Need to monitor any file change in the system, in real time

Hi,
I am running a program that I suspect may be doing changes in the filesystem, but I do not know which ones. I would like to know if there is a daemon/program that could help me monitor those changes. I tried AIDE, however, it works by creating a database of checksums for each file and does not report in real time potential changes. I would rather use a program that logs changes and timestamp them. Furthermore, AIDE is not useable with /var files, since there are many of them and they change so often. Is there another good solution?
Alternatively I would like to run the program with monitoring. For instance, run the process as:
monitor_program my_program_to_monitor logfile
This would dump in logfile what my_program_to_monitor does to the filesystem.
Thanks in advance.
Last edited by zebulon (2011-08-24 15:44:10)

no, at least with inotifywait, it is not possible. once you know what file is being changed you can use "lsof" to see what process have opened that file.
i tried the following to search lsof output first thing when inotifywait finds a file change.
file=$(inotifywait -r /home/mang/watch --format %w | sed 's/.$//'); lsof | grep $file
while in another terminal running "vi /home/mang/watch/test"
the output is:
zsh 12574 mang cwd DIR 254,11 4096 4723089 /home/mang/watch
vi 16790 mang cwd DIR 254,11 4096 4723089 /home/mang/watch
try it!

Similar Messages

  • HT3669 I only have a HP printer and why I need to install a file for all the HP printers drivers 590MB??? if normally the size of my file should be 5MB.  some one could me help to avoid installation of 590MB for my new mountain lion software???

    Hi guys..!!
    I would like to know if someone could help on this:
    I just have a HP printer (HP Designjet 100) and for some reason I need to install a file for all the HP printers drivers in total 590MB to be able to use my printer in my mountain lion???
    If normally the size of my files in the for previous software was more or less 5MB why now i need to install 590?
    Some one could help me how to avoid installation of 590MB for my new mountain lion software???
    Thanks

    If you go to http://support.apple.com/downloads and locate the HP Printer Drivers installer, you will find that it is 473.4 MB (for version 2.11). If you install this, it will install the full set of drivers for every model of HP printer that is supported by the drivers distributed through Apple. The disk space occupied once installed will probably be larger than the download, since the downloaded file is compressed.
    On the other hand, if you have an HP printer connected and you use Software Update (or the Update tab in App Store), that should offer you a much smaller set of HP drivers, which are only applicable to your printer (and possibly a few similar ones). These updates are typically only tens of megabytes rather than hundreds of megabytes.
    If Software Update doesn't offer you any HP drivers then it either thinks you have the latest drivers installed already, or the printer model is not supported by the drivers available from Apple.
    This article lists all of the printer models for which Apple distributes the driver:
    http://support.apple.com/kb/HT3669

  • I have Configured SSL,  Do we need to make any further changes ??????

    Hi all,
    I am new to SSL.
    I have a question.
    We have just configured SSL in our Web Server to make the site secure.
    We have a Registration Form in our site and Customer fills it and submit the form so we want to
    make Registration Form secure.
    I want to know that do we need to make any further changes in
    our program (Servlet/JSP).
    I mean, do we need to use/implement JSSE package API in our program.
    Please help me in this way.
    amitindia

    Your engine may or may not use JSSE - nbut unless
    you're opening your
    own Sockets, you don't care.
    What's this mean......
    We are not using Socket Connection in our program (in
    our database driven website).Then you're all set. What I meant was, if you're creating new Sockets in your Servlet (which is not typical, but I've seen it done), then you'd need to worry about how to make an SSLSocket. Since you're not, you're all set.
    As u explain that we have to replace http to https.
    Is this is the only changes we have to make or any
    other changes tobe made?No - change your URLs, and then read up on how to set up your ServletEngine so that it supports SSL, and you should be all set.
    Grant

  • Do we need to make any confif settings in the SAP R/3 system before replica

    Hi
    Can any one suggest me  do we need to do any config settings in the SAP R/3 before replicating material groups and materials from R/3 to SRM?
    Please suggest me.
    Regards
    Srujan.k

    Adding to Akash
    /people/marcin.gajewski/blog/2007/02/05/how-to-replicate-material-master-from-r3-to-srm - it is one of the best blog from Marchin's
    blog step by step procedure
    regards
    Muthu

  • I took the system file out of the system folder on os 9.2 can't boot to put file back in machine also has osx 10.2 but won't let me boot to either need os 9 compatible boot disk I think?

    I took the system file out of the system folder on os 9.2 can't boot to put file back in machine also has osx 10.2 but won't let me boot to either need os 9 compatible boot disk I think?

    If the OS X 10.2 on the hard drive is/was bootable, try this -
    Restart or boot, then immediately press the X key, keep it held down until you know the machine has started to boot using OS X. This is a hardware instruction to the Mac to boot using the first usable instance of OS X it finds.
    Once booted to OS X, you should be able to move OS 9's System file into OS 9's System Folder.
    Note - in general, unless you know for sure what you are doing and that the results are desired, do not relocate or rename files in OS 9's System Folder or in OS X's System or Library folders.

  • When I drag pdf files into iBooks Author, the background in the pdf file changes into the colour of my book (brown/beige)?

    Hi,
    when I drag a pdf file (when working in Preview) into iBooks Author, the background colour in the pdf file changes into the background colour of the book.
    This happens not consistently, sometimes the background of the pdf file does not change (and stays white), sometimes it's like the text in the pdf file is 'lifted' of the file, and put on the page in iBooks Author (with a brown/beige background).
    All the pdf files are scanned pdf's, nothing comes out of Pages, Word, Excel,...
    Anybody?
    Thanks a lot!
    Wouter

    I have the same question (posted here: https://discussions.apple.com/message/25644741#25644741).
    I believe this is because the PDFs have transparent backgrounds. As far as I can tell, the only way to fix it is to export the PDF as another file, such as an image file. Or perhaps convert it to Word and import it that way.

  • I have a power mac G5 with a 23'' cinema hd monitor i can power up the system but no picture, i pluged it into a laptop and monitor comes on i need help

    i have a power mac g5 with a 23'' cinema hd monitor, i can power up the system from monitor power button but the monitor doesnt come on, i pluged into a laptop and it works whats wrong i need help

    Hi,
    Safe Boot from the HD, (holding Shift key down at bootup), does anything show?
    Try re-seating the Graphic Card in the G5.

  • Do I need to buy any extra cables for the airport express??

    I was wondering if i need to buy any extra cables for the airport exprees.what kind of cables do i have to get to connect the airport express to my DSL modem?

    Typically all you would need is an Ethernet cable (cat5, rj45 end), and it would be connected to the LAN port on the DSL modem, and the Ethernet jack on the AP Express.

  • Function module to get the file path in the system for TEMP folder

    Hi All,
    Is there any function module that I can use to get the file path in the system for TEMP folder.
    I mean, i am supposed to give only TEMP as the input for that function module and I need to get the path of that in the system as the output.
    I am unsing 4.0 version.
    Please advice.
    Regards
    Ramesh

    In Higher versions, we can use the below code:
    call method CL_GUI_FRONTEND_SERVICES=>ENVIRONMENT_GET_VARIABLE
        exporting
          VARIABLE   = 'TEMP'
        importing
          VALUE      = LV_TMP
        exceptions
          CNTL_ERROR = 1
          others     = 2.
      if SY-SUBRC <> 0.
        message id SY-MSGID type SY-MSGTY number SY-MSGNO
        with SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
      endif.
      call method CL_GUI_CFW=>FLUSH
        exceptions
          CNTL_SYSTEM_ERROR = 1
          CNTL_ERROR        = 2
          others            = 3.
      if SY-SUBRC <> 0.
    Error handling
      endif.
      concatenate lv_tmp '\' into folder_path.
    But need to know in the lower versions like 3.1h and 4.0,

  • X121e bios loop : "configuration changed - restart the system"

    After changing some settings in BIOS i got stuck in a reboot - loop.
    * Cannot access the BIOS any more - pressing F1 changes the message to "Entering BIOS Setup Utility" followed by the message "configuration changed - restart the system"
    * F12 changes the message to "Preparing Boot Device List" followed by  "configuration changed - restart the system" and the system reboots again.
    * Tried to remove the battery, pressing the power button for 10-15 sec. and reboot with AC Adapter connected
    * Tried to remove the battery and unplug the bios battery for 3 days the reset the bios - doesn't work
    * Tried to boot via USB (BIOS update, FreeDOS with BIOS update, Ubuntu-Live-USB) - nothing worked .. didn't change the boot-order - i always prefer USB boot
    * Removing hard-disk produces the message "no operating system found"
    Are there any tricks for resetting the BIOS to defaults, flashing BIOS without booting from USB?
    see
    * http://forums.lenovo.com/t5/ThinkPad-Edge-S-series/E-325-bios-settings-changed-keeps-rebooting/td-p/...
    * http://forums.lenovo.com/t5/X-Serie-ThinkPad-Notebooks-inkl/x121e-Configuration-changed-Restart-Syst...
    - there are several people with this issue ...

    In service center they said that motherboard is glitchy and needs replacement.
    So it was a hardware fault.

  • I have a workflow transaction which got timeout and escalated to the next level. The comments in the approver's notes are just changed by the system in doing so.  For eg: "Moving John under Michael" gets changed into "Moving+John+under+Michael" during the

    I have a workflow transaction which got timeout and escalated to the next level. The comments in the approver's notes are just changed by the system in doing so.
    For eg: "Moving John under Michael" gets changed into "Moving+John+under+Michael" during the timeout/reminder notification. Any idea ?
    -Thanks,
    Arun

    I have recently started having this problem in PSE8. The Adobe workaround
    did work, but I don't fancy having to re register each time I use it.
    What I have discovered is that it's nothing to do with the image metadata as it occurs before any image is opened.
    It SEEMS to only occur if you use file/open with to open an image in the editor - IE start PSE with that command.
    If you close elements down, and start it using programs/PSE/Elements (or your desktop shortcut) - the panorama feature magically works.
    Each time I've opened the editor 'automatically' using image/open with, it seems to create the problem.
    Hope this helps

  • [TP x120e] Continuous "Configuration changed - Restart the system." error

    I played with my bios (disabled/enabled mic, webcam, LAN and so), but after exiting the bios, Thinkpad x120e  reboots continuously with the error message "Configuration changed - Restart the system.". I was not able to boot from any USB/HDD and also I can not enter to the BIOS. Hard bios reset won't help. Any ideas?
    Thanks!

    Hello,
    Have you tried unplugging all power, including the internal CMOS/RTC backup battery, from the ThinkPad X120e, leading the unit alone for a few minutes to let any capacitors holding a residual electic charge drain, holding down the power button for 30 seconds to complete the operation, then plugging in the AC charger without either of the batteries installed, then holding down the F1 key while pressing the power button to see if that gets you into the BIOS settings?
    Regards,
    Aryeh Goretsky
    I am a volunteer and neither a Lenovo nor a Microsoft employee. • Dexter is a good dog • Dexter je dobrý pes
    S230u (3347-4HU) • X220 (4286-CTO) • W510 (4318-CTO) • W530 (2441-4R3) • X100e (3508-CTO) • X120e (0596-CTO) • T61p (6459-CTO) • T43p (2678-H7U) • T42 (2378-R4U) • T23 (2648-LU7)
      Deutsche Community   Comunidad en Español Русскоязычное Сообщество

  • Is there any way to click the System Message Box button  through code?

    Hi,
    Is there any way to click the System Message Box button through code?
    Is there any way to restrict the System Message Box ?
    The requirement is, i need to open the MRP Wizard form in MRP.it s run automatically.after completion of the wizard is there finish button.after clicking of the finish button, there have a system message. i want to click on "Yes" button through coding.
    when system message box open.my code is stopped.if i press yes code is running.   
    Thanks in advance.

    Thanks for replay
    bellow given the code
    i am using, when i call the finishMrp function its going to take the itemId from XML and click to the finish button.
    There have a system message .when system message fair my debugging stopped. Please give me any idea.
    Public Function Execuate() As Boolean
    Dim strSQL As String
      Dim objRS As SAPbobsCOM.Recordset
        Dim intLoop As Integer
        Dim objForm As SAPbouiCOM.Form
        objForm = objAddOnCentral.objApplication.Forms.ActiveForm
        objRS = objAddOnCentral.objCompany.GetBusinessObject(SAPbobsCOM.BoObjectTypes.BoRecordset)
        strSQL = "SELECT U_MRPCode From [@ACSYMRPLIST]"
        objRS.DoQuery(strSQL)
        If objRS.EoF Then
        Throw New Exception("No MRP Scenario Scheudled")
        Return False
        End If
    For intLoop = 1 To objRS.RecordCount
                objForm.Freeze(True)
                If intLoop = 1 Then
                initializeMRPRun()
                System.Windows.Forms.Application.DoEvents()
                Else
                reinitialize()
                System.Windows.Forms.Application.DoEvents()
                End If
                MRPRun(objRS.Fields.Item("U_MRPCode").Value)
                System.Windows.Forms.Application.DoEvents()
                objForm.Freeze(False)
                objRS.MoveNext()
            Nex
            finishMRPRun()
            Return True
        End Function
       Private Sub finishMRPRun()
            Dim strResource As String
            Dim objXML As New XmlDocument
            Dim objXMLNode As XmlNode
            Dim objXMLNodeList As XmlNodeList
            strResource = System.Reflection.Assembly.GetExecutingAssembly().GetName().Name & "." & "AutoStart.xml"
            objXML.Load(System.Reflection.Assembly.GetExecutingAssembly.GetManifestResourceStream(strResource))
            objXMLNodeList = objXML.SelectNodes("/AutoMRPScript/FinishMRP/Instruction")
            For Each objXMLNode In objXMLNodeList 'objXML.ChildNodes.Item(1).ChildNodes
                Select Case objXMLNode.Attributes("OPType").Value
                    Case "2"
                        systemMessageactiveFormButton(objXMLNode)
                End Select
            Next
        End Sub
    Private Sub systemMessageactiveFormButton(ByVal Instruction As XmlNode)
            Dim objForm As SAPbouiCOM.Form
            objForm = objAddOnCentral.objApplication.Forms.ActiveForm
            objForm.Items.Item(Instruction.Attributes("ItemID").Value).Click()
        End Sub
    Edited by: Badulla Sk on Dec 31, 2009 11:24 AM
    Edited by: Badulla Sk on Dec 31, 2009 11:25 AM

  • Need to enter invoice and payment in the system after a manual check issued

    Client Need to enter invoice and payment in the system after a manual check is issued for some urgent transactions.
    Please suggest few ways to do this .

    Hi,
    If client can maintain a separate check book sequence for manual issue, we can configure a separate payment document with the same sequence and later record the invoice and generate payment ....
    Regards,
    Ivruksha

  • We need how to copy macro logic in the system

    Hi Experts,
    we need how to copy macro logic in the system, we have some macros in my friend system,  i need how to copy macro logic , can u send me elaborate.
    Regards,
    BABU

    I'm a bit uncomfortable with you've wanted to do especially you and your friend has a different system (unless its a sister company/industry). If this would be the case you can copy your friend's macro with the help of your basis team to transport them in one system to another.
    if the case is different organization, I'm not sure if that is possible since no industry have same requirements but i may suggest the links below for your reference on how to copy the Macro into external system. Hope the document is relevant to your issue.
    [http://help.sap.com/saphelp_scm41/helpdata/en/82/2101fac5288f4d8c7be7c20e604a8f/frameset.htm]
    Cheers!

Maybe you are looking for