Get filemon and a lot other very useful utilities from Mark Russinovich's Sysinternals site.
-dennis2(Dennis);
2001-11-23(#271845@0)
i forgot to mention another software, outside in server. The problem is i don't know who produce those tmpfiles, usually they are only 3 bytes.
-canadapassenger(独在异乡为异客);
2001-11-23(#272065@0)
yes, there are a number of utilities on sysinternals, but none of them can tell me which process generate those tmp files.
-canadapassenger(独在异乡为异客);
2001-11-23(#272094@0)
With NT, you can see who creates the files. It should has a create by properties, at least win2k has it. If so, you may know whether it's the web (ISUSER) or system that's creating them.
-jeffrey815(Smartiecat);
2001-11-23(#272134@0)
it's hard to tell by checking file properties becuase most of the files created in WINNT\TEMP directory are created by administrator.
-baden(Booster);
2001-11-23{857}(#272157@0)
He is talking about identifying the application rather than the user id.
If the application does not designate a specific user id to run under, checking file properties does not help to identify the process or application which creates these files.
If the application is capable to assign a user id to run under. He can create a user id with appropriate authorities.
Also bear in mind that these tmp files are not all the time in use by the application that creates them. Using a scheduled job to clear the tmp directory on a regular basis will keep your system drive at safe level of free disk space.
Also he can check the individual applications to see if the log direcory or log level can be changed.
Redirecting the log directory to some larger data disk may give the system disk some level of safe regading the file system free space.
Nope. if you are not log in and only the web server is running, those files can't be created by administrator!!
-jeffrey815(Smartiecat);
2001-11-23(#272443@0)
Why can't you use filemon to find out which process generate those tmp files? You have to do it in real time to catch the process right?
-dennis2(Dennis);
2001-11-23(#272727@0)
Can you use WINNT file Auditing to log it?
-jeffrey815(Smartiecat);
2001-11-24(#273757@0)