Find the answer to your Linux question:
Results 1 to 2 of 2
Hi everyone! I'm looking for a way to "spy" a certain subdirectory in a shared network disk. Every day I find around 40-50 .exe files, all spyware, i this directory. ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Sep 2003
    Posts
    25

    Directory spy


    Hi everyone!

    I'm looking for a way to "spy" a certain subdirectory in a shared network disk. Every day I find around 40-50 .exe files, all spyware, i this directory. For what I've seen Samba won't tell me what IP are theese files coming from, or in other words: who is writing those files there.
    How can I "monitorize" that subdirectory so I'll be able to find the "agressor"?

    Thanks a lot in advance!!!!

  2. #2
    Linux User
    Join Date
    Apr 2005
    Location
    Ohio
    Posts
    326
    you could enable the samba vfs audit or extd_audit modules..
    http://tr.samba.org/samba/docs/man/S...html#id2602914

    Detailed logging can be obtained per user, per client machine, etc. This requires the above together with the creative use of the log file settings.

    An example of detailed per-user and per-machine logging can be obtained by setting log file = /var/log/samba/%U.%m.log.
    far...out

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •