title: How can I record what process or kernel activity is using the disk in GNU/Linux?
body: <p>On a particular Debian server, iostat (and similar) report an unexpectedly high volume (in bytes) of disk writes going on.  I am having trouble working out which process is doing these writes.</p>
  
  <p>Two interesting points:</p>
  
  <ol>
  <li><p>Tried turning off system services one at a time to no avail.  Disk activity remains fairly constant and unexpectedly high.</p></li>
  <li><p>Despite the writing, do not seem to be consuming more overall space on the disk.</p></li>
  </ol>
  
  <p>Both of those make me think that the writing may be something that the kernel is doing, but I'm not swapping, so it's not clear to me what Linux might try to write.</p>
  
  <p>Could try out atop:</p>
  
  <p><a href="http://www.atcomputing.nl/Tools/atop/" rel="noreferrer">http://www.atcomputing.nl/Tools/atop/</a></p>
  
  <p>but would like to avoid patching my kernel.</p>
  
  <p>Any ideas on how to track this down?</p>