[Aide] Aide summary output ?
Hannes von Haugwitz
hannes at vonhaugwitz.com
Mon Oct 18 09:06:12 EEST 2010
On Mon, Oct 18, 2010 at 09:20:06AM +0800, Aaron Lewis wrote:
> Hi,
> As document for aide.conf says , if i put summarize_changes as yes , it
> should output some human readable reports , rather than "xxx has
> different attributes bla bla" , but it just don't work here.
The summarize_changes feature summarizes the changes of an entry in the
added, removed and changed files sections of the report.
For instance it changes the line
changed: /path/to/file
to
f >b... mc..C . .: /path/to/file
To decode hex-encoded attribute numbers you can use the
aide-attributes.sh script in the contrib/ directory of the source
tarball.
Below are two examples from the Debian man page of aide-attributes:
EXAMPLES
Decode the hex number 'c3d' to attribute names:
$ aide-attributes c3d
filename
perm
uid
gid
size
bcount
lnkcount
Display the differences between two hex-encoded attribute numbers:
$ aide-attributes c3d fbd
+ctime
+mtime
+inode
Greetings
Hannes
More information about the Aide
mailing list