Re: Monitoring filesystem for file/folder changes

There is this neat tool, FAM (File Alteration Monitor) for which it exists an old module, SGI::FAM. However, FAM won't work on all systems; IRIX and Linux for sure, FreeBSD if I recall correctly, Win32 surely not.
However, I wonder if this would be a viable solution to monitor a whole filesystem; this sort of stuff works pretty well to monitor a few files or folders, but to monitor everything you'll need some sort of plugin at the VFS level, similar to those used by antivirus softwares.
However if you can accomodate with FAM limitations, it's a nice and efficient tool, and perhaps it deserves a closer look. I suppose the SGI::FAM is IRIX only, may it be easily ported to Linux/others? I don't know...

Comment on Re: Monitoring filesystem for file/folder changes

Replies are listed 'Best First'.
Re^2: Monitoring filesystem for file/folder changes by hubb0r (Pilgrim) on Jun 05, 2005 at 03:30 UTC
SGI::FAM definitely works well on Linux. Can't comment on bsd, but it's definitely not IRIX only.	[reply]
Re^2: Monitoring filesystem for file/folder changes by Anonymous Monk on Jun 04, 2005 at 23:07 UTC
"plugin at the VFS level, similar to those used by antivirus softwares." Yeah, something like that was what I was hoping for... Seems unavailable though... :(	[reply]
Re^3: Monitoring filesystem for file/folder changes by wazoox (Prior) on Jun 05, 2005 at 07:54 UTC
Well, CPAN is so huge, perhaps there's something I didn't find :)	[reply]
Re^2: Monitoring filesystem for file/folder changes by Ultra (Hermit) on Jun 06, 2005 at 19:21 UTC
As usual, there is more than a way to do it. Someone was mentioning AntiVirus technology. Well, on GNU/Linux and FreeBSD there is an opensource module Dazuko that comes with a Perl module (surprise!) to interface with it. This means that it is trivial to hook into the kernel and find out in real time when a file changes. This means that you know "instantly" when a file is added or changed. It may be way too much for what you want, but it can also suit your needs. P.S.: using the module without care can be Dangerous . Dodge This!	[reply]