Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Robert Riches Newsgroups: comp.os.linux.misc Subject: Re: Noting EVERY File Write/Change/Delete in (near) Real Time ??? Date: 9 Sep 2022 03:29:17 GMT Organization: none-at-all Lines: 41 Message-ID: References: Reply-To: spamtrap42@jacob21819.net X-Trace: individual.net IQc7Vg9yfFq4PgreSRBxNgjTRjywmu+809rjYti7e8Ua0NYOjA Cancel-Lock: sha1:wuNSSdeh4O4UQFJAPK2tZ3iNQ8Y= User-Agent: slrn/1.0.3 (Linux) Xref: csiph.com comp.os.linux.misc:35616 On 2022-09-09, 25B.Z969 <25B.Z969@noda.net> wrote: > There are a couple of monitoring functions in Linux, but > they usually require being directed at specific folders, > which is not practical if there are hundreds/thousands > or worse. > > I look at softRAID ... and it's doing exactly what I'm > looking for as it mirrors changes super-promptly. There > is SOME tap into the lower-level kernel functions that > shows everything going on as it happens. I just don't > see a system function, or any GCC library, that can > provide the same utility. I'm not interested in duplication > though, just logging what's happened so I can do other > stuff with the info. > > Yea, yea ... you can run rsync on everything over and > over and over forever and have it build a log of what's > changed. I've used that for other projects. Alas that's > WAY too slow and uses too much CPU. Scanning is NOT > the way, I want notice of EVERY file write/rewrite > as it happens. > > Any ideas ? Words of wisdom ? SoftRAID tells me it CAN > be done, but I can't penetrate the code well enough to > see how it's doing the job. If by "softRAID" you mean mdadm-style kernel-supported RAID, that is for mirroring disks on a local machine. It works really well for that purpose. Perchance, might you be looking for something closer to a Distributed Replicated Block Device, aka DRBD? https://en.wikipedia.org/wiki/Distributed_Replicated_Block_Device HTH -- Robert Riches spamtrap42@jacob21819.net (Yes, that is one of my email addresses.)