Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a NFS server and a group of systems that involves about 50 machines using it for home directories. I have an intermittent bug where all the files at the top level of my home directory get deleted. How on earth can I track down what's causing this?

root_squash is on. Therefore I suspect a rogue cron job running under my user ID. Is there an easy way to track what file accesses and deletions come from what system, without heavily loading the server being monitored?

share|improve this question
up vote 0 down vote accepted

You might like inotify on the 'homes' folder: when it reports file deletion activity, write down this date and look into nfswatch logs which will tell you who, when, where, and what for :)

I haven't tried it, but believe that's the right path.

share|improve this answer
Sounds promising, will try it. – pjc50 Nov 25 '09 at 10:05
Note that you need to run anything that uses inotify on the server - running it on a client will only capture I/O from that client – James Nov 26 '09 at 23:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.