Today I will talk about auditd, a very powerfull tool to debug anything you need in a linux platform. In this very case, I had a problem with a mail server using all IO available. ‘iostat’ command told me it was reads ops that saturate it. A mail server has many process, so using « strace » is not helpful here. I choose to use auditd.

Continuer la lecture de Using auditd to troubleshoot file reads →