Anyone know how to see what pid/process has modified a linux routing table (specifically on Ubuntu )? I have an interesting problem where a route that I have created has been deleted over time, but can’t figure out what. I’ve tried rtmon but seems to only show timestamps of the adds/deletes
You must log in or # to comment.
I don’t think any historical data would exist, but you could probably watch changes with ftrace
