I have a NFS server and a group of systems that involves about 50 machines using it for home directories. I have an intermittent bug where all the files at the top level of my home directory get deleted. How on earth can I track down what's causing this?
root_squash is on. Therefore I suspect a rogue cron job running under my user ID. Is there an easy way to track what file accesses and deletions come from what system, without heavily loading the server being monitored?
You might like
inotify
on the 'homes' folder: when it reports file deletion activity, write down this date and look intonfswatch
logs which will tell you who, when, where, and what for :)I haven't tried it, but believe that's the right path.