Directory spy

[charales]

Hi everyone!

I'm looking for a way to "spy" a certain subdirectory in a shared network disk. Every day I find around 40-50 .exe files, all spyware, i this directory. For what I've seen Samba won't tell me what IP are theese files coming from, or in other words: who is writing those files there.
How can I "monitorize" that subdirectory so I'll be able to find the "agressor"?

Thanks a lot in advance!!!!

[farslayer]

you could enable the samba vfs audit or extd_audit modules..
http://tr.samba.org/samba/docs/man/S...html#id2602914

Detailed logging can be obtained per user, per client machine, etc. This requires the above together with the creative use of the log file settings.

An example of detailed per-user and per-machine logging can be obtained by setting log file = /var/log/samba/%U.%m.log.