After I free up some space, some unknown program IMMEDIATELY downloads some data and takes it all up. I’m talking gigabytes. Can I monitor what mf process does it? Where can I see logs of all files written to my SSD by initiator, time and size or start logging?
Have you tracked down where the data is being saved to?
Maybe that will point to the process writing them.
The sudo lsof tool can report every file that is being accessed by all processes.
You can use ’sudo findto find files with a recent creation or modification date. Seeman findfor the options to use. You can usesudo ss -tapn` to see all active TCP connections.
It also might be worth mentioning that it mustn’t be a program downloading data, it could be one just creating data. Does the size increase stop without network connection, and reappear once the network is available again?
iotop will show you realtime which processes are writing to disk and how much. You can install and run with:
$ sudo dnf install iotop-c
$ sudo iotop
2 Likes