[CentOS] Finding wich files a writen to

[Jorge Fábregas]

On 05/04/2011 12:17 PM, Nicolas Ross wrote:
> iotop can points me to wich process, but that doesn't points me to what 
> files are the culprits... 

A rough way would be to change to the top-level directory where you
suspect the files are being written and perform:

find . -type f -mmin -1     (that would search for all files modified
within the last minute)

A more elegant way would be:

lsof -p PID  (where PID is the process ID...of the process iotop showed you)

HTH,
Jorge