Is there a Linux command to monitor read and writes over a period of time? with what files were accessed and how much data was written.
iotop maybe?
this post was submitted on 27 Aug 2023
51 points (100.0% liked)
Linux
8323 readers
213 users here now
Welcome to c/linux!
Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!
Rules:
-
Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.
-
Be respectful: Treat fellow community members with respect and courtesy.
-
Quality over quantity: Share informative and thought-provoking content.
-
No spam or self-promotion: Avoid excessive self-promotion or spamming.
-
No NSFW adult content
-
Follow general lemmy guidelines.
founded 2 years ago
MODERATORS
Iotop, lsof
They won't do exactly what you want but will get you partway there
For read/write ops or disk usage over time, I would usually use a monitoring system like Prometheus and Grafana.
When you start talking about what specific files are accessed and when, that's usually up to an intrusion detection system (or IDS). I don't have good recommendations for that unfortunately.
sysdig can monitor and display file IO usage.
See this page for some examples: https://github.com/draios/sysdig/wiki/Sysdig%20Examples#disk-io
Something like iotop -Pao (real-time) or iotop -obd (batch) ought to do the job. I don't know if it includes writes to non-physical devices like tmpfs.
Some other commands you might find interesting: iosnoop, fatrace, pidstat, blktrace.