Is it possible to monitor all write access to the filesystem of all process under linux?
I've some different mounted filesystems. A lot of them are tempfs
.
I'm interested in all writes to the root filesystem except the tempfs, devtmpfs
etc.
I'm looking for something that will output: <PID xy> write n Bytes to /targe/filepath ...
.
What monitoring tool can list all this write syscalls? Can they be filtered by mount points?
strace
is the most complete solution but it is the more complexe as well and probably can't be use system wide.inotifywait -mr /