Re: How to catch process that removes files?



lsof will show you currently open files, and of course you can pipe it
through grep. If they aren't already opened, though, it might not
help.

I'd do a complete inventory of the files that get deleted, and then
check the permissions on all of them. That might give you some clues.

You might also check your cron jobs. rgrep through the /etc/cron*
directories and see if any of the missing filenames are there.

Another question is, how often does it happen? Is it regular or
random?

You might also install tiger and see if it finds anything. And, of
course, install logwatch and check its messages daily. And make sure
you're getting the mail for root so you can see any warnings. And grep
through your logs in /var/log.

Let us know if you find the culprit.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx



Relevant Pages

  • Re: Tool for document management
    ... to search my archives of material I have written in the past, ... inability to make use of grep in searching my archives. ... file system for document storage, when, as the calendar rolled over ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)
  • Re: OpenGL glxgears demo program
    ... cat /var/log/Xorg.0.log | grep EE ... Modify settings or unsubscribe at: ...
    (Ubuntu)
  • Re: Contacts printing
    ... Grep is to search for string within files, how can it do sorting jobs? ... I want to cat all those file into one file and then sort the above entries, ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)
  • Re: What is this in my syslog????????
    ... I will learn how to use grep and see what I can come up with. ... on which I never removed the XP windows system from ... Etch went stable. ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)
  • Re: kernel option to increase max open files
    ... >like these in the sendmail log: ... >So I figure I need to increase the max number of open files available. ... To unsubscribe, ...
    (freebsd-questions)