package or service help me moritor file on directadmin

xquatavn · 07-20-2012, 09:16 PM

hi all friend
for along time, i don;t comeback here
now i really have problem with help all friend
yesterday i check all logs ftp, httpd, directadmin, ssh
i find some problem, my logs httpd is empty
-rw-r--r-- 1 root root 0 Jul 15 04:02 access_log
-rw-r--r-- 1 root root 0 Jul 8 04:02 access_log.1
-rw-r--r-- 1 root root 0 Jul 1 04:02 access_log.2
-rw-r--r-- 1 root root 0 Jun 24 04:04 access_log.3
how package or service help me moritor file which i install on directadmin with centos server
ex: when anyuser change or replace or delete file, i will notice for me
thanks for all support

Noway2 · 07-23-2012, 04:42 AM

Quote:

when anyuser change or replace or delete file, i will notice for me

A HIDS program like Aide should be able to do this for you. By default, it does not look in "user" space but is designed to monitor for changes to the system binaries. You can adjust the behavior to suit your needs. The Aide users manual and the readilly available "how to" documents will both explain how to do this and give you step by step instructions. If you wish to modify the configuration to monitor user space files, you WILL need to read and understand how the program works.