Hello....here is an odd problem for me. I have a Centos 3 server which has software installed that creates its pid files in the /tmp directory. I am not sure which script on the server is being run that completely clears the /tmp directory except for directories starting with periods. Can you guys think of a way for me to monitor these pid files and immediately log which process deleted these files as soon as it happens?
thx...Bob.
Bob Lewkowitz wrote:
Hello....here is an odd problem for me. I have a Centos 3 server which has software installed that creates its pid files in the /tmp directory. I am not sure which script on the server is being run that completely clears the /tmp directory except for directories starting with periods. Can you guys think of a way for me to monitor these pid files and immediately log which process deleted these files as soon as it happens?
thx...Bob.
Have a look at tmpwatch in /etc/cron.daily/tmpwatch
-Mike
On Sat, 2006-02-11 at 02:01 -0500, Bob Lewkowitz wrote:
Hello....here is an odd problem for me. I have a Centos 3 server which has software installed that creates its pid files in the /tmp directory. I am not sure which script on the server is being run that completely clears the /tmp directory except for directories starting with periods. Can you guys think of a way for me to monitor these pid files and immediately log which process deleted these files as soon as it happens?
You really should be creating them under /var/run ... that's where they normally go.
Paul
-
Bob Lewkowitz -
Michael Best -
Paul