Você já olhou para nfsstat
? Parece quebrar bem o tipo de atividade ...
Server rpc stats:
calls badcalls badclnt badauth xdrcall
944958162 0 0 0 0
Server nfs v3:
null getattr setattr lookup access readlink
0 0% 139832 0% 22081 0% 3129178 0% 353869 0% 0 0%
read write create mkdir symlink mknod
765558883 81% 175500547 18% 37272 0% 11 0% 0 0% 0 0%
remove rmdir rename link readdir readdirplus
33032 0% 1 0% 4084 0% 0 0% 0 0% 40464 0%
fsstat fsinfo pathconf commit
165633 0% 9 0% 0 0% 0 0%