> From: Fredrich Maney [mailto:fredrichma...@gmail.com] > > Have you looked at 'lsof' or the native BSM auditing features? > Admittedly audit is not really intended for realtime, but lsof > certainly is.
I'm not familiar with the BSM auditing, and audit, that you mentioned. Any pointers? lsof and fuser only tell you who has a file open. But there are millions of files in the filesystem, and at any given time, thousands of them will be open, and there's still no way for me to know which files are seeing heavy IO. I can see via iostat, etc, that there is heavy activity taking place, but I don't know who or where. Also fuser and lsof don't work on a network filesystem. _______________________________________________ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
