http://bugzilla.novell.com/show_bug.cgi?id=545024 http://bugzilla.novell.com/show_bug.cgi?id=545024#c30 --- Comment #30 from Jan Kara <jack@novell.com> 2009-12-01 12:17:10 UTC --- Sadly, it's quite tricky to find out which application does the writes. So far the best we can do is to find out which files the writes happened to and then guess which process might be guilty. We can try it in this case and see whether we can see something. To do this, you should capture the blocktrace when the machine should be idle on a separate harddrive (or USB stick or to tmpfs in memory). For example for filesystem on /dev/sda1 do: mkdir /tmp/fs mount -t tmpfs none /tmp/fs blktrace -d /dev/sda1 -D /tmp/fs <wait some time and break blktrace> Now process the blktrace output by: blkparse -i sda1 -D /tmp/fs -f "%a %S+%n %C\n" | grep "^D" | cut -d ' ' -f 2,3
/tmp/blktrace-parsed
Download my mapping program (I suppose you have ext2/3/4 filesystem) from http://beta.suse.com/private/jack/defrag/ext3remapper.tar.gz Untar it and run make (you will need a development version of libext2fs which is packaged in openSUSE, otherwise it has no dependencies). Run: e2block2map -t -o /tmp/blktrace-mapped /tmp/blktrace-parsed /dev/sda1 It will crunch for some time (a few minutes) and then write in /tmp/blktrace-mapped which files were read / written. You can then attach the file here. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.