3
votes
2answers
64 views

Monitor when read/write on metadata or mmaped files hit the disk

On a server hosting a wide range of websites, I often see IO becoming a bottleneck without being able to identify the processes responsible of IO operations with tools such as iotop, iostat or sar. I ...
1
vote
1answer
95 views

File monitoring to pre-empt hacker

We have a hacker occasionally attempting to hack a site, and so far unsuccessful, but I would like a way to determine if the site has been compromised (i.e., files edited). The type of attacks are LFI ...
0
votes
0answers
28 views

Which of HIDS can do this?

I'm currently in choosing of HIDS ( Host-based intrusion detection system ). I'm discovery etckeeper on my ubuntu. My question is: Which of HIDS can trace each file on the filesystem? E.g. keep ...
3
votes
2answers
786 views

Filesystem monitoring

A script where we need to come up with a way for the disk space monitoring to be smarter. On smaller file systems, we still want to alert at 90% full, but on larger file sytems, we should only alert ...
1
vote
3answers
501 views

What logs would be written if file system is full in UNIX?

I am working on a unix server and I guess during some time in past the file system had been full. However, I need some solid data to prove it. Will there be any OS logs or something of that sort to ...
2
votes
2answers
714 views

How to detect and stop user from deleting particular file on Linux?

Is it possible to monitor user actions on the file system and prevent him from performing particular actions? Can inotify only monitor actions on the file system? What about fanotify? There's very ...
14
votes
5answers
20k views

Script to monitor folder for new files?

How do I detect new files in a folder with a bash script? I would like to process the files as soon as they are created in the folder. Is this possible to do so or do I have to schedule a script with ...
11
votes
5answers
409 views

Which application should I blame for compulsively creating a directory again and again?

There's an application on my system which keeps creating an empty ~/Desktop directory again and again. I can't stand capital letters in my home, nor I can stand this “desktop” thingy. So, as picky as ...