On Sun, 2007-04-01 at 18:27 +0200, Tomas M wrote: > I was asking for similar feature in the past as well. > If your problem is the same like mine, you'd be using copy-on-read > feature which would copy-up all files where atime is updated. > > I think you simply need a log of files which are open/read. > > This kernel module will do the job for you: > ftp://ftp.slax.org/source/slax/kernel/2.6.20/src-core/probe.tar.bz2 > > Make sure to enable kprobes in your kernel configuration. > > After the module is loaded, you'll find a log of all opened/read files > in syslog. > > This module has been written by Junjiro Okajima for me personally, I > hope he won't mind I'm sharing it.
Yeah, this is exactly what I need. Unfortunately, it looks like this module requires 2.6.20? I am using 2.6.16, which apparently lacks 'symbol_name' in the kprobe struct. Any way to make this module work on an older kernel? Thanks, James ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
