Le 27/10/15 18:22, Robert Mustacchi a écrit :
>> probably things under /var but any straight forward way
>> on how to find out who?
>
> A simple rough way to do this is something like (but could likely miss
> things done via other means:
>
> dtrace -n 'syscall::write:entry/strstr(fds[arg0].fi_pathname, "/var") !=
> NULL/{ @[execname] = count(); }' -n 'tick-1s{ printa(@); trunc(@); }'
>
> Robert
>
nice, it does see poold every now and then (I have a postit to add a some
tailoring
to the smf service)... but nothing else.
Gave a shot with "/" :)
only really saw in addition dtrace, thunderbird and gnome-terminal.
But looking at zpool iostat rpool show similar activity...
Kernel space writers not picked up?
--
Richard PALO
-------------------------------------------
illumos-discuss
Archives: https://www.listbox.com/member/archive/182180/=now
RSS Feed: https://www.listbox.com/member/archive/rss/182180/21175430-2e6923be
Modify Your Subscription:
https://www.listbox.com/member/?member_id=21175430&id_secret=21175430-6a77cda4
Powered by Listbox: http://www.listbox.com
