-
Mount Windows Share for File/Filesystem Integrity Monitoring
Greetings;
I would like to know if anyone has used Knoppix to mount several filesystems (nfs, CIFS, etc) and perform a file/filesystem integrity check?
I am looking for a way to monitor mostly windows files and shares for changes to their attributes.
I would also like to detect new files/directories added, as well as see what was renamed, deleted, copied and/or moved.
I realize this is alot to achieve, but in looking around at the different types of open source projects, Knoppix seems like the most suitable for this task; and Linux a suitable OS for the job.
Thanks all in advance,
-mi
-
I should add that I am also looking into using OSSEC.
-mi
-
Hi, I mount NTFS, ext3, ext4 and Fat32 and r/w to/from routinely since I run off a thumbdrive and use the drives on my computers for storage of stuff I don't want encrypted.
I mount the drives with a simple script, executed from a .desktop file on my menu, that is just pmount commands:
pmount sdc1
pmount sda4
pmount sda8
pmount sda12
pmount sr0
I am running my computers a bare minimum of 2 hours a day, usually 4 or more, and accessing the various hard dtive partitions constantly. The only time I actually boot the OS's on my computers is when I am editing Video or Sound. Graphics I'll edit on Knoppix.
Keeping up to date on the fsprogs deb packages for the systems you are mounting is probably a good idea. I even have hfsprogs.deb installed in case I try to run Knoppix on a Macintosh someday.
Regarding integrety, I've been doing this for 3 years with the same two 16G thumdrives across 3 laptops. I am more amazed the thumbdrives still seem problem free.
There is a reboot-with-fsck-check item on my obmenu
sudo shutdown -rF now
I think I have used it on the thumdrives once or twice if memory serves. The various hard drives, about 32 partitions with varying systems, are all fine.
No idea what OSSEC is.
-
Google can help you.
http://www.ossec.net/
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
Apple Mac Powerbook Duo 230 Vintage Laptop
$60.00
Vintage MediaMate Early 90’s Macintosh Mac Desktop PC Home Computer Stand #18200
$50.00
Apple Macintosh SE M5011 Vintage Computer Read description
$179.99
Apple Studio Display Monitor M2454 15" vintage Mac LCD
$80.00
Vintage Apple Macintosh II 2 M5000 Computer no power very nice w drives card
$350.00
VINTAGE REFURBISHED MACINTOSH SE WITH BLUESCSI RECAPPED POWER SUPPLY
$300.00
Vintage Apple Keyboard Macintosh M0116
$75.00
Vintage Mac Mice The Ball Bluetooth Wireless Trackball Mouse 2006 Untested
$21.99
APPLE MACINTOSH PLUS M0001A Vintage Mac Computer Tested Working
$799.99
Apple Macintosh SE/30 M5119 Vintage Mac Computer BAD FLOPPY DRIVE FOR PARTS
$350.00