Re: Looking for a file monitor

[Wei Hu]

>
> It looks to me like you could use an LD_PRELOAD'ed library to monitor
> such events?

That's a good idea.
Is there an existing tool, or do I need to write a system call wrapper?

>
> Alternatively, consider something like the honeynet monitoring kernel
> monitor module, perhaps.

Could you give more information here?
I'm not familiar with honeynet, thanks.

>
> Rogan
>
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/