paperlined.org
rosetta_stone > os
document updated 1 year, 3 months ago, on Feb 19, 2023

OS-wide monitoring (in Linux)

Ways to do something like strace, but for every process on a server.

files being changed

man inotifywait

Wikipedia 'inotify'

Note that it's pretty easy to get the error message "upper limit on inotify watches reached", especially if you try to watch all the files on the system.

processes being created

TCP connections being made

general eBPF content