G'Day Mikael, On Wed, Oct 24, 2007 at 02:30:50AM -0700, Mikael Kjerrman wrote: > Hi, > > turns out rwsnoop (included in the toolkit) is able to decode pathname in a > vxfs filesystem. My problem now is that sometimes, that does not work as > expected either. In some cases rwsnoop tells me there are reads and writes > against files that does not exist.
rwsnoop gets its pathname from the in-kernel vnode_t->v_path, which is a cached variable for observability/debugging. There are instances where it can become inaccurate, such as file renames, and there have been updates to improve this in recent versions of Solaris. Check bugs.opensolaris.org and do a text search for "v_path dtrace" (there are a number to check out). The code to rwsnoop, in case anyone is interested, is really showing its age - it was written for Solaris 10 3/05. These days it should use the fsinfo provider, or the fds[] array at least. cheers Brendan -- Brendan [CA, USA] _______________________________________________ dtrace-discuss mailing list [email protected]
