Difference between pages "I/O sniffing" and "TcpDump"

From Linuxintro
(Difference between pages)
imported>ThorstenStaerk
 
imported>ThorstenStaerk
(Redirected page to Tcpdump)
 
Line 1: Line 1:
You can do I/O sniffing using the command blktrace. blktrace will show you every request that goes to the disk.
+
#REDIRECT [[Tcpdump]]
 
 
Example:
 
 
 
# blktrace -d /dev/sdg -o - | blkparse -i -
 
[...]
 
  <abbr title="device (major/minor number)">8,96</abbr>  <abbr title="processor">7</abbr>      <abbr title="sequence number">106</abbr>    <abbr title="timestamp">0.373952974</abbr> <abbr title="PID">11364</abbr>  <abbr title="Action/Event">D</abbr>  <abbr title="RWBS (D) field">W</abbr> <abbr title="starting block + blocks">0 + 8</abbr> <abbr title="process">[kworker/7:2]</abbr>
 
  8,96  7      107    0.374456639    47  C  W 0 + 8 [0]
 
 
 
 
 
The RWBS(D) field can be a combination of
 
R : Read
 
W : Write
 
D : Block discard
 
B : Barrier operation
 
S : Synchronous operations
 
 
 
= See also =
 
* [http://linux.die.net/man/8/blktrace blktrace man page]
 
* [http://linux.die.net/man/1/blkparse blkparse man page]
 
* http://unix.stackexchange.com/questions/105610/how-does-blktrace-work
 
 
 
[[Category:geeky]][[Category:analysis]]
 

Latest revision as of 17:13, 17 December 2013

Redirect to: