Csf & Lfd Directory File Watching

[chae]

Hi Yah,

Thanks for a magic piece of software Chirpy...made life so much easier

Got a question for everyone with the Directory File Watching section what directories are recommended on monitoring...obviously /home wouldn't as there would be files changing all the time. I've used these for a default to begin with:-

/bin
/usr/bin
/sbin
/usr/sbin
/etc
/usr/local/etc

Anyone else recommend others ?

Thanks in advance

 

[curriertech]

I have wondered about this as well! Any expert advice would be gladly accepted.

 

[mrprez]

I have mine watching the home folder. It has found several scripts that I had to eliminate.

John

 

[chirpy]

Some people like to use it to watch /var/spool/cron/ so that they are alerted whenever a cron job is added by users.

 

[chae]

I think this works a bit like ViperDB & any changes or additions the server admin gets notified...

I'm playing safe or probably gone overboard but have the following listed though there maybe others that I've missed out on:-

/var/spool/cron
/etc/X11
/etc/cron.d
/etc/cron.hourly
/etc/cron_daily
/etc/cron.weekly
/etc/cron.monthly
/etc/init.d
/etc/rc.d
/bin
/usr/bin
/sbin
/usr/sbin
/etc
/usr/local/etc
/etc/rc.d/rc.sysinit
/etc/inetd.conf
/etc/xinetd.conf
/bin/ps
/bin/ls
/usr/bin/w
/usr/bin/who
/bin/netstat
/bin/login
/bin/ps
/bin/ls
/etc/rc.local
/etc/rc.d/rc.local
/usr/local/etc/rc.local
/usr/local/etc/rc.d/rc.local
/etc/conf.d/local.start
/etc/init.d/boot.local
/dev

 

[jamesbond]

I also monitor:

/var/named/
/var/cpanel/users/