Re: [zfs-discuss] Monitoring filessytem access

2010-06-18 Thread Andreas GrĂ¼ninger
Here is a dtrace script based of one of the examples for the nfs provider. Especially useful when you use NFS for ESX or other hypervisors. Andreas #!/usr/sbin/dtrace -s #pragma D option quiet inline int TOP_FILES = 50; dtrace:::BEGIN { printf("Tracing... Hit Ctrl-C to end.\n"); startscr

Re: [zfs-discuss] Monitoring filessytem access

2010-06-17 Thread Richard Elling
On Jun 17, 2010, at 12:48 PM, Edward Ned Harvey wrote: > Ye > > man nfslogd > (and google nfslogd, etc) > totally nailed it. Thank you Cameron. Before you get too happy... NFS logging can have a severe negative impact on performance and scaling. Not recommended for anyone with lot

Re: [zfs-discuss] Monitoring filessytem access

2010-06-17 Thread Edward Ned Harvey
Ye man nfslogd (and google nfslogd, etc) totally nailed it. Thank you Cameron. Just incase anyone stumbles across this by search, here's the start-to-end answer: man nfslogd First, edit /etc/default/nfslogd I am using: MIN_PROCESSING_SIZE=1 IDLE_TIME=1 Assuming you alre

Re: [zfs-discuss] Monitoring filessytem access

2010-06-17 Thread David Magda
On Thu, June 17, 2010 09:36, Darren J Moffat wrote: > On 17/06/2010 14:12, Edward Ned Harvey wrote: >>> From: Fredrich Maney [mailto:fredrichma...@gmail.com] >>> >>> Have you looked at 'lsof' or the native BSM auditing features? >>> Admittedly audit is not really intended for realtime, but lsof >>>

Re: [zfs-discuss] Monitoring filessytem access

2010-06-17 Thread Darren J Moffat
On 17/06/2010 14:12, Edward Ned Harvey wrote: From: Fredrich Maney [mailto:fredrichma...@gmail.com] Have you looked at 'lsof' or the native BSM auditing features? Admittedly audit is not really intended for realtime, but lsof certainly is. I'm not familiar with the BSM auditing, and audit, tha

Re: [zfs-discuss] Monitoring filessytem access

2010-06-17 Thread Cameron Hanover
Oh, and start /usr/lib/nfs/nfslogd. If you just set sharenfs, nfslogd won't start automatically, but it will at reboot. - Cameron Hanover chano...@umich.edu "Our integrity sells for so little, but it is all we really have. It is the very last inch of us, but within that inch, we are free." --V

Re: [zfs-discuss] Monitoring filessytem access

2010-06-17 Thread Cameron Hanover
You can turn on NFS auditing with the sharenfs option "rw=host1:host2,log". Audit logs are in /var/nfs. I believe there's a bit of setup in /etc/nfs/nfslog.conf and /etc/default/nfslogd, but I think I'm running fine off of defaults. This only works for NFSv3. NFSv4 won't log. -- Cameron Han

Re: [zfs-discuss] Monitoring filessytem access

2010-06-17 Thread Edward Ned Harvey
> From: Fredrich Maney [mailto:fredrichma...@gmail.com] > > Have you looked at 'lsof' or the native BSM auditing features? > Admittedly audit is not really intended for realtime, but lsof > certainly is. I'm not familiar with the BSM auditing, and audit, that you mentioned. Any pointers? lsof a

Re: [zfs-discuss] Monitoring filessytem access

2010-06-17 Thread Fredrich Maney
Have you looked at 'lsof' or the native BSM auditing features? Admittedly audit is not really intended for realtime, but lsof certainly is. fpsm On Thu, Jun 17, 2010 at 8:56 AM, Edward Ned Harvey wrote: > When somebody is hammering on the system, I want to be able to detect who's > doing it, and

[zfs-discuss] Monitoring filessytem access

2010-06-17 Thread Edward Ned Harvey
When somebody is hammering on the system, I want to be able to detect who's doing it, and hopefully even what they're doing. I can't seem to find any way to do that. Any suggestions? Everything I can find ... iostat, nfsstat, etc ... AFAIK, just show me performance statistics and so forth.