使用 inotify 監控文件系統的活動

% uname -a  Linux ubuntu-desktop 2.6.24-19-generic #1 SMP ... i686 GNU/Linux  

#include <stdio.h>  #include <stdlib.h>  #include <errno.h>  #include <sys/types.h>  #include <sys/inotify.h>    #define EVENT_SIZE  ( sizeof (struct inotify_event) )  #define BUF_LEN     ( 1024 * ( EVENT_SIZE + 16 ) )    int main( int argc, char **argv )   {    int length, i = 0;    int fd;    int wd;    char buffer[BUF_LEN];      fd = inotify_init();      if ( fd < 0 ) {      perror( "inotify_init" );    }      wd = inotify_add_watch( fd, "/home/strike",                            IN_MODIFY | IN_CREATE | IN_DELETE );    length = read( fd, buffer, BUF_LEN );        if ( length < 0 ) {      perror( "read" );    }        while ( i < length ) {      struct inotify_event *event = ( struct inotify_event * ) &buffer[ i ];      if ( event->len ) {        if ( event->mask & IN_CREATE ) {          if ( event->mask & IN_ISDIR ) {            printf( "The directory %s was created.\n", event->name );                 }          else {            printf( "The file %s was created.\n", event->name );          }        }        else if ( event->mask & IN_DELETE ) {          if ( event->mask & IN_ISDIR ) {            printf( "The directory %s was deleted.\n", event->name );                 }          else {            printf( "The file %s was deleted.\n", event->name );          }        }        else if ( event->mask & IN_MODIFY ) {          if ( event->mask & IN_ISDIR ) {            printf( "The directory %s was modified.\n", event->name );          }          else {            printf( "The file %s was modified.\n", event->name );          }        }      }      i += EVENT_SIZE + event->len;    }      ( void ) inotify_rm_watch( fd, wd );    ( void ) close( fd );      exit( 0 );  }  

struct inotify_event   {    int wd; 		/* The watch descriptor */    uint32_t mask; 	/* Watch mask */    uint32_t cookie;	/* A cookie to tie two events together */    uint32_t len;		/* The length of the filename found in the name field */    char name __flexarr;	/* The name of the file, padding to the end with NULs */	  }  

% cc -o watcher watcher.c   % ./watcher  

% cd $HOME  % touch a b c  The file a was created.  The file b was created.  The file c was created.    % ./watcher  &   % rm a b c  The file a was deleted.  The file b was deleted.  The file c was deleted.    % ./watcher  &   % touch a b c  The file a was created.  The file b was created.  The file c was created.    % ./watcher  &   % cat /etc/passwd >> a  The file a was modified.    % ./watcher  &   % mkdir d  The directory d was created.   

int return_value;  fd_set descriptors;  struct timeval time_to_wait;    FD_ZERO ( &descriptors );  FD_SET( ..., &descriptors );  FD_SET ( fd, &descriptors );    ...    time_to_wait.tv_sec = 3;  time.to_waittv_usec = 0;    return_value = select ( fd + 1, &descriptors, NULL, NULL, &time_to_wait);    if ( return_value < 0 ) {  	/* Error */  }    else if ( ! return_value ) {  	/* Timeout */  }    else if ( FD_ISSET ( fd, &descriptors ) ) {  	/* Process the inotify events */  	...  }    else if ...  

% apt-cache search inotify  incron - cron-like daemon which handles filesystem events  inotail - tail replacement using inotify  inoticoming - trigger actions when files hit an incoming directory  inotify-tools - command-line programs providing a simple interface to inotify  iwatch - realtime filesystem monitoring program using inotify  libinotify-ruby - Ruby interface to Linux's inotify system  libinotify-ruby1.8 - Ruby interface to Linux's inotify system  libinotify-ruby1.9 - Ruby interface to Linux's inotify system  libinotifytools0 - utility wrapper around inotify  libinotifytools0-dev - Development library and header files for libinotifytools0  liblinux-inotify2-perl - scalable directory/file change notification  muine-plugin-inotify - INotify Plugin for the Muine music player  python-kaa-base - Base Kaa Framework for all Kaa Modules  python-pyinotify - Simple Linux inotify Python bindings  python-pyinotify-doc - Simple Linux inotify Python bindings  % sudo apt-get install inotify-tools  ...  Setting up inotify-tools.  

% wget \      http://internap.dl.sourceforge.net/sourceforge/inotify-tools/inotify-tools-3.13.tar.gz  % tar zxvf inotify-tools-3.13.tar.gz  inotify-tools-3.13/  inotify-tools-3.13/missing  inotify-tools-3.13/src/  inotify-tools-3.13/src/Makefile.in  ...  inotify-tools-3.13/ltmain.sh    % cd inotify-tools.3.13  % ./configure  % make  % make install   

% inotifywait -r  -m $HOME  Watches established.  

/home/strike OPEN,ISDIR  

use Linux::Inotify2;    my $inotify = new Linux::Inotify2   	or die "Unable to create new inotify object: $!";      # for Event:   Event->io (fd =>$inotify->fileno, poll => 'r', cb => sub { $inotify->poll });     # for Glib:   add_watch Glib::IO $inotify->fileno, in => sub { $inotify->poll };     # manually:   1 while $inotify->poll;     # add watchers   $inotify->watch ("/etc/passwd", IN_ACCESS, sub {      my $e = shift;      my $name = $e->fullname;      print "$name was accessed\n" if $e->IN_ACCESS;      print "$name is no longer mounted\n" if $e->IN_UNMOUNT;      print "$name is gone\n" if $e->IN_IGNORED;      print "events for $name have been lost\n" if $e->IN_Q_OVERFLOW;         # cancel this watcher: remove no further events      $e->w->cancel;   });