System Administration Guide, Volume 3

nfslogd

This daemon provides operational logging. NFS operations against a server are logged based on the configuration options defined in /etc/default/nfslogd. When NFS server logging is enabled, records of all RPC operations on a selected file system are written into a buffer file by the kernel. Then nfslogd post-processes these requests. The name service switch is used to help map UIDs to logins and IP addresses to host names. The number is recorded if no match can be found through the identified name services.

Mapping of file handles to path names is also handled by nfslogd. The daemon keeps track of these mappings in a file-handle-to-path mapping table. One mapping table exists for each tag identified in /etc/nfs/nfslogd. After post-processing, the records are written out to ASCII log files.