利用SHELL脚本监控文件改动

我记得这脚本应该是09年写的了,今天正好有个类似的需求,就拿出来分享一下。

一、说一下脚本功能:
1、针对某个目录进行监控 一旦有文件或其目录下的子目录有被 创建、删除、更改、重命名的操作,
     提示出来列出来具体操作了哪个文件或者哪个目录，可以做到发邮件。
2、可以排除监控目录下的某几个目录的监控(例如logs目录)

二、说一下用到的技术:
find md5sum diff stat(last_modyfi) 

三、下面是脚本内容: (可能环境不同,需要稍加修改。有问题给我留言!)

#!/bin/bash
tmppatha=/tmp/pathtmpa
tmppathb=/tmp/pathtmpb
if [ "$#" -ne "1" ]
      then
    echo "useage:`basename $0` [path]"
    exit 1
else
    cd $1 &> /dev/null ||{
echo "option [path] is not a real path ! "
    exit 1
    }
if [ -e $tmppatha ]
      then
    if [ -s $tmppatha ]
    then
    for i in `find . -type f `
    do
        md5sum $i >> $tmppathb
    done

    diff $tmppathb $tmppatha > /tmp/pathfilec
    if [ -s /tmp/pathfilec ]
    then
        echo "[Wroning:] $1 has been modify!  :   `date +%Y-%m-%d_%H:%M`"
        echo "modify file list :"
     for i in `cat /tmp/pathfilec | grep '^<'|awk '{print $3}'`
           do
          echo -n FILE: $i
          echo -n "    "
          echo -n MODIFY_TIME: `stat $i|grep 'Modify'|awk '{printf("%s %sn",$2,$3)}'`
          echo
           done

        rm -rf $tmppathb
    else
        rm -rf $tmppathb
    fi
        rm -rf /tmp/pathfilec &> /dev/null
    fi
else
    echo "pathtmp init"
    for i in `find . -type f `
    do
        md5sum $i >> $tmppatha
    done
    echo "pathtmp init ok!~"
    echo "run twice to start cheak!"
fi
fi