Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 22 Nov 2003 20:58:15 -0500
From:      Robert Huff <roberthuff@rcn.com>
To:        questions@freebsd.org
Subject:   Re: Monitoring a file?
Message-ID:  <16320.5175.69241.145102@jerusalem.litteratus.org>
In-Reply-To: <20031123002851.GD82843@wantadilla.lemis.com>
References:  <200311222258.hAMMwApd092388@fw.farid-hajji.net> <20031123002851.GD82843@wantadilla.lemis.com>

next in thread | previous in thread | raw e-mail | index | archive | help

> Problem description:
> ====================
>
>  A file, let's say, /path/to/a/file, is being modified by
>  an unknown process P(u) at random times. Unfortunately,
>  the name of the program ran by P(u) is unknown.
>
>  The goal is to catch P(u) "red-handed," just the moment
>  it accesses /path/to/a/file, e.g. by looking up in the
>  process table with ps(1).

	Have you tried moving the file elsewhere and seeing if anyone
complains about the absence?
	Or writing a program that locks the file?


				Robert Huff





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?16320.5175.69241.145102>