-
Mount Windows Share for File/Filesystem Integrity Monitoring
Greetings;
I would like to know if anyone has used Knoppix to mount several filesystems (nfs, CIFS, etc) and perform a file/filesystem integrity check?
I am looking for a way to monitor mostly windows files and shares for changes to their attributes.
I would also like to detect new files/directories added, as well as see what was renamed, deleted, copied and/or moved.
I realize this is alot to achieve, but in looking around at the different types of open source projects, Knoppix seems like the most suitable for this task; and Linux a suitable OS for the job.
Thanks all in advance,
-mi
-
I should add that I am also looking into using OSSEC.
-mi
-
Hi, I mount NTFS, ext3, ext4 and Fat32 and r/w to/from routinely since I run off a thumbdrive and use the drives on my computers for storage of stuff I don't want encrypted.
I mount the drives with a simple script, executed from a .desktop file on my menu, that is just pmount commands:
pmount sdc1
pmount sda4
pmount sda8
pmount sda12
pmount sr0
I am running my computers a bare minimum of 2 hours a day, usually 4 or more, and accessing the various hard dtive partitions constantly. The only time I actually boot the OS's on my computers is when I am editing Video or Sound. Graphics I'll edit on Knoppix.
Keeping up to date on the fsprogs deb packages for the systems you are mounting is probably a good idea. I even have hfsprogs.deb installed in case I try to run Knoppix on a Macintosh someday.
Regarding integrety, I've been doing this for 3 years with the same two 16G thumdrives across 3 laptops. I am more amazed the thumbdrives still seem problem free.
There is a reboot-with-fsck-check item on my obmenu
sudo shutdown -rF now
I think I have used it on the thumdrives once or twice if memory serves. The various hard drives, about 32 partitions with varying systems, are all fine.
No idea what OSSEC is.
-
Google can help you.
http://www.ossec.net/
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
A-Tech 8GB DDR3 1600 PC3-12800 Laptop SODIMM 204-Pin Memory RAM PC3L DDR3L 1x 8G
$13.99
Micron 16GB 2Rx8 PC4-2400T-SE1-11 Laptop Memory MTA16ATF2G64HZ-2G3E1 Tested
$17.99
Crucial DDR3L 16GB 1600 2x 8GB PC3-12800 Laptop SODIMM Memory RAM PC3 16G DDR3
$22.45
Team T-FORCE VULCAN Z 32GB (2 x 16GB) PC RAM DDR4 3200 (PC4 25600) Memory
$54.99
Hynix 2x 8GB (16GB) PC4-19200 DDR4-2400MHz 288Pin Desktop Memory Module
$18.99
HyperX FURY DDR3 8GB 16GB 32GB 1600 MHz PC3-12800 Desktop RAM Memory DIMM 240pin
$23.95
16GB DDR4-2666 PC4-21300 DIMM (DELL TP9W1 Equivalent) Desktop Memory RAM Free Sh
$32.99
A-Tech 8GB PC3-12800 Desktop DDR3 1600 MHz Non ECC 240-Pin DIMM Memory RAM 1x 8G
$13.99
A-Tech 128GB 4x 32GB 2Rx4 PC4-19200R DDR4 2400 ECC REG RDIMM Server Memory RAM
$191.96
Dell SNPTP9W1C/16G 16 GB 2666MHz (PC4-2666) Memory Ram
$34.95