Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've got a system of 55 workstations that share two NFS mount points on a central server. Recently over the past few days, I've noticed an increasing number of "GETATTR" requests filtering in from the workstations for no apparent reason. I can see these request clearly in a wireshark trace, but I don't know how to trace them down.

Can anybody share advice on how I can debug this problem and trace the generators of these calls?

Update: With trial and error, it turns out the GETATTRS were being caused by preload. For the future, it would still be nice to know how I could determine what process is causing what NFS traffic.

share|improve this question
up vote 1 down vote accepted

There is mention in this google doc (ala Red Hat) of the issue being caused by repeated open/close calls to files. What kind of files are hosted on the share(s) and what kind of activity is being done with them?

share|improve this answer
Turns out the getaddrs were causes by 'preload' touching files every few minutes. – Rich Nov 25 '09 at 18:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.