From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id D5495138334 for ; Sat, 27 Jul 2019 05:16:07 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 2DFE3E0898; Sat, 27 Jul 2019 05:16:02 +0000 (UTC) Received: from mail-ot1-x330.google.com (mail-ot1-x330.google.com [IPv6:2607:f8b0:4864:20::330]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id A8183E087E for ; Sat, 27 Jul 2019 05:16:01 +0000 (UTC) Received: by mail-ot1-x330.google.com with SMTP id b7so7275112otl.11 for ; Fri, 26 Jul 2019 22:16:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=JN3SIeyy99U5CXrRbOO98A63ecvVjrlA0swW9PDc2FE=; b=ccJeZIL6jP2ok2Gje8qra2f0+JgNHsw9hNIglJFOkissjoGO8AfGntHaGqZfOp1bRu KEu2swT77uFJGJiMPBXG205g7n4Hi0tWzuVus0ZwCx70i7ArEjbl8QT9jzzjYYQmTbIA ZqeyBOaKRjv0zr4HBOGyQjSPnK/nz4fFFrhI6sHpbZP5eqb+QF/+8WpevhBGdgCQYfjp Ci+K0Wz5nGEcWA+rBIScCwBiyCsdTPji02LHmq2tuaD2jXhn1fbf0TMBoawuoyh0hwCy eAWoghpxkaY6q8D+rJy/2NNCWap0esD6KdmcT1JDj8VUlXOMMuLLEUORNYyw76R86z69 Mjlg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=JN3SIeyy99U5CXrRbOO98A63ecvVjrlA0swW9PDc2FE=; b=Sxq8zAgfWR3hxS4WoDDLSA0qlCJYSTExrEJ9KP4pYJBxk6he3+yIcF53ZzkPT+jBgt 6k+CYwkwST3zYIuGpsim8S6Tq6k1c6c9IXCnT1dNRM88eAzMLbi+5d5iZmAhlKLPgopz UdcsiMhk0OvUY7oBcKu0l2NR8iJsJG0zppCKTIwZgdv6QaKZu0b3DtxlhRXgzVNpiseZ zwlnEt2DQ5L95WO2I4I6zAZ3UAtj083MASe8d15W55LBQ4mBB+M4SKcpIhCMJxb7PETf 2/vvdKd/CCA1kKUYdGcG7fM9ZtxaKuL/14x8OnPA4G3lgd6CtS5xmSWKK8B+KPpYxm/F n53Q== X-Gm-Message-State: APjAAAXa6dOM0mZiaEi3NDIwmi2H/gDDYBEwaCZeDwTqANpX183p1/ak buU7FCvhtOLk8Up/7zySABW4RQA0zk8/6/tSW6lZANKq X-Google-Smtp-Source: APXvYqx7G4weQzGfLXXz2v2KzShL0+zOFowqBqRDBh6yQ6jKagHLrEVd3DbRWiTe6iWwne5fgzItGrUPRYgqGSrezS0= X-Received: by 2002:a9d:7c8f:: with SMTP id q15mr44627730otn.24.1564204560640; Fri, 26 Jul 2019 22:16:00 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 From: Adam Carter Date: Sat, 27 Jul 2019 15:15:49 +1000 Message-ID: Subject: [gentoo-user] find atime vs lsof To: gentoo-user@lists.gentoo.org Content-Type: multipart/alternative; boundary="000000000000316ea7058ea2c198" X-Archives-Salt: e039862f-746a-41c5-b512-6c46120651f5 X-Archives-Hash: 29389c25a025fe7908345a71e43b9648 --000000000000316ea7058ea2c198 Content-Type: text/plain; charset="UTF-8" Some time back i moved from vmware to virtualbox, and am currently wondering if there are some old vmware files i can remove. Virtualbox uses the old vmware disk files, so first i checked via atime and lsof. Why does atime not show all the files that lsof shows were open? Steps were; 1. start vm 2. create and save dummy file in vm 3. run lsof on vm PID 4. shut down mv 5. run find to see which files were accessed # lsof -p 2299 | grep 'VIRTUALS/Win-10-x64' VirtualBo 2299 adam 42u REG 259,2 2453 10095159 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64.vmdk VirtualBo 2299 adam 44u REG 259,2 2146762752 10094024 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s001.vmdk VirtualBo 2299 adam 45u REG 259,2 2146762752 10094071 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s002.vmdk VirtualBo 2299 adam 46u REG 259,2 2146762752 10094011 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s003.vmdk VirtualBo 2299 adam 47u REG 259,2 2146762752 10094108 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s004.vmdk VirtualBo 2299 adam 48u REG 259,2 2146762752 10094076 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s005.vmdk VirtualBo 2299 adam 49u REG 259,2 2146762752 10094127 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s006.vmdk VirtualBo 2299 adam 50u REG 259,2 2146762752 10094050 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s007.vmdk VirtualBo 2299 adam 51u REG 259,2 2146762752 10094087 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s008.vmdk VirtualBo 2299 adam 52u REG 259,2 2146762752 10094031 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s009.vmdk VirtualBo 2299 adam 53u REG 259,2 2146762752 10094102 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s010.vmdk VirtualBo 2299 adam 54u REG 259,2 2146762752 10094021 # find VIRTUALS/Win10-vbox/ -atime -1 -type f VIRTUALS/Win10-vbox/Win10-vbox.vbox VIRTUALS/Win10-vbox/Logs/VBox.log VIRTUALS/Win10-vbox/Logs/VBox.log.1 VIRTUALS/Win10-vbox/Win10-vbox.vbox-prev # --000000000000316ea7058ea2c198 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Some time back i moved from vmware to virtualbox, and= am currently wondering if there are some old vmware files i can remove. Vi= rtualbox uses the old vmware disk files, so first i checked via atime and l= sof.

Why does atime not show all the files that ls= of shows were open?

Steps were;
1. start= vm
2. create and save dummy file in vm
3. run lso= f on vm PID
4. shut down mv
5. run find to see which fi= les were accessed

# lsof -p 2299 | grep 'V= IRTUALS/Win-10-x64'
VirtualBo 2299 adam =C2=A0 42u =C2=A0 =C2=A0 =C2= =A0REG =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 =C2=A0 =C2=A0 = =C2=A0 2453 10095159 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64.vmdk
V= irtualBo 2299 adam =C2=A0 44u =C2=A0 =C2=A0 =C2=A0REG =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 2146762752 10094024 /home/adam/VIRTUALS/Wi= n-10-x64/Windows 7 x64-s001.vmdk
VirtualBo 2299 adam =C2=A0 45u =C2=A0 = =C2=A0 =C2=A0REG =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 2146= 762752 10094071 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s002.vmdk
V= irtualBo 2299 adam =C2=A0 46u =C2=A0 =C2=A0 =C2=A0REG =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 2146762752 10094011 /home/adam/VIRTUALS/Wi= n-10-x64/Windows 7 x64-s003.vmdk
VirtualBo 2299 adam =C2=A0 47u =C2=A0 = =C2=A0 =C2=A0REG =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 2146= 762752 10094108 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s004.vmdk
V= irtualBo 2299 adam =C2=A0 48u =C2=A0 =C2=A0 =C2=A0REG =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 2146762752 10094076 /home/adam/VIRTUALS/Wi= n-10-x64/Windows 7 x64-s005.vmdk
VirtualBo 2299 adam =C2=A0 49u =C2=A0 = =C2=A0 =C2=A0REG =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 2146= 762752 10094127 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s006.vmdk
V= irtualBo 2299 adam =C2=A0 50u =C2=A0 =C2=A0 =C2=A0REG =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 2146762752 10094050 /home/adam/VIRTUALS/Wi= n-10-x64/Windows 7 x64-s007.vmdk
VirtualBo 2299 adam =C2=A0 51u =C2=A0 = =C2=A0 =C2=A0REG =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 2146= 762752 10094087 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s008.vmdk
V= irtualBo 2299 adam =C2=A0 52u =C2=A0 =C2=A0 =C2=A0REG =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 2146762752 10094031 /home/adam/VIRTUALS/Wi= n-10-x64/Windows 7 x64-s009.vmdk
VirtualBo 2299 adam =C2=A0 53u =C2=A0 = =C2=A0 =C2=A0REG =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 2146= 762752 10094102 /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s010.vmdk
V= irtualBo 2299 adam =C2=A0 54u =C2=A0 =C2=A0 =C2=A0REG =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0259,2 2146762752 10094021
<sni= p>

# find VIRTUALS/Win10-vbox/ -atime -1 -type f
VI= RTUALS/Win10-vbox/Win10-vbox.vbox
VIRTUALS/Win10-vbox/Logs/VBox.log
V= IRTUALS/Win10-vbox/Logs/VBox.log.1
VIRTUALS/Win10-vbox/Win10-vbox.vbox-p= rev
#

--000000000000316ea7058ea2c198--