I have written a dtrace script that uses the fds[] construct and it works just great on my 11/06 release of Solaris 10. But the system where I really need this to work is on the 03/05 release. Is there anyway to get the fds[] functionality on the 03/05 release? I am attempting to trigger on modifications to certain files in two given directories in a UFS filesystem. They are being modified by entities unknown and I want to know who, what, when, and why they did it. I have tried using the ufs_iupdat module and am having troubles getting that to trigger properly. Probably user error. thanks, Richard
On 8/27/07, Richard Robinson <Richard.Robinson at sun.com> wrote:> I have written a dtrace script that uses the fds[] construct and it > works just great on my 11/06 release of Solaris 10. But the system > where I really need this to work is on the 03/05 release. Is there > anyway to get the fds[] functionality on the 03/05 release?According to http://sunsolve.sun.com/search/document.do?assetkey=1-21-118833-36-1 it should be available with 118822-19 or later. 6267695 DTrace should provide a fds[] array for file descriptor information Mike -- Mike Gerdts http://mgerdts.blogspot.com/
On 8/28/07, Richard Robinson <Richard.Robinson at sun.com> wrote:> I have written a dtrace script that uses the fds[] construct and it > works just great on my 11/06 release of Solaris 10. But the system > where I really need this to work is on the 03/05 release. Is there > anyway to get the fds[] functionality on the 03/05 release? > I am attempting to trigger on modifications to certain files in two > given directories in a UFS filesystem. They are being modified by > entities unknown and I want to know who, what, when, and why they did > it. I have tried using the ufs_iupdat module and am having troubles > getting that to trigger properly. Probably user error.Richard, Would io:::start be of help? -- Just me, Wire ... Blog: <prstat.blogspot.com>
On Mon, Aug 27, 2007 at 03:42:47PM -0700, Richard Robinson wrote:> I have written a dtrace script that uses the fds[] construct and it > works just great on my 11/06 release of Solaris 10. But the system > where I really need this to work is on the 03/05 release. Is there > anyway to get the fds[] functionality on the 03/05 release? > I am attempting to trigger on modifications to certain files in two > given directories in a UFS filesystem. They are being modified by > entities unknown and I want to know who, what, when, and why they did > it. I have tried using the ufs_iupdat module and am having troubles > getting that to trigger properly. Probably user error.Hi Richard, You should be able to get the same functionality of fds[] by doing something like this by hand: curthread->t_procp->p_user.u_finfo.fi_list[N].uf_file->f_vnode->v_path Adam -- Adam Leventhal, FishWorks http://blogs.sun.com/ahl