[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: A tripwire annoyance

On Wed, Oct 06, 2004 at 02:53:19PM +0100, Dale Amon wrote:
> I've been running tripwire on a particular server
> for some years and finally got annoyed at skimming through
> the large reports, so I began an update... After 24 hours
> I thought it was hung and killed it. I restarted it
> with verbose and found that it is indeed working. And
> just for the hell of it, I've left it running to see
> how long it would take.

Which version of tripwire is this?  It sounds like behavior I'd expect
to see with the ancient ancient ancient version that we shipped prior to
woody (there is no tripwire in woody), but I've never seen anything like
that with tripwire 2+.

How did you perform this update?  The "right way" to do it is to do
'tripwire -m u <reportfile>', which doesn't actually look at the
filesystem at all but simply merges the filesystem data contained in the
report into the database.


Attachment: pgpO9ke2D4mLO.pgp
Description: PGP signature

Reply to: