i excuted filemon with filemon -u -o /tmp/filemon.out -O all;sleep 60; trcstop .
everything is ok, but i only get PID for filenames in Most Active Files.
is there any different flags i need to use to get filenames?
For some files you only get the PID of some processes related to files in the "Most Active Files" list, but if you scroll down to "Most Active Files Process-Wise" you will find those PIDs again and a column with the filename.
For files where you only got the i-node and the device, let's say /dev/hd2 (/usr), you can do the following:
find /usr -inum <i-node>
zaxxon, thanx for the reply.
but i don't get "Most Active Files Process-Wise" part...
only i get is like "pid=2349535_fd=3".
is there other flags that i can use? or is that a bug?
Hm, I used the same command as you did... "-O all" which should work ...
I tried it on following box:
# oslevel -s
7100-01-01-1141
I just saw that "Most Active Files Process-Wise" is also mentioned in the man page.