Hello....here is an odd problem for me. I have a Centos 3 server which has software installed that creates its pid files in the /tmp directory. I am not sure which script on the server is being run that completely clears the /tmp directory except for directories starting with periods. Can you guys think of a way for me to monitor these pid files and immediately log which process deleted these files as soon as it happens? thx...Bob.
Bob Lewkowitz wrote:> Hello....here is an odd problem for me. I have a Centos 3 server which > has software installed that creates its pid files in the /tmp > directory. I am not sure which script on the server is being run that > completely clears the /tmp directory except for directories starting > with periods. Can you guys think of a way for me to monitor these pid > files and immediately log which process deleted these files as soon as > it happens? > > thx...Bob.Have a look at tmpwatch in /etc/cron.daily/tmpwatch -Mike
On Sat, 2006-02-11 at 02:01 -0500, Bob Lewkowitz wrote:> Hello....here is an odd problem for me. I have a Centos 3 server which > has software installed that creates its pid files in the /tmp > directory. I am not sure which script on the server is being run that > completely clears the /tmp directory except for directories starting > with periods. Can you guys think of a way for me to monitor these pid > files and immediately log which process deleted these files as soon as > it happens?You really should be creating them under /var/run ... that's where they normally go. Paul