Does Linux have a way to trace writes to a file?
For each write, I would like to know the time, date, process id, user, file position, byte count, and the data written.
I could use this with a script to replay the writes to a backup of the original file, and reproduce the file contents as they were at a point in time.
i am investigating on solutions to trace a file deletion on a computer( Linux O/S).i also need to determine weither after a file deletion or download on a computer, the computer clock had not been modified. In case a file has been downloaded on a computer and then transferred to a removable device, i need to find out the file activity. i mean i should be able to tell that the file was downloaded and transferred to a device with possible specifications.
View 2 Replies View Relatedlike my alias a retired person, and Its never to late to learn something½ve just installed Ubuntu and found a tutorial online about bash-script.Manage some, but I cant to this one:[Write a script that makes file executable and writes a message that it has been done.If I run the command > <scriptName> <fileName> , then the file fileName should be executable and then it should indicate that fileName have been executable.]
Ive read man pages up-n-down and search the web, and I think I should let the script use chmod and ls -l, but I cant get the hole picture here. Actually I have nothing to show up, so I hope someone could help me with some ideas or a soloution - just to the how it should look.This is my first post, ever, at a forum like this, so please be nice if I didnt follow any rules here, I dont know if you even will answer this post, but at least give me some clues, a skeleton-code ti be based on
This is a trace-all the files so that you can imagine my trace file format.
Code:
+ 0.1 1 0 cbr 164 ------- 1 1.0 0.0 0 0
- 0.1 1 0 cbr 164 ------- 1 1.0 0.0 0 0
r 0.111312 1 0 cbr 164 ------- 1 1.0 0.0 0 0
[code]....
Is there already a program that reads multiple pipes or file descriptors and writes to the standard output (not splitting lines).Like cat, but reading all files simultaneously and preserving lines.It is needed to avoid coding of select/epoll loops or using multithreading in simple programs. Like "select loop for bash".
View 1 Replies View RelatedI have a fileserver running 10.04 server 64bit and samba. I connect it to my desktop which is 10.04 desktop 64bit.I have the server mounted on my desktop in fstab as://10.0.0.2/share /media/share cifs guest, uid= 1000.Up until 30 June 2010 it was all fine. Now when I write the server it is very slow e.g. 2Mbps though when I read I get >100Mbps so I think my network is still ok. If i use nautilus smb://10.0.0.2/share I can write at >100Mbps and also read at >100Mbps...So any ideas why the write speed via the fstab mount samba has started to go really slowly in the last couple of days?
View 6 Replies View RelatedAlright, I have a network trace file that I want to parse through.
The file looks like this:
+ 1.002 /NodeList/1/DeviceList/0/$ns3::PointToPointNetDevice/TxQueue/Enqueue ns3::PppHeader (Point-to-Point Protocol: IP (0x0021)) ns3::Ipv4Header (tos 0x0 ttl 62 id 0 protocol 6 offset 0 flags [none] length: 40 10.2.1.1 > 10.1.1.1) ns3::TcpHeader (49153 > 26 [ SYN ] Seq=0 Ack=0 Win=65535)
- 1.002 /NodeList/1/DeviceList/0/$ns3::PointToPointNetDevice/TxQueue/Dequeue ns3::PppHeader (Point-to-Point Protocol: IP (0x0021)) ns3::Ipv4Header (tos 0x0 ttl 62 id 0 protocol 6 offset 0 flags [none] length: 40 10.2.1.1 > 10.1.1.1) ns3::TcpHeader (49153 > 26 [ SYN ] Seq=0 Ack=0 Win=65535)
[Code]....
I want to create VBR traffic,I created file which contain two 32 bit fields.But When I execute tcl program with this.No pkt transfer is shown.When same program I tried with example-trace ,i saw pkt transfer.Containt of my traffic trace file is as follows :
[Code]...
how do i plot the trace file into a graph? can any 1 show an example here? just any trace file will do
View 13 Replies View RelatedHow to plot graphs for trace files generated in ns2 using xgraph and gnuplot.
View 7 Replies View RelatedI run a website that a very steady flow of traffic and Im seeing recent issues that I just dont like. Server is 10.04.2 on a supermicro i7-950/6gb RAM with two 500gb Samsung F3 drives in a software RAID1 (1x5400, 1x7200) and for several weeks, its been running very well. Recently, Im seeing the server hang for 5-20 seconds. IOwait goes through the roof, nothing can write to the disk. Apache logs stop, redis fails to rebuild caches, mysql errors and then it continues and moves back to normal operation
/ is ext4, the kernel was 2.6.32-server-x64 but since updating to 2.6.38-server-x64, the issue has dropped from maybe once per 10 minutes to once per 15 minutes. 3 IOstat copy/pastes show this when it hangs.
Code:
Total DISK READ: 0.00 B/s | Total DISK WRITE: 0.00 B/s
TID PRIO USER DISK READ DISK WRITE SWAPIN IO> COMMAND
[code]...
No smart errors or smart diags show any issues with any of the disks and kernel.log shows near nothing other than a process hang, 120 seconds about 5 days ago.
I need to trace the actions that are performed by my .cshrc file. Is there a command i can use to get a printout of this?
View 3 Replies View Relatedwhen I run a tcl script using ns-2.30 and get a result and run the sam script in ns-2.29 and get an error and run the script file in ns-2.33 and get a result but the output filr (out.tr) is less in size than the output file of ns-2.30 i and also in the details of time scale , for example one out.tr file contains 19000 line (2 M byte size) and the other out.tr file for the same tcl file using the ns-2.33 version contains 10000 lines (1. M byte size) . Does that make since ? also in result file nam file for ns-2.30 it has some drops but the ns-2.33 has no drops! when I run the name !!!. is the time scale for simulation tunable or can be aligned?
View 1 Replies View RelatedFor some reason my DNS servers aren't able to resolve certain names. Most names resolve fine there are just a few that don't work. Nslookup doesn't work either of course, and curiously neither does "whois".
Here's an example:
Quote:
dig facebookmail.com +trace
; <<>> DiG 9.2.4 <<>> facebookmail.com +trace
;; global options: printcmd
[code]...
I need to trace/track email activity in my ubuntu server, normal i use this command tail -f /var/log/mail/mail.log, more or less. But the problem i am facing is that it take a long time to go through the entire log as my server recieves thousands of emails per day. is the a code that i can use to search email in the log, for instance need to find perfectpol@mycompany.com in the mail log.
Secondly; if there is an email that is blocking others on the queue how can it be remove or forced to go the mailbox. or to view its contents in order to decide whether to remove it or not.
Had a problem that are said not arrival or that are delivered as late as a day and sometime 6hours.
OS :red hat 4.2 oracle EBS SUITE Applications:11.5.10
Iwould like to install Proxy(Apache) server on linux.is it possible?
I would like to trace the user activities by proxy server. we are running many applications on that.How to trace that.is there any server better than Apcache?
where to writes the commands if i am using fadora 11?
View 2 Replies View RelatedGNU/Linux kernel 2.6
MS Windows XP 5.1 (Service Pack 3)
I want to install windows XP but every time I do so I need several days to get linux running again. In linux I use lilo (don't remember the version no.), which I am familiarized with.how to fix the linux partition after I install xp
Hibernating windows 7 on dual-boot laptop (9.10 Ubuntu - W7) writes something on MBR which breaks GRUB2. GRUB2 does not load at all after hibernating W7 and the best solution is to reinstall GRUB with Ubuntu 9.10 cd, just follow the instructions at [URL]
View 4 Replies View RelatedIn RC 10.4 abcde still writes no tags. Sadly, I should say, since I've always used abcde for ripping CDs.
View 2 Replies View RelatedI'm seeing sustained disk writes of about 2 MB/s in the indicator-multiload indicator in Unity. I determined that it is writes on my 500GB HDD on /dev/sdb. This behaviour started after I used Gparted to create a single 500GB ext4 partition and also selected that it should be formatted to ext4 in Gparted.
Is this usual? It also survived a reboot.. I assume that it is the full formatting taking place in the background?
I saw no activity using pidstat or iotop. Only using vmstat -d revealed the writes.
Read/writes are slow on NFS.How can we diagnosing the issue, what commands are used for the error finding
View 8 Replies View RelatedI have two ntfs partitions I use to store music and data. I've been using them in all my linux boxes without any problems. Simply use Ntfs-3g with noatime and everything works great.
However, since the update to OpenSuse 11.3 writing to my NTFS partitions takes FOREVER. I've specified noatime, relatime and norelatime successively without success. The partitions have plenty of space and are defragmented.
When copying large files, It starts fast at first, but in the last hundred MB it slows down to about 1.5MB/s. Even after the transfer is supposedly done, the HD led remains on and all other read/write activity involving the partition is completely halted.
This can take between 5 minutes to 10 or more depending on the size of the file. When copying several small files, (100 MB or less) it starts at about 1.5MB/s from the beginning.
I have the latest versions of fuse and ntfs-3g installed
I'm using 9.10 Desktop 64bit on a Dell Latitude D830. I have 4 gigs of RAM and a 7200 rpm sata hard drive. Everything works pretty well, video, sound, and network. Flash isn't as smooth as in Windows but I assume that's a Flash/64bit thing and not necessarily an Ubuntu thing.
However, one area of performance still lags far behind my Windows XP experience, and that's disk writes. For instance, when I'm copying a large amount of information from a USB drive or from my Windows partition to my native partition, I can barely switch windows until the task is complete, nevermind trying to surf the Web. I thought that that might be related to the slow performance of the ntfs driver, but recently I have been doing a lot of work with VMWare, and I get the same result when trying to pause virtual machines - it writes a largish amount of information to disk in a short amount of time and I can't do much until it finishes.
Here are some things I looked at based on other threads to try to debug my issue:
~$ sudo hdparm /dev/sda
/dev/sda:
multcount = 8 (on)
IO_support = 1 (32-bit)
readonly = 0 (off)
readahead = 256 (on)
[Code].....
That disk read speed is a little faster than average - several more tests showed it hovering around the 66 MB/sec range. Of the other info, I see that UDMA is on which I understand is good, but if there is something else there that I should fix I don't see it.
I know that my computer can handle these tasks (at least the vmware stuff) without such a significant interface slowdown because in XP I did it with less RAM than I have now. Is this just the way that the linux kernel scheduler fails to account for UI needs?
We are graphing various system parameters using Cacti. One of our graphs shows hard drive reads and writes. A question came up: why do we need this graph?
View 3 Replies View RelatedIs there a way under linux to find out directory with frequent writes and/or deletes?
I'm using Ubuntu and recently bought SSD. I moved /tmp to ramdisk and did some other tweaks to avoid wear. But I was wondering if there's a way to pinpoint hotspots in filesystem where files are often written. For example webserver's log directory with many appends every minute or user's download directory where he downloads gigabytes of stuff only to be moved elsewhere soon after finishing.
I came across inotify which could probably do the trick but it seems it'd require lot of scripting which I'm not very familiar with
System spec:
Core 2 Quad, Q6600, 2.4GHz OC'd to 3GHz
Asus Rampage Formula m/b
2x WD RE2 500GB HDDs ("linux boot" and "winxp boot")
1x Seagate Barracuda HDD ("boneyard")
4GB DDR2-800 RAM
Ubuntu 10.04 LTS
I'm having a really annoying problem with disc activity on my desktop system. Basically, if anything is writing a large amount of data to the hard drive (say, 10MB or over), the machine basically freezes solid. The mouse goes jittery (you move it and it takes a second then moves in one big leap).
For instance, if I try to image a USB hard drive to a file:
# dd if=/dev/sdh of=usbdrive_dump bs=1G
Effectively this works in two portions: it reads 1GB of data to RAM, then blats it out into a file. The machine is perfectly responsive while the USB drive is getting thrashed, but locks solid when the internal SATA drives are in use. Writing to USB HDDs doesn't seem to have the same effect -- I can copy 1GB files to/from them all day long and the machine is perfectly happy.
I hav Debian Sqeeze, and not knowing what I did, it suddenly starts to consider all pressing of e key as 0128. Also some other key, which I don't know currently. I use different layout, however it happens on others too.
View 2 Replies View RelatedI'm working on a project using CentOs 5.3 that uses a solid state drive (SSD) as the boot device. It is desired to configure it such that writes do not typically occur run-time but configuration files can be saved. There are 2 reasons we do not want writes to occur run-time. 1) Writes will wear out a SSD over time. 2) A system disruption during a write can cause a file system error.
View 3 Replies View RelatedI have Fedora installed on a netbook. I customarily mount several NFS shares on this machine, from both a desktop system running F11 and a small server running FreeBSD. On the server side the shares are write-enabled. On the server side the shares are write-enabled. In the past this has worked fine.
However since upgrading to F12, my configuration no longer works as before. Reading from the NFS shares is no problem, but as soon as I try to write to one, either in Nautilus or from any other program, including on the cmd line, all hell breaks lose. Nautilus crashes, and I am unable to remount the shares. Usually rebooting the client is the my only recourse.
There are no clues in dmesg on either the client or the server. In terminal trying to remount a "trashed" share I see this:
Code:
$ sudo mount -v venus:/media/disk8 /media./disk8
mount: no type was given - I'll assume nfs because of the colon
mount.nfs: timeout set for Sat Feb 20 17:34:59 2010
mount.nfs: prog 100003, trying vers=3, prot=6
[Code].....
The NFS versions under F11, F12, and FreeBSD are the current ones (all updates applied).