afick - Another File Integrity Checker |
afick - Another File Integrity Checker
The goal of this program is to monitor what change on your host : new/deleted/modified files. So it can be used as an intrusion detection system ( by integrity checking ). It is designed to be a portable clone of aide (Advanced Intrusion Detection Environment), or Tripwire software.
You should launch it regulary (by cron for example) and after any software change.
This is a command-line program, you can use afick-tk.pl
if you
prefer a graphical interface.
afick use posix syntaxe, which allow many possibilities :
You have to use one this mandatory action :
You can use any number of the following options :
if no config file on command line, afick try to open /etc/afick.conf (unix) or windows.conf (windows) as default config
for config file syntax see afick.conf(5)
each database is composed of 3 binary files :
To use this program, you must
first adjust the config file to your needs : see afick.conf(5) for the syntaxe)
then initiate the database with :
afick -c linux.conf --init
then you can compare with
afick -c linux.conf -k
or compare and update with
afick -c linux.conf --update
An exit status of 0 means no differences were found, non-zero means some differences were found. The non-zero value is a bitmap represent- ing the type of difference found:
this program only use perl and its standard modules.
Copyright (c) 2002,2003,2004 Eric Gerbier All rights reserved.
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
Eric Gerbier
you can report any bug or suggest to gerbier@users.sourceforge.net
afick - Another File Integrity Checker |