Is there an existing way to monitor the entire filesystem for changes to
any file, particularly changes in extended attributes?
I've read over the documentation for kqueue, but some things were left
unclear. For example, it appears the man page has not been updated for
5.0 and thus doesn't
I use /usr/ports/security/tripwire-131
Works great...
-Allan
On Monday, February 10, 2003, at 06:44 AM, Kevin Fogleman wrote:
Is there an existing way to monitor the entire filesystem for changes
to any file, particularly changes in extended attributes?
I've read over the documentation
I was thinking more along the lines of realtime notification of changes,
instead of using a program to poll all files that you would want to
monitor, which would be inefficient. Something along the lines of FAM,
but more scalable.
http://oss.sgi.com/projects/fam/
--Kevin Fogleman
Allan Dib
