I need be able to see what is writing to the disk at a certain time.
There is no internet access to the servers nor available repos on the network.
I have been playing with
du however looking for a better way.
So far what I have come up with
now=$(date +"%I%M%S") && du -ha --time ./ >> /home/user/io$now.txt
Putting this in a cron will run every ~30, The entire file system is about 7GB
I am not sure what directory this happening in I know it might be better to start with /tmp or other obvious start points.