On Wed, Oct 28, 2015 at 12:35:11PM +0100, Richard PALO wrote:
> Le 27/10/15 19:05, Richard PALO a écrit :
> > Le 27/10/15 18:22, Robert Mustacchi a écrit :
> >>> probably things under /var but any straight forward way
> >>> on how to find out who?
> >>
> >> A simple rough way to do this is something like (but could likely miss
> >> things done via other means:
> >>
> >> dtrace -n 'syscall::write:entry/strstr(fds[arg0].fi_pathname, "/var") !=
> >> NULL/{ @[execname] = count(); }' -n 'tick-1s{ printa(@); trunc(@); }'
> >>
> >> Robert
> >>
> >
> > nice, it does see poold every now and then (I have a postit to add a some
> > tailoring
> > to the smf service)... but nothing else.
> >
> > Gave a shot with "/" :)
> > only really saw in addition dtrace, thunderbird and gnome-terminal.
> >
> > But looking at zpool iostat rpool show similar activity...
> >
> > Kernel space writers not picked up?
> >
>
> I noticed also that if I have a bulkbuild going on in a NG zone, these
> are also picked up, even though the /var in my dev zone is already in dpool.
> sort of strange, really.
>
> I looked in the dtrace toolkit and found iosnoop:
...
>
> Poking a guess here, but is it remotely possible that these are updated
> access times or something like that being written out?
Easy enough to test... `zfs set atime=off foo`. After setting that, does
the I/O drop off?
Jeff.
> --
> Richard PALO
>
--
Bad pun of the week: The formula 1 control computer suffered from a race
condition
-------------------------------------------
illumos-discuss
Archives: https://www.listbox.com/member/archive/182180/=now
RSS Feed: https://www.listbox.com/member/archive/rss/182180/21175430-2e6923be
Modify Your Subscription:
https://www.listbox.com/member/?member_id=21175430&id_secret=21175430-6a77cda4
Powered by Listbox: http://www.listbox.com
