Re: FileSystem Filter Driver

Abhishek Agrawal (abhishek@abhishek.agrawal.name)
23 Apr 2003 17:41:02 +0530


On Wed, 2003-04-23 at 17:17, Michael Knigge wrote:

> Under Windows a pretty well-known filter driver is FileMon at
> www.sysinternals.com. Thex also have a Linux version but (ahhh)
> without Source (the source for the Windows-Version is available). The
> Linux-Version can be found at
> http://www.sysinternals.com/linux/utilities/filemon.shtml
>
> I guess what they are doing is similar to the way strace works - but
> I'm not sure. Hmmm, let us strace this thing ;-))))
>
Filemon look like it will not work with kernel 2.5 up.
>From the link...
"it replaces entries in the system call table with pointers to its own
hook functions."

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/