This topic created in 1264 days ago, the information mentioned may be changed or developed.
 |
tensorzhangMay 19, 2023
1
watchdog ？
|
 |
aloxafMay 19, 2023
2
fanotify ？
|
 |
garychenlinMay 19, 2023
3
audit ？
|
 |
defunct9May 19, 2023
4
go 写个 inotify
|
 |
barathrumMay 19, 2023
5
systemtap 或 eBPF 之类的应该能做吧
|
 |
6
搜了一下，bcc 的示例里已经有相关的了： https://github.com/iovisor/bcc/blob/master/tools/filetop.py
ebpf + kprobe ，要定制化自己简单改下就行了。 |
1 |
julyclydeMay 20, 2023
7
进程视角：strace
文件被动视角：inotify 开放视角：systemtap 、eBPF 之类的 |
Select Language