Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I've been getting "Disk IO rate warning" emails from Linode - and it looks like it's happening every 7 days. I have a few websites being hosted there and I realise that there are some APIs that I didn't secure.

What is the best way to check who (or what) has been accessing which resource on my server?

I'm using Ubuntu.

share|improve this question

migrated from security.stackexchange.com May 9 '13 at 15:41

This question came from our site for Information security professionals.

1 Answer 1

This is a very broad subject, but you could do some auditing by lining up high levels of I/O with entries in log files in /var/log. Also, if these times are predictable, you can use iotop at the time to see what is performing I/O.

For more general use, consider installing tools like logwatch, chkrootkit, rkhunter.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.