Re: File Monitoring under Mac OS X
Re: File Monitoring under Mac OS X
- Subject: Re: File Monitoring under Mac OS X
- From: Garth Cummings <email@hidden>
- Date: Wed, 16 Jun 2004 16:48:09 -0700
Hi Krishna,
On Jun 16, 2004, at 4:19 PM, Krishna Monian wrote:
>
Hi All,
>
>
I am currently trying to write a file logger, which
>
logs every single file access (read, write, delete) on
>
a specified volume.
>
>
Could someone brief me on what would the best way be
>
to go about doing this. Would it have to be in kernel
>
mode or can it be done in user mode?
>
>
Is it in anyway similar to the SampleFilterScheme
>
example posted on Apple's website.
>
http://developer.apple.com/samplecode/SampleFilterScheme/
>
SampleFilterScheme.html
No, because at that layer you only know that so many bytes are being
read from or written to the disk starting at a given block. There's no
file or volume information at the filter scheme layer.
How about using ktrace(1)?
>
>
Thanks
>
Krishna Monian
>
__________________________________________________________________
Garth Cummings
Apple Developer Technical Support email@hidden
The Platform. The People. The Possibilities.
Connect at WWDC 2004.
http://developer.apple.com/wwdc
[demime 0.98b removed an attachment of type application/pkcs7-signature which had a name of smime.p7s]
_______________________________________________
darwin-kernel mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/darwin-kernel
Do not post admin requests to the list. They will be ignored.