Have you tried the iosnoop demo in /usr/demo/dtrace?
Something like this might be close to what you're looking for: dtrace -s /usr/demo/dtrace/iosnoop.d | grep W Orvar Korvar wrote: > Sometimes I would like to know which files have been altered, for instance > when installing programs (then I would know which files for removal of > program), or virus. Ideally I would like a window that shows; all files that > are written to. I suspect I could do this with DTrace? Or is there a program > that shows all files? > > > This message posted from opensolaris.org > _______________________________________________ > opensolaris-discuss mailing list > [email protected] > _______________________________________________ opensolaris-discuss mailing list [email protected]
