From: Greg Freemyer Subject: Re: A stackable filesystem to trace low level filesystem operations Date: Tue, 3 Jan 2012 16:45:27 -0500 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Cc: linux-ext4@vger.kernel.org To: Sushil Mantri Return-path: Received: from mail-iy0-f174.google.com ([209.85.210.174]:60727 "EHLO mail-iy0-f174.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754125Ab2ACVp7 (ORCPT ); Tue, 3 Jan 2012 16:45:59 -0500 Received: by iaeh11 with SMTP id h11so31459806iae.19 for ; Tue, 03 Jan 2012 13:45:58 -0800 (PST) In-Reply-To: Sender: linux-ext4-owner@vger.kernel.org List-ID: On Tue, Jan 3, 2012 at 4:20 PM, Sushil Mantri wrote: > Hi All, > > Sorry but this isn't a ext4 specific question but a general filesystem question. > > I am looking for a way to track filesystem level operation like > operation(read/write), filename, offset, size of read/write, pid of > the requesting process. The goal of my project is to collect such > traces and understand access usage of directories and more. I would > like to filter other operation like open,close, etc and requests to > procfs, etc. There was a stackable file system earlier called Tracefs. > It isn't supported anymore though. The original paper can be found > here: filesystems.org/docs/tracefs-fast04/tracefs.ps > > Can you please suggest me what is the best option i have. I am > currently looking at SystemTap. > > Thanks, > Sushil I think you're looking for either inotify or fanotify. You might have better luck asking in the vfs mailinglist. (linux-fsdevel@vger.kernel.org) Greg