Bug#507658: RFP: loggedfs -- a fuse-filesystem which can log every operations in the filesystem
2008/12/3 CSights [EMAIL PROTECTED]: Package name: loggedfs [...] Would be useful for many things, including figuring out why a laptop's harddrive is spinning up! This can be achieved using tools already in Debian. Install blktrace [1], and try: blktrace -d /dev/sda -o - | blkparse -i - [1] http://packages.debian.org/blktrace -- Krzysztof Burghardt [EMAIL PROTECTED] http://www.burghardt.pl/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#507658: RFP: loggedfs -- a fuse-filesystem which can log every operations in the filesystem
Thanks for the info, This can be achieved using tools already in Debian. Install blktrace [1], and try: blktrace -d /dev/sda -o - | blkparse -i - [1] http://packages.debian.org/blktrace I think blktrace would work for my situation, checking for any program that writes to the harddisk. But some advantages of loggedfs are: It takes as an input a directory, not a device. This makes it more flexible (for purposes other than my own). It is a fuse filesystem, so it might not require root permissions unlike blktrace. (I haven't actually tried loading it as non-root.) It doesn't require debugfs compiled into kernel. It doesn't require CONFIG_BLK_DEV_IO_TRACE turned on. It looks like blktrace might report more events. I'm not sure though. C. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#507658: RFP: loggedfs -- a fuse-filesystem which can log every operations in the filesystem
Package: wnpp
Severity: wishlist
X-Debbugs-CC: [EMAIL PROTECTED]
Package name: loggedfs
Version: 0.5
Upstream Author: Rémi Flament rflament at laposte.net
URL: http://loggedfs.sourceforge.net/
License: GPL
Description: LoggedFS is a fuse-filesystem which can log every operations
in the filesystem (open, read, write, chmod, chown, remove, etc...). The
configuration file allows to logs operations only for certains files with a
regexp.
Would be useful for many things, including figuring out why a laptop's
harddrive is spinning up!
The example log appears to show at least the process name, user, and filename
being accessed on the filesystem:
17:29:35 (src/loggedfs.cpp:136) getattr /var/ {SUCCESS} [ pid = 8700 kded
[kdeinit] uid = 1000 ]
17:29:41 (src/loggedfs.cpp:136) getattr /var/ {SUCCESS} [ pid = 10923 ls uid =
1000 ]
Thanks!
C.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
