Hello,

file system was filled up and files were deleled by someone while there still
had processes referencing those deleted files,
the disk space was not released,   the result of du was different from output
of df.
now how to use dtrace to  find the pids that were still referencing those
deleted files ?

# dtrace -n 'io:::start { @files[pid, execname, args[2]->fi_pathname] =
sum(args[0]->b_bcount);} tick-5sec {exit(0);}'

this will find out the processes that have write IO, such as tape backup.
if  cmd of more or tail still were referencing the deleted file,  the above
dtrace could not file the process of more or tail,
if there were no read IO from cmd of more or tail.

so do I still IO provider to trace the process ? how ?

Thanks,

James Yang
Deutsche Bank US
---

This e-mail may contain confidential and/or privileged information. If you
are not the intended recipient (or have received this e-mail in error)
please notify the sender immediately and destroy this e-mail. Any
unauthorized copying, disclosure or distribution of the material in this
e-mail is strictly forbidden.
_______________________________________________
dtrace-discuss mailing list
dtrace-discuss@opensolaris.org

Reply via email to