Have you looked at 'lsof' or the native BSM auditing features? Admittedly audit is not really intended for realtime, but lsof certainly is.
fpsm On Thu, Jun 17, 2010 at 8:56 AM, Edward Ned Harvey <solar...@nedharvey.com> wrote: > When somebody is hammering on the system, I want to be able to detect who's > doing it, and hopefully even what they're doing. > > > > I can't seem to find any way to do that. Any suggestions? > > > > Everything I can find ... iostat, nfsstat, etc ... AFAIK, just show me > performance statistics and so forth. I'm looking for something more > granular. Either *who* the activity belongs to, or *what* files are active > (which might indirectly let me figure out who) ... etc. > > > > If it makes the problem any easier (or harder) all the access is coming > across NFS. And maybe a little CIFS. > > > > _______________________________________________ > zfs-discuss mailing list > zfs-discuss@opensolaris.org > http://mail.opensolaris.org/mailman/listinfo/zfs-discuss > > _______________________________________________ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
