missing files

[aruns_s]

Hi gurus,
one of my customer is complaining that few files inside his directory are vanishing daily. For eg., /test is the filesystem and there were supposed to be a file for each day.but, unfortunatelt, old files are getting removed daily.Obviously, this would hv done by a housekeeping script or by some other jobs. My question is as a unix admin, how can I trace this directory? I mean, is there any way to check which are the processes accessing this directory or any other means to identify which application/process is removing the files?Thank you

[Jeeshan]

you can use lsof or tusc to trace like this.

[Hemmetter]

Hi,

first you should check when do the files go away, once a day or more often?

Then relate the times with cron/at/batch jobs, especially of the affected user.

It may be also triggered via network origined by another host. ( ftp/scp / NFS /cifs ) Monitor network connections at that time.

Ask you Application support about appl. logic and process dependencies, process flows etc.

Then check each script if it works with the directory in question.

rgds
HGH

[Steven Schweda]

"man 5 audit"?

[...]
delete Log all deletions of objects (files, directories,
other objects), [...]

modaccess Log all modifications other than DAC, including
chdir(2), chroot(2), link(2), lockf64(2),
newgrp(1), rename(2), setgid(2), setgroups(2),
setresgid(2), setresuid(2), setuid(2), shmctl(2),
shmdt(2), and unlink(2).
[...]