Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a NFS server and a group of systems that involves about 50 machines using it for home directories. I have an intermittent bug where all the files at the top level of my home directory get deleted. How on earth can I track down what's causing this?

root_squash is on. Therefore I suspect a rogue cron job running under my user ID. Is there an easy way to track what file accesses and deletions come from what system, without heavily loading the server being monitored?

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

You might like inotify on the 'homes' folder: when it reports file deletion activity, write down this date and look into nfswatch logs which will tell you who, when, where, and what for :)

I haven't tried it, but believe that's the right path.

share|improve this answer
    
Sounds promising, will try it. –  pjc50 Nov 25 '09 at 10:05
    
Note that you need to run anything that uses inotify on the server - running it on a client will only capture I/O from that client –  James Nov 26 '09 at 23:57
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.