watching all activity on a file?

Bill McGonigle bill at bfccomputing.com
Fri Dec 21 16:54:07 EST 2007


On Dec 21, 2007, at 07:53, Bruce Dawson wrote:

> Bill McGonigle wrote:
>> If it were someone editing a file, that would be a great solution.
>> In this particular case I'm trying to catch an unlink - my hunch is
>> lsof woudn't show anything.
> How about monitoring the directory containing the file?
> (/file/you/are/interested instead of /file/you/are/interested/in)

I was being unclear - the issue I'm concerned with is that by time  
lsof fires, the rather atomic unlink operation is gone from the table  
of which resources are in use.  If only files had a FIN_WAIT. ;)

-Bill

-----
Bill McGonigle, Owner           Work: 603.448.4440
BFC Computing, LLC              Home: 603.448.1668
bill at bfccomputing.com           Cell: 603.252.2606
http://www.bfccomputing.com/    Page: 603.442.1833
Blog: http://blog.bfccomputing.com/
VCard: http://bfccomputing.com/vcard/bill.vcf




More information about the gnhlug-discuss mailing list