me to my question, if I had something that could monitor file access success/fails in realtime I could have fixed the issue far more quicky.

    Box is a Red Hat 6.4 server, 64bit.

    Google tells me to have a look at strace which I will when time permits.

    Thanks!


  • Registered Users, Registered Users 2 Posts: 2,426 ✭✭✭ressem


    How about auditd/kauditd to log the file accesses of your particular process?

    Then use tail -f <logfile> | grep "success=no" to view in (buffered) realtime


    (Use of auditd)
    http://reiber.org/nxt/bin/view/Linux/Kauditd


  • Closed Accounts Posts: 3,981 ✭✭✭[-0-]


    strace will tell you every api call a process makes. It's very useful.


  • Registered Users, Registered Users 2 Posts: 10,288 ✭✭✭✭Standard Toaster


    Cheers guys, I'll check those out tomorrow morning and report back :)


  • Advertisement
Advertisement