Mac OS X でファイルアクセスをモニタリングする
Mac OS X でプロセスがアクセスしているファイルパスを調べるには opensnoop を利用する。
$ sudo opensnoop
Password:
UID PID COMM FD PATH
0 57 mds 11 .
502 99184 soffice 46 .
502 99184 soffice 46 .
89 59871 mdworker 4 /.vol/16777219/6037930/mdworker/..namedfork/rsrc
89 59871 mdworker 4 /.vol/16777219/6037930/mdworker/..namedfork/rsrc
89 59871 mdworker 4 /.vol/16777219/6037930/mdworker/..namedfork/rsrc
89 59871 mdworker 3 /dev/dtracehelper
89 59871 mdworker 3 /dev/autofs_nowait
89 59871 mdworker -1 /var/empty/.CFUserTextEncoding
89 59871 mdworker 3 /dev/autofs_nowait
89 59871 mdworker -1 /var/empty/.CFUserTextEncoding
89 59871 mdworker 5 /var/folders/zz/zyxvpxvq6csfxvn_n00000b400002s/C//sandbox-cache.db
0 26 cfprefsd -1 /Library/Preferences/com.apple.SpotlightServer.plist
0 26 cfprefsd -1 /Library/Preferences/com.apple.SpotlightServer.plist
89 59871 mdworker -1 /Library/Sandbox/Profiles/mdworker.sb
89 59871 mdworker -1 /System/Library/Sandbox/Profiles/mdworker.sb
89 59871 mdworker 4 /usr/share/sandbox/mdworker.sb
0 26 cfprefsd -1 /Library/Preferences/mdworker.plist
0 26 cfprefsd -1 /Library/Preferences/mdworker.plist
0 57 mds 11 .
0 26 cfprefsd -1 /Library/Preferences/com.apple.spotlight.plist
0 26 cfprefsd -1 /Library/Preferences/com.apple.spotlight.plist