Anyone know how to see what pid/process has modified a linux routing table (specifically on Ubuntu )? I have an interesting problem where a route that I have created has been deleted over time, but can’t figure out what. I’ve tried rtmon but seems to only show timestamps of the adds/deletes
You must log in or register to comment.
I guess it can be NetworkManager if it is used to configure the interface but the route is added manually.
I don’t think any historical data would exist, but you could probably watch changes with ftrace
