The fatrace trace uses fanotify, a couple of /proc lookups and some
glue to trace file access events system-wide, in an effort to
identify processes which keep waking up the disk even when the
computer is idle.
By default, it monitors the whole system, i.e. all mounts except
virtual ones like /proc, tmpfs, etc. It can be told to monitor just
the mount of the current directory. The log can be written to a file
and runtime be capped. Optional time stamps and PID filters are also
provided.
Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.