topic Re: missing files in Operating System - HP-UX

missing files

aruns_s — Thu, 05 Jun 2008 03:32:17 GMT

Hi gurus,
one of my customer is complaining that few files inside his directory are vanishing daily. For eg., /test is the filesystem and there were supposed to be a file for each day.but, unfortunatelt, old files are getting removed daily.Obviously, this would hv done by a housekeeping script or by some other jobs. My question is as a unix admin, how can I trace this directory? I mean, is there any way to check which are the processes accessing this directory or any other means to identify which application/process is removing the files?Thank you

Re: missing files

Jeeshan — Thu, 05 Jun 2008 03:47:41 GMT

you can use lsof or tusc to trace like this.

Re: missing files

Hemmetter — Thu, 05 Jun 2008 04:07:10 GMT

Hi,

first you should check when do the files go away, once a day or more often?

Then relate the times with cron/at/batch jobs, especially of the affected user.

It may be also triggered via network origined by another host. ( ftp/scp / NFS /cifs ) Monitor network connections at that time.

Ask you Application support about appl. logic and process dependencies, process flows etc.

Then check each script if it works with the directory in question.

rgds
HGH

Re: missing files

Steven Schweda — Thu, 05 Jun 2008 04:43:27 GMT

"man 5 audit"?

[...]
delete Log all deletions of objects (files, directories,
other objects), [...]

modaccess Log all modifications other than DAC, including
chdir(2), chroot(2), link(2), lockf64(2),
newgrp(1), rename(2), setgid(2), setgroups(2),
setresgid(2), setresuid(2), setuid(2), shmctl(2),
shmdt(2), and unlink(2).
[...]