Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 21 guests and 2 members online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Resourcesarrow Toolsarrow Tool to track changes? - Linux/Unix
Ethical Hacker Community Forums
December 02, 2008, 07:27:33 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Tool to track changes? - Linux/Unix  (Read 1667 times)
0 Members and 1 Guest are viewing this topic.
Manu Zacharia (-M-)
Full Member
***
Offline Offline

Posts: 195



View Profile WWW
« on: June 29, 2008, 09:31:31 PM »

Hi All,

I am looking for a linux based tool (very similar to InCtrl5) that will help me identify the changes resulting from a particular action, i.e., changes made during an installation, files accessed, modified, changed, added, etc.

With InCtrl5, the process is very easy, just 3 steps:

  • Run InCtrl5 to create a snapshot of the existing system
  • Run the applicaiton / change the configuration / install the configuration
  • Run InCtrl5 again to generate the report that will reflect the changes made to the system

Any similar tools for linux?
Logged

Manu Zacharia
Certified ISO 27001:2005 (Information Security Management System) Lead Auditor
Promote the Information Security Day
Visit - http://www.informationsecurityday.com
shakuni
Jr. Member
**
Offline Offline

Posts: 78


View Profile
« Reply #1 on: June 29, 2008, 10:55:11 PM »

Tripwire, AIDE, FCheck etc. may be used for the purpose.
Logged

There is no rule, law or tradition that apply universally... including this one.
jimbob
Sr. Member
****
Offline Offline

Posts: 316



View Profile WWW
« Reply #2 on: June 30, 2008, 03:13:20 AM »

You might consider running strace to log the system calls made by the software installer. It should show you every file access, sockets created etc. It's not the easiest to read but you will see all the program activity. make sure you use the flag that follows fork() to monitor any child processes.

Jimbob
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.042 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.