Anyone know how to see what pid/process has modified a linux routing table (specifically on Ubuntu )? I have an interesting problem where a route that I have created has been deleted over time, but can’t figure out what. I’ve tried rtmon but seems to only show timestamps of the adds/deletes

  • Shadow@lemmy.ca
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    11 months ago

    I don’t think any historical data would exist, but you could probably watch changes with ftrace