Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.
Hi all, please see this major site announcement: https://www.boards.ie/discussion/2058427594/boards-ie-2026

File monitor (like Sysinternal's Filemon) for Linux?

  • 18-09-2013 09:54AM
    #1
    Registered Users, Registered Users 2 Posts: 10,291 ✭✭✭✭


    Is there a file monitor, similar to FileMon from Sysinternals, for Linux?
    I can use lsof but it's not quite what I'm looking for.

    Thanks


Comments

  • Registered Users, Registered Users 2 Posts: 1,110 ✭✭✭Skrynesaver


    Could you specify your requirements more completely?

    Many of us have little or no dealing with Windows hosts but are quite experienced in monitoring / tracing issues in Unix / Linux


  • Registered Users, Registered Users 2 Posts: 10,291 ✭✭✭✭Standard Toaster


    I 'had' a nagios perl module that works fine when run as root but failed to load when ran as a standard user. I managed, through trial and error, to track it down to a permissions issue which is now working fine.

    This brought me to my question, if I had something that could monitor file access success/fails in realtime I could have fixed the issue far more quicky.

    Box is a Red Hat 6.4 server, 64bit.

    Google tells me to have a look at strace which I will when time permits.

    Thanks!


  • Registered Users, Registered Users 2, Paid Member Posts: 2,427 ✭✭✭ressem


    How about auditd/kauditd to log the file accesses of your particular process?

    Then use tail -f <logfile> | grep "success=no" to view in (buffered) realtime


    (Use of auditd)
    http://reiber.org/nxt/bin/view/Linux/Kauditd


  • Closed Accounts Posts: 3,981 ✭✭✭[-0-]


    strace will tell you every api call a process makes. It's very useful.


  • Registered Users, Registered Users 2 Posts: 10,291 ✭✭✭✭Standard Toaster


    Cheers guys, I'll check those out tomorrow morning and report back :)


  • Advertisement
Advertisement