Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've been getting "Disk IO rate warning" emails from Linode - and it looks like it's happening every 7 days. I have a few websites being hosted there and I realise that there are some APIs that I didn't secure.

What is the best way to check who (or what) has been accessing which resource on my server?

I'm using Ubuntu.

share|improve this question

migrated from May 9 '13 at 15:41

This question came from our site for information security professionals.

This is a very broad subject, but you could do some auditing by lining up high levels of I/O with entries in log files in /var/log. Also, if these times are predictable, you can use iotop at the time to see what is performing I/O.

For more general use, consider installing tools like logwatch, chkrootkit, rkhunter.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.