Using linux-fincore to Check Linux Page Cache Usage

Check Linux Page Cache UsageIn this short blog post, we will check how to use linux-fincore to check which files are in the in-memory Linux page cache. To have an introductory read about the Linux page cache check here and here.

In summary, whenever you read from or write to a file (unless you are using Direct_IO to bypass the functionality), the result is cached in memory, so that subsequent requests can be served from it, instead of the orders of magnitude-slower disk subsystem (it can also be used to cache writes, before flushing them to disk). This is done as far as there is memory that is not being used by any process; whenever there is a shortage of otherwise free memory, the kernel will choose to first evict the page cache out of it. 

This process is transparent to us as userland dwellers and is generally something that we shouldn’t mind. However, what if we wanted to have more information on it? Is it possible? How can we do it? Let’s find out!

Installing it

Unless it’s for CentOS 6, there seem to be no packages available, so we need to download the source and compile. The steps for this are simple enough:

After this, we will have the binaries ready to be used in /usr/local/bin/.

Using it

As seen in the previous output, we need to pass either a file or a list of files for it to work. This is kind of strange at first glance, and begs for the question: “What if I don’t provide some files that are indeed in the page cache?” The answer is simple – they won’t be listed, even if they are in cache! Let’s see it in action. First, let’s write two files, and check if they are in the cache (and how much space they are taking up).

The -L option shows us the output in vertical format, instead of the default columnar style. Now, if we leave out the third argument (which is the second file name):

We only see test_file_1, even though we know test_file_2 is also cached. This is something to have present every time we use the tool.

A more interesting example is to check from, for instance, a running MySQL server, which files are cached. We can use a command like the following:

The –only-cached flag will make it less verbose, by only showing outputs for the files that are in the cache. 

Caveats and Limitations

The number one caveat, as mentioned before, is to provide an accurate list of files to check for, or else the results will be obviously wrong (if we are trying to dimension the whole cache usage).

One limitation is that there is an upper bound on the number of files we can check (at least with one command), given the argument list is not limitless. For instance, one natural way of wanting to check for the whole cache is to use a command like the following:

The command fails, as we can see, because we exceeded the number of arguments allowed by bash.

Cleaning the Page Cache

This topic is a bit out of scope for the blog post, but I thought that I could at least mention it. There are three ways of manually purging the page cache if needed:

1- directly writing to the /proc/sys/vm/drop_caches file

2- using the sysctl configuration tool

More information about this here (search for the drop_caches section).

3- (Updated: Thanks LeFred for input on this!) Use the uncache tool from DBSake to selectively remove files from the cache, without the need to evict the whole of it.

What can I use it for?

The tool can be used for checking which files are cached, and how much memory they are taking. For instance, if you see a spike in memory usage after certain operations, you could:

  • capture initial output with linux-fincore
  • flush the page cache (as shown above)
  • run the problematic operation
  • capture a second sample with linux-fincore

Then you could compare the outputs to see which files were used by the operation, and how much was needed for them.

Further reading and similar tools

There is an extended blog post on this matter, which has more tools and how to use them.

uncache – (Updated: Check LeFred’s comments below for more insight on this.) As an added bonus, DBSake has a fincore tool you can use!

vmtouch –

mincore –

Share this post

Comments (2)

  • lefred Reply

    Hi Agusin !

    Nice post, I just wanted to point you another tool I really like to work with:

    dbsake allows you to “uncache” a specific file too without having to drop the full filesystem cache that can be dangerous. This is very useful to free filesystem cache after reading many binlogs for example.


    August 30, 2019 at 4:38 am
    • Agustín Reply

      Hey lefred,
      Awesome! I’ll have the blog updated to include this in the last section, and a note in the ‘cleaning cache section’, too. I see it also has a fincore-like tool (using mincore to implement it), so it kills two birds 🙂

      September 3, 2019 at 1:08 pm

Leave a Reply