04-25-2002
Is the filename always the same when this happens?
If so, you could write a script that loops and waits for the file to be generated and then fires off lsof checking the file and the associated process (and other fine information).
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Hello,
does anyone have a script that can check the contents of the /tmp directory and for example e-mail the directory content if anything other than session files are present?
Maybe there are better ways to monitor suspicous /tmp and /var/tmp activity, if so I'm listening :) (1 Reply)
Discussion started by: jamesbond
1 Replies
2. Solaris
Hi All,
I have some threaded applications. Design of the application is such that one thread will decode some data and put it in data structure, And main thread will wait for another child threads pick up the decoded data. The data will be large decoded files.
Once decoded data is picked by... (1 Reply)
Discussion started by: patilmuragesh
1 Replies
3. AIX
Hi,
Sometimes when I want to unmount some filesystem I get "The requested resource is busy." error.
In such a case I try to find and kill process that uses that filesystem. I do that on random.
Is there a right way to find whitch prosesses use filesystem resource at given time ?
thanks... (1 Reply)
Discussion started by: vilius
1 Replies
4. UNIX for Advanced & Expert Users
Hi,
I am using diff command to check difference between two files.Both files are very big and when i execute this command /var temp space is filled up almost 99%.
Can any one please tell me is there any way i can specify directory name which has more space so that diff can use that dir for... (2 Replies)
Discussion started by: ukatru
2 Replies
5. Solaris
what's the impact if I change /var/tmp's permission into 750? (7 Replies)
Discussion started by: a2156z
7 Replies
6. Shell Programming and Scripting
Does anyone know of a way to redirect the ksh default of processing data in /tmp to another file system or / something else?
My ksh script is parsing large DB files and it keeps filling up /tmp on the root disk.
I have a 1 Tb disk with most of its space.
How do I re-direct the /tmp ksh... (6 Replies)
Discussion started by: cchelten
6 Replies
7. Emergency UNIX and Linux Support
Hi All,
I have Solaris-10 machine. Yesterday I patched it with Solaris-10 patch Cluster. Since then glance software is filling up /var/core continuously. In every few minutes, it will fill /var to 100%.
Glance runs through /etc/init.d/mwa and I already stopped it, still core files are... (15 Replies)
Discussion started by: solaris_1977
15 Replies
8. Emergency UNIX and Linux Support
I have Solaris-11 non-global zone running under Solaris-11 global zone. Every few minutes, this message is getting in /var/adm/message of non-global zone
Aug 31 08:31:53 zonnjc002dbp01 statd: statd: cannot talk to statd at NAS1, RPC: Timed out(5)
NAS1 is already mounted as NFS and working... (2 Replies)
Discussion started by: solaris_1977
2 Replies
9. HP-UX
Hi,
To clear up the filesystem, I archived /var/tmp (forgot that this directory was important for crontab), and then deleted the directory itself.
After that there were problems like crontab not accessible, certain ftp commands like mget not functioning, and worst there were some scripts which... (4 Replies)
Discussion started by: anaigini45
4 Replies
10. Shell Programming and Scripting
I am trying to create a script that checks if my VPN connection is up and running...
Everything seems to work as except but for some reason, the script fills up my /var/log/auth.log with the below information
Dec 13 01:07:44 debian sudo: soichiro : TTY=pts/0 ; PWD=/home/soichiro/Desktop ;... (5 Replies)
Discussion started by: soichiro
5 Replies
LEARN ABOUT DEBIAN
checkrestart
checkrestart(1) debian-goodies checkrestart(1)
NAME
checkrestart - check which processes need to be restarted after an upgrade
SYNOPSIS
checkrestart [ -hvpa ] [ -b blacklist_file ] [ -i package_name ]
DESCRIPTION
The checkrestart program tries to determine if there are processes in the system that need to be restarted after a system upgrade. This is
necessary since an upgrade will usually bring new system libraries and running processes will be still using the old versions of the
libraries. In stable Debian GNU/Linux systems this is typically needed to eliminate a system exposure to a vulnerability which might have
been fixed by upgrading a library which that process makes use of.
Consequently, checkrestart is sometimes used as an audit tool to find outdated versions of libraries in use, particularly after security
upgrades. Administrators should not, however, rely on its output completely (see BUGS below).
This script needs to run as root in order to obtain the information it needs for analysis.
OPTIONS
-h,--help
Show the program help and exit.
-v,--verbose
Generate detailed output. This output includes the list of all processes found using deleted files or descriptors as well as the
deleted files and descriptors found.
-p,--package
Only process deleted files that belong to a package, ignoring deleted files which do not have an associated package in the package
system.
-a,--all
Process all deleted files regardless of location. This makes the program analyse deleted files even if they would be discarded
because they are located in locations, such as /tmp , which are known to produce false positives. It will take preceded if used
simultaneously with the -p option.
-b file,--blacklist=file
Read a blacklist of regular expressions from file. Any files matching the patterns will be ignored.
-i name,--ignore=name
Ignore services that are associated to the package name provided in name.
EXIT STATUS
The program will exit with error (1) if a non-root user tries to run it. Otherwise, it will always exit with error status 0.
BUGS
This program might fail if the output of the lsof utility changes since it depends on it to detect which deleted files are used by pro-
cesses. It might also output some false positives depending on the processes' behaviour since it does not check yet if the (deleted) files
in use are really libraries.
If you find a false positive in checkrestart please provide the following information when submitting a bug report:
-- The output of checkrestart using the -v (verbose) option.
-- The output of running the following command as root:
lsof | egrep 'delete|DEL|path inode'
Checkrestart is also sensitive to the kernel version in use. And might fail to work with newer (or older) versions.
A rewrite to make it less dependent on lsof could improve this, however.
SEE ALSO
lsof(8)
AUTHOR
checkrestart was written by Matt Zimmerman for the Debian GNU/Linux distribution.
COPYRIGHT AND LICENCE
Copyright (C) 2001 Matt Zimmerman <mdz@debian.org> Copyright (C) 2007,2010-2011 Javier Fernandez-Sanguino <jfs@debian.org>
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2, or (at your option) any later version.
On Debian systems, a copy of the GNU General Public License may be found in /usr/share/common-licenses/GPL.
debian-goodies December 19 2006 checkrestart(1)