[Aide] Questions about AIDE

[Gouki.Itou at yokogawa.com]

Hello,

> Is tripwire using a multi-threaded approach?
According to top command, it seems tripwire doesn't use multi thread.

> I'd take a look at the database and see whether data is included that does not need to be included.
Thank you.
My aide.db only has contents that have to be checked. I cannot read Tripwire's one with a text editor, even if disabling encryption.

Best regards,
Goki
-----Original Message-----
From: Aide <aide-bounces at ipi.fi> On Behalf Of Marc Haber
Sent: Monday, December 19, 2022 7:37 PM
To: Aide user mailinglist <aide at ipi.fi>
Subject: Re: [Aide] Questions about AIDE

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.


On Mon, Dec 19, 2022 at 12:11:26AM +0000, Gouki.Itou at yokogawa.com wrote:
> > Hard to tell, are you using the same hash algorithm for the comparison (if I remember correctly Tripwire does not support sha2 family hash algorithms).
> I compared that.
> Aside from R+sha256, I tried R+crc32 that has the same hash algorithm
> as Tripwire(MD5 and CRC32.) But its check time was the same as R+sha256, and 3 times longer than Tripwire.

Is tripwire using a multi-threaded approach? Or maybe tripwire is excluding big parts of the data that aide checks? I'd take a look at the database and see whether data is included that does not need to be included.

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421 _______________________________________________
Aide mailing list
Aide at ipi.fi
https://jpn01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ipi.fi%2Fmailman%2Flistinfo%2Faide&data=05%7C01%7Cgouki.itou%40yokogawa.com%7Ca1a18a6ca12342f5bd1108dae1ad0609%7C0da2a83b13d94a35965fec53a220ed9d%7C0%7C0%7C638070430510859647%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=DZlliV4t0dTKsdRkEjSOOZV2DQSb7mmaQlKfkqJ%2BFrg%3D&reserved=0
-----
CONFIDENTIAL: This e-mail may contain information that is confidential or otherwise protected from disclosure and intended only for the party to whom it is addressed. If you are not the intended recipient, please notify the sender by return and delete this e-mail. You are hereby formally advised that any unauthorized use, disclosure or copying of this email is strictly prohibited and may be unlawful.