File monitoring in RedHat
 

Hi again,
Can someone recommend to me a good (preferably small) application that can monitor files on harddisk, such as addition, alteration or deletion ? Sometimes when I uninstall a package, I find several configuration files are left on the hd. If, unfortunate, the filename does not give much information as which package created it, so rpm -qf <filename> doesnt do much help.
Does RedHat has an inbuilt feature that allows file monitoring ? I came across a service called sgi_fam, is that the one ?

Thanx a lot

Try tripwire. It's probably a bit of overkill but the only thing I can think of.

Håkan