[Aide] AIDE logging and "The attributes of the (uncompressed) database(s):"
Bastard Operator from Hell aka Django
django at nausch.org
Wed Mar 5 20:45:59 EET 2025
Ahoi!
I have a small question about AIDE's logging mechanisms.
When the check via systemctl status aidecheck.timer runs at 5:00 a.m., I
see the following entries in the syslog:
---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<
Mar 05 05:00:08 pml010074 systemd[1]: Started Aide Check.
Mar 05 05:05:10 pml010074 systemd-journald[1319]: [🡕] Suppressed 899215
messages from aidecheck.service
Mar 05 05:05:10 pml010074 aide[52379]: Start timestamp: 2025-03-05
05:00:08 +0100 (AIDE 0.18.8)
Mar 05 05:05:10 pml010074 aide[52379]: AIDE found NO differences between
database and filesystem. Looks okay!!
Mar 05 05:05:10 pml010074 aide[52379]: Start timestamp: 2025-03-05
05:00:08 +0100 (AIDE 0.18.8)
Mar 05 05:05:10 pml010074 aide[52379]: AIDE found NO differences between
database and filesystem. Looks okay!!
Mar 05 05:05:10 pml010074 aide[52379]: Number of entries: 468334
Mar 05 05:05:10 pml010074 aide[52379]:
---------------------------------------------------
Mar 05 05:05:10 pml010074 aide[52379]: The attributes of the
(uncompressed) database(s):
Mar 05 05:05:10 pml010074 aide[52379]:
---------------------------------------------------
Mar 05 05:05:10 pml010074 aide[52379]:
http://10.0.0.40/local/pml010074.aide-database
Mar 05 05:05:10 pml010074 aide[52379]: MD5 : xFJfV2Jo2OYW5Xq0168Y4Q==
Mar 05 05:05:10 pml010074 aide[52379]: SHA1 :
ZNJ7ispZ5DNdtAq1ZTWcVCzwBeQ=
Mar 05 05:05:10 pml010074 aide[52379]: SHA256 :
slrY4Nm9xF8beGMdL02mYlTTkCs2gt4R
Mar 05 05:05:10 pml010074 aide[52379]: Rpne2M/qcts=
Mar 05 05:05:10 pml010074 aide[52379]: SHA512 :
2bNiBZFbXmAlHxqzxlgnAJsOeQIkmTbS
Mar 05 05:05:10 pml010074 aide[52379]:
b9j/WmbWog4FES+Yvwsm5OjGxHf4W6Qm
Mar 05 05:05:10 pml010074 aide[52379]: pkagyuFvM7F8HybvTFvNjg==
Mar 05 05:05:10 pml010074 aide[52379]: RMD160 :
1xlewnEEsoX00gbv+NeDwv8AMiY=
Mar 05 05:05:10 pml010074 aide[52379]: TIGER :
js2XdE7jewHPfRXr0rbMuLuqvV1XgSon
Mar 05 05:05:10 pml010074 aide[52379]: CRC32 : ehJu7g==
Mar 05 05:05:10 pml010074 aide[52379]: WHIRLPOOL :
DDDnQNMaFOwDFDKve6V0nVbovGvJ4Mea
Mar 05 05:05:10 pml010074 aide[52379]:
Gb3aVynaeKFCXIGK47OOPqodqHBVdfRK
Mar 05 05:05:10 pml010074 aide[52379]: rLHRzomlXVicUDFUsU/0Bg==
Mar 05 05:05:10 pml010074 aide[52379]: GOST :
8/Gxe3dVGNAtR9Y/DnihQ2m3midbGwqP
Mar 05 05:05:10 pml010074 aide[52379]: QOChq5hz4fQ=
Mar 05 05:05:10 pml010074 aide[52379]: STRIBOG256:
I+jdJuHZfgj8YEytbDVP7fA+cVA6eY0y
Mar 05 05:05:10 pml010074 aide[52379]: JMuAlQq3pRg=
Mar 05 05:05:10 pml010074 aide[52379]: STRIBOG512:
6lYBMeTsjfwhSFLM58F37jUmUZwaf34K
Mar 05 05:05:10 pml010074 aide[52379]:
luCtteWaRt1xEVUyzlLGcXTa6iBBvmyE
Mar 05 05:05:10 pml010074 aide[52379]: LjO5m2qVOwMfE7N276UvWw==
Mar 05 05:05:10 pml010074 aide[52379]: End timestamp: 2025-03-05
05:05:10 +0100 (run time: 5m 2s)
Mar 05 05:05:10 pml010074 aide[52379]:
Number of entries: 468334
Mar 05 05:05:10 pml010074 aide[52379]:
---------------------------------------------------
The attributes of the
(uncompressed) database(s):
---------------------------------------------------
Mar 05 05:05:10 pml010074 aide[52379]:
Mar 05 05:05:10 pml010074 aide[52379]:
http://10.0.0.40/local/pml010074.aide-database
Mar 05 05:05:10 pml010074 aide[52379]: MD5 : xFJfV2Jo2OYW5Xq0168Y4Q==
Mar 05 05:05:10 pml010074 aide[52379]: SHA1 :
ZNJ7ispZ5DNdtAq1ZTWcVCzwBeQ=
Mar 05 05:05:10 pml010074 aide[52379]: SHA256 :
slrY4Nm9xF8beGMdL02mYlTTkCs2gt4R
Mar 05 05:05:10 pml010074 aide[52379]: Rpne2M/qcts=
Mar 05 05:05:10 pml010074 aide[52379]: SHA512 :
2bNiBZFbXmAlHxqzxlgnAJsOeQIkmTbS
Mar 05 05:05:10 pml010074 aide[52379]:
b9j/WmbWog4FES+Yvwsm5OjGxHf4W6Qm
Mar 05 05:05:10 pml010074 aide[52379]: pkagyuFvM7F8HybvTFvNjg==
Mar 05 05:05:10 pml010074 aide[52379]: RMD160 :
1xlewnEEsoX00gbv+NeDwv8AMiY=
Mar 05 05:05:10 pml010074 aide[52379]: TIGER :
js2XdE7jewHPfRXr0rbMuLuqvV1XgSon
Mar 05 05:05:10 pml010074 aide[52379]: CRC32 : ehJu7g==
Mar 05 05:05:10 pml010074 aide[52379]: WHIRLPOOL :
DDDnQNMaFOwDFDKve6V0nVbovGvJ4Mea
Mar 05 05:05:10 pml010074 aide[52379]:
Gb3aVynaeKFCXIGK47OOPqodqHBVdfRK
Mar 05 05:05:10 pml010074 aide[52379]: rLHRzomlXVicUDFUsU/0Bg==
Mar 05 05:05:10 pml010074 aide[52379]: GOST :
8/Gxe3dVGNAtR9Y/DnihQ2m3midbGwqP
Mar 05 05:05:10 pml010074 aide[52379]: QOChq5hz4fQ=
Mar 05 05:05:10 pml010074 aide[52379]: STRIBOG256:
I+jdJuHZfgj8YEytbDVP7fA+cVA6eY0y
Mar 05 05:05:10 pml010074 aide[52379]: JMuAlQq3pRg=
Mar 05 05:05:10 pml010074 aide[52379]: STRIBOG512:
6lYBMeTsjfwhSFLM58F37jUmUZwaf34K
Mar 05 05:05:10 pml010074 aide[52379]:
luCtteWaRt1xEVUyzlLGcXTa6iBBvmyE
Mar 05 05:05:10 pml010074 aide[52379]: LjO5m2qVOwMfE7N276UvWw==
Mar 05 05:05:10 pml010074 aide[52379]:
End timestamp: 2025-03-05
05:05:10 +0100 (run time: 5m 2s)
Mar 05 05:05:10 pml010074 systemd[1]: aidecheck.service: Deactivated
successfully.
Mar 05 05:05:10 pml010074 systemd[1]: aidecheck.service: Consumed 5min
20.571s CPU time, 5.4G memory peak.
---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<
But when I start the check manually, I only see this as console output:
---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<
[root at pml010074 ~]# aide --check
Start timestamp: 2025-03-05 19:21:43 +0100 (AIDE 0.18.8)
AIDE found NO differences between database and filesystem. Looks okay!!
Number of entries: 468334
---------------------------------------------------
The attributes of the (uncompressed) database(s):
---------------------------------------------------
http://10.0.0.40/local/pml010074.aide-database
MD5 : xFJfV2Jo2OYW5Xq0168Y4Q==
SHA1 : ZNJ7ispZ5DNdtAq1ZTWcVCzwBeQ=
SHA256 : slrY4Nm9xF8beGMdL02mYlTTkCs2gt4R
Rpne2M/qcts=
SHA512 : 2bNiBZFbXmAlHxqzxlgnAJsOeQIkmTbS
b9j/WmbWog4FES+Yvwsm5OjGxHf4W6Qm
pkagyuFvM7F8HybvTFvNjg==
RMD160 : 1xlewnEEsoX00gbv+NeDwv8AMiY=
TIGER : js2XdE7jewHPfRXr0rbMuLuqvV1XgSon
CRC32 : ehJu7g==
WHIRLPOOL : DDDnQNMaFOwDFDKve6V0nVbovGvJ4Mea
Gb3aVynaeKFCXIGK47OOPqodqHBVdfRK
rLHRzomlXVicUDFUsU/0Bg==
GOST : 8/Gxe3dVGNAtR9Y/DnihQ2m3midbGwqP
QOChq5hz4fQ=
STRIBOG256: I+jdJuHZfgj8YEytbDVP7fA+cVA6eY0y
JMuAlQq3pRg=
STRIBOG512: 6lYBMeTsjfwhSFLM58F37jUmUZwaf34K
luCtteWaRt1xEVUyzlLGcXTa6iBBvmyE
LjO5m2qVOwMfE7N276UvWw==
End timestamp: 2025-03-05 19:26:48 +0100 (run time: 5m 5s)
---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<
In the syslog, I then find:
---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<
Mar 05 19:26:48 pml010074 aide[57076]: Start timestamp: 2025-03-05
19:21:43 +0100 (AIDE 0.18.8)
Mar 05 19:26:48 pml010074 aide[57076]: AIDE found NO differences between
database and filesystem. Looks okay!!
Mar 05 19:26:48 pml010074 aide[57076]:
Number of entries: 468334
Mar 05 19:26:48 pml010074 aide[57076]:
---------------------------------------------------
The attributes of the
(uncompressed) database(s):
---------------------------------------------------
Mar 05 19:26:48 pml010074 aide[57076]:
Mar 05 19:26:48 pml010074 aide[57076]:
http://10.0.0.40/local/pml010074.aide-database
Mar 05 19:26:48 pml010074 aide[57076]: MD5 : xFJfV2Jo2OYW5Xq0168Y4Q==
Mar 05 19:26:48 pml010074 aide[57076]: SHA1 :
ZNJ7ispZ5DNdtAq1ZTWcVCzwBeQ=
Mar 05 19:26:48 pml010074 aide[57076]: SHA256 :
slrY4Nm9xF8beGMdL02mYlTTkCs2gt4R
Mar 05 19:26:48 pml010074 aide[57076]: Rpne2M/qcts=
Mar 05 19:26:48 pml010074 aide[57076]: SHA512 :
2bNiBZFbXmAlHxqzxlgnAJsOeQIkmTbS
Mar 05 19:26:48 pml010074 aide[57076]:
b9j/WmbWog4FES+Yvwsm5OjGxHf4W6Qm
Mar 05 19:26:48 pml010074 aide[57076]: pkagyuFvM7F8HybvTFvNjg==
Mar 05 19:26:48 pml010074 aide[57076]: RMD160 :
1xlewnEEsoX00gbv+NeDwv8AMiY=
Mar 05 19:26:48 pml010074 aide[57076]: TIGER :
js2XdE7jewHPfRXr0rbMuLuqvV1XgSon
Mar 05 19:26:48 pml010074 aide[57076]: CRC32 : ehJu7g==
Mar 05 19:26:48 pml010074 aide[57076]: WHIRLPOOL :
DDDnQNMaFOwDFDKve6V0nVbovGvJ4Mea
Mar 05 19:26:48 pml010074 aide[57076]:
Gb3aVynaeKFCXIGK47OOPqodqHBVdfRK
Mar 05 19:26:48 pml010074 aide[57076]: rLHRzomlXVicUDFUsU/0Bg==
Mar 05 19:26:48 pml010074 aide[57076]: GOST :
8/Gxe3dVGNAtR9Y/DnihQ2m3midbGwqP
Mar 05 19:26:48 pml010074 aide[57076]: QOChq5hz4fQ=
Mar 05 19:26:48 pml010074 aide[57076]: STRIBOG256:
I+jdJuHZfgj8YEytbDVP7fA+cVA6eY0y
Mar 05 19:26:48 pml010074 aide[57076]: JMuAlQq3pRg=
Mar 05 19:26:48 pml010074 aide[57076]: STRIBOG512:
6lYBMeTsjfwhSFLM58F37jUmUZwaf34K
Mar 05 19:26:48 pml010074 aide[57076]:
luCtteWaRt1xEVUyzlLGcXTa6iBBvmyE
Mar 05 19:26:48 pml010074 aide[57076]: LjO5m2qVOwMfE7N276UvWw==
Mar 05 19:26:48 pml010074 aide[57076]:
End timestamp: 2025-03-05
19:26:48 +0100 (run time: 5m 5s)
---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<
Why is the part “The attributes of the (uncompressed) database(s):”
output twice in the timer-controlled check?
Am I doing something wrong in the configuration or am I misunderstanding
something?
Best regards
--
Django (Bastard Operator from Hell [BOfH])
aka Michael Nausch
Gänsbrunnenweg 6
85652 Pliening
Tel.: 08121 883176
Fax.: 08121 883179
Mail: <mailto:django at nausch.org>
https://wetterstation-pliening.info
https://ebersberger-liedersammlung.de
https://dokuwiki.nausch.org
More information about the Aide
mailing list