<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" dir="ltr" text="#000000"> dan wrote: <blockquote cite="mid42A74B10.3050701@hostinthebox.net" type="cite" dir="ltr">Andy Pieters wrote: <blockquote type="cite">Hi all Those of you who have had the punishment of maintaining workstations with m$ on it might have heard, or even used filemon (from sysinternals). It hooks itself on the kernel and keeps an eye on what application accesses what file. Is anyone aware of such an utlity for Linux? No fancy gui needed, plain old cli will suffice. Basically what I want to do is launch the app, then run another program and see what files are being opened by that program. Kind regards Andy </blockquote> ANdy - I use 'lsof' quite often, and it does the same thing, almost, as filemon. It simply lists open files. I'm not sure if it is capable of doing a continuous list, however - anyone else know? Sorry if this email wasn't completely helpful, but it will at least give you a starting point. Thanks -dant </blockquote> lsof is the tool you need, you can also do ls /proc/<PROCESS-ID>/fd and get a list of all files/sockets opened by this process. </body> </html>