[ossec-list] Re: inode changes for syscheck

Hi. Syscheck doesn't monitor inode changes on files at the present. In fact I don't know a way to change the inode number without modifying it. When a file is renamed, it keeps the inode, but if it's deleted, when you eventually create a new one, with the same or different name, the operating

[ossec-list] Re: inode changes for syscheck

Hi Dan, I am referring to have inode alerts similar way we have the MD5 alerts from syscheck. Thanks Kumar On Thursday, 30 June 2016, dan (ddp) wrote: > > On Jun 29, 2016 4:24 PM, "Kumar Mg" > wrote: > >