Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 23 Nov 2004 22:18:43 +0000 (GMT)
From:      Robert Watson <rwatson@freebsd.org>
To:        Brian Fundakowski Feldman <green@freebsd.org>
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: Tracing Disk Access
Message-ID:  <Pine.NEB.3.96L.1041123221600.98085A-100000@fledge.watson.org>
In-Reply-To: <20041122233318.GB1473@green.homeunix.org>

next in thread | previous in thread | raw e-mail | index | archive | help

On Mon, 22 Nov 2004, Brian Fundakowski Feldman wrote:

> > I have set an idle timeout for the hard-disk. But when there is no
> > user activity there are frequent disk accesses.
> > How can one trace disk access?
> > I'd like to know the kind of access and on which files/directories/
> > nodes. I'd like to log on the console or on a memory disk file.
> 
> You should look to the MAC framework to provide you -- if not the entire
> solution -- at least insight into how and where you can do this.  If you
> were to do it at the disk device level, it would be a GEOM module,
> though. 

I recently added KTR tracing to geom_io.c which allows a trace of I/O
events both as they go up and down the GEOM stack, and as they're handed
off to disks, etc, so that should help provide detailed tracing of the
actual disk I/O's. 

For files/directories, hopefully we'll be ready to start merging some of
the Audit changes from the TrustedBSD branches to CVS in the next few
months, which will also provide a useful tracing mechanism at the higher
levels of the kernel. 

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Principal Research Scientist, McAfee Research



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1041123221600.98085A-100000>