Deducing what drive a process is coming from

[lionheartednyhc]

Is there a way to see which processes are originating from which drives? I dont think this is possible with activity monitor, unless I am missing something. I am trying to deduce the cause of my drive spinning up.

 

[Nugget]

Is there a way to see which processes are originating from which drives? I dont think this is possible with activity monitor, unless I am missing something. I am trying to deduce the cause of my drive spinning up.

In a terminal window you can run

sudo fs_usage -f filesys

and see a real-time log of every disk access along with which process/application is responsible for it. It can be a bit overwhelming to watch, but the answer you're looking for will definitely be in there.

 

[lionheartednyhc]

In a terminal window you can run

sudo fs_usage -f filesys

and see a real-time log of every disk access along with which process/application is responsible for it. It can be a bit overwhelming to watch, but the answer you're looking for will definitely be in there.

Thanks, you know what I did try that and was overwhelmed haha. Im hoping for an app or something that wont give me a headache 😛

 

[larkost]

Use the 'lsof' command, specifically with the '-c' flag. This will get you all files that that process has open, and that should include its executable with a full path. For example, looking for Safari:

lsof -c Safari

Edit: Woops... misread the question, so the answer would be:

lsof | grep '/Volumes/MOUNT_POINT' | grep '.app"

That will get you reasonably close.

 

[mrgraff]

"What's Keeping Me?" might help:
http://www.hamsoftengineering.com/products/wkm/wkm.html

 

[lionheartednyhc]

"What's Keeping Me?" might help:
http://www.hamsoftengineering.com/products/wkm/wkm.html

THANKS! This is exactly what I have been looking for!