fatrace
fatrace copied to clipboard
report system wide file access events
## Feature Request - When you use `--process-only` or `-P` `fatrace` outputs only the process name ## Advantages & User Goals - Shorter more readable output, when one is mostly...
## Feature Request - When stating the `-u`, `--user` argument there's an additional column which shows from which user the file event originated ## Related - With --timestamp and --user...
- 👍 It is very cool per se that one can limit the scope of what storage device is monitored. - 👍 `--current-mount` is a nice shortcut if you current...
## Feature Request - When using the `--timestamp` option it would be great if one could customize the format. - Ideally a well known/supported syntax, such as the one of...
## Feature Request - Have the possibility to change to column order and column widths of the output with an argument like this: `--columns "t u p10.(P) e f30.30"` ##...
probably already know this from the failing test but, fanotify_test_fid returns -EXDEV on btrfs https://github.com/torvalds/linux/blob/7d6beb71da3cc033649d641e1e608713b8220290/fs/notify/fanotify/fanotify_user.c#L1075 the older version without FAN_REPORT_FID was working until I upgraded the os ``` [root@pro ohsix]#...
`fatrace` doesn't work on ZFS mounts (except `-c` mode) because the `mnt_fsname` is not a device. A few examples of `mount` output for ZFS filesystems: ``` bpool/BOOT/ubuntu_lkdzni on /boot type...
I'm trying to identify IO issues on the path where I have the mail files (/var/spool/vmail), a filesystem is created for this specific purpose; if i explore the path thru...
Running `fatrace -C touch` as root on kernel 6.1.46: ``` fatrace: Failed to add watch for /: No such device ``` Running `strace fatrace` I can better see the error:...