watching all activity on a file?

Jeff Macdonald macfisherman at gmail.com
Fri Dec 21 19:34:22 EST 2007


On Dec 21, 2007 4:54 PM, Bill McGonigle <bill at bfccomputing.com> wrote:
>
> On Dec 21, 2007, at 07:53, Bruce Dawson wrote:
>
> > Bill McGonigle wrote:
> >> If it were someone editing a file, that would be a great solution.
> >> In this particular case I'm trying to catch an unlink - my hunch is
> >> lsof woudn't show anything.
> > How about monitoring the directory containing the file?
> > (/file/you/are/interested instead of /file/you/are/interested/in)
>
> I was being unclear - the issue I'm concerned with is that by time
> lsof fires, the rather atomic unlink operation is gone from the table
> of which resources are in use.  If only files had a FIN_WAIT. ;)

hmmm... could FUSE provide what you are looking for? Create a user
based filesystem that layers itself over ext3 and intercepts unlinks?

-- 
Jeff Macdonald
Ayer, MA


More information about the gnhlug-discuss mailing list