Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>I've not personally done what you're asking, but here are a few pointers that might get you started.</p> <p>Mac OS X comes with a command-line program, <a href="http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/man1/fs_usage.1.html" rel="nofollow">fs_usage</a>, that does that, and more. You might be able to launch it as a helper app and parse its output.</p> <pre><code>$ sudo fs_usage -f filesys Safari 22:43:27 stat64 ry/Safari/Bookmarks.plist 0.000063 Safari 22:43:28 lstat64 English.lproj/Browser.nib 0.000025 Safari 22:43:28 getattrlist English.lproj/Browser.nib 0.000014 Safari 22:43:28 getattrlist English.lproj/Browser.nib 0.000017 Safari 22:43:28 open English.lproj/Browser.nib 0.000017 Safari 22:43:28 getdirentriesattr 0.000039 Safari 22:43:28 close 0.000008 Safari </code></pre> <p>opensnoop does a similar thing.</p> <pre><code>$ sudo opensnoop UID PID COMM FD PATH 205 284 locationd -1 /dev/dlci.spi-baseband.9 501 2836 Safari 11 /Users/zach/Library/Cookies/Cookies.plist </code></pre> <p>opensnoop is built on <a href="http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/man1/dtrace.1.html" rel="nofollow">dtrace</a>, which could almost certainly do what you want. There's a decent tutorial on it <a href="http://www.mactech.com/articles/mactech/Vol.23/23.11/ExploringLeopardwithDTrace/index.html" rel="nofollow">here</a>.</p> <p>Finally, if you don't mind using private API, there's one which was built for Spotlight, which provides a notification system for filesystem changes. <a href="http://www.osxbook.com/software/fslogger/" rel="nofollow">This tool</a> is built on it. The source code is available.</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload