Paul Furness wrote: > Can anyone give me any pointers to info about monitoring file access on > a linux file server? > > I am fairly easily able to monitor how much space is used, how many > files there are, who owns them and so on, but what I really need is a > log of who accessed what file, the time they did it and how long they > had it open for. > The file systems are shared using nfs and samba, so users could use > either of those methods to access the file. I guess that I could > probably get somewhere by turning up the debug level on the daemons, but > I feel that would put a big load on the server and log a lot of other > information that I don't want. Logging all file access would probably impose a significant load however you do it. If the daemons provide an option to log file accesses, that's likely to be the best solution. Otherwise, I suspect that the alternative is to modify the kernel, i.e. add some printk() calls to the filesystem code. -- Glynn Clements <glynn.clements@xxxxxxxxxx> - : send the line "unsubscribe linux-admin" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html