====== Mac OS X でファイルアクセスをモニタリングする ======
Mac OS X でプロセスがアクセスしているファイルパスを調べるには opensnoop を利用する。
<code>
$ sudo opensnoop
Password:
  UID    PID COMM          FD PATH                 
    0     57 mds           11 .                    
  502  99184 soffice       46 .                    
  502  99184 soffice       46 .                    
   89  59871 mdworker       4 /.vol/16777219/6037930/mdworker/..namedfork/rsrc 
   89  59871 mdworker       4 /.vol/16777219/6037930/mdworker/..namedfork/rsrc 
   89  59871 mdworker       4 /.vol/16777219/6037930/mdworker/..namedfork/rsrc 
   89  59871 mdworker       3 /dev/dtracehelper    
   89  59871 mdworker       3 /dev/autofs_nowait   
   89  59871 mdworker      -1 /var/empty/.CFUserTextEncoding 
   89  59871 mdworker       3 /dev/autofs_nowait   
   89  59871 mdworker      -1 /var/empty/.CFUserTextEncoding 
   89  59871 mdworker       5 /var/folders/zz/zyxvpxvq6csfxvn_n00000b400002s/C//sandbox-cache.db 
    0     26 cfprefsd      -1 /Library/Preferences/com.apple.SpotlightServer.plist 
    0     26 cfprefsd      -1 /Library/Preferences/com.apple.SpotlightServer.plist 
   89  59871 mdworker      -1 /Library/Sandbox/Profiles/mdworker.sb 
   89  59871 mdworker      -1 /System/Library/Sandbox/Profiles/mdworker.sb 
   89  59871 mdworker       4 /usr/share/sandbox/mdworker.sb 
    0     26 cfprefsd      -1 /Library/Preferences/mdworker.plist 
    0     26 cfprefsd      -1 /Library/Preferences/mdworker.plist 
    0     57 mds           11 .                    
    0     26 cfprefsd      -1 /Library/Preferences/com.apple.spotlight.plist 
    0     26 cfprefsd      -1 /Library/Preferences/com.apple.spotlight.plist
</code>