I'm having trouble finding on the boards a good "howto" use md5deep on a regular basis (i.e. monthly) to store and check file md5sums.

All I seem to be able to find is that md5deep is a good tool to do this and I have downloaded and install v4.0 from weebtech (thanks).

 

Can someone please point me in the right direction?

 

Thanks!

Create a script the runs md5deep and then compares the results to the previous run and sends an e-mail if there's a difference. Put the script file in cron daily.

Create a script the runs md5deep and then compares the results to the previous run and sends an e-mail if there's a difference. Put the script file in cron daily.

 

and for those of us that aren't any good at scripting ?

I can supply a script after I return home on the 23rd. Someone else may get to it faster.

Thanks!

 

Sent from my SGH-I727R using Tapatalk

I second that request.

I finally looked into this. It's not practical to run daily unless you only want to check a small number of files. It takes 14 hours to run on a 2TB drive. Monthly checks may be practical.

 

Hashdeep will create a file of hashes for a specified directory. Hashdeep has an audit mode that will compare the hashes to the the corresponding files and report any changes to the files.

 

Instructions are here: http://md5deep.sourceforge.net/start-hashdeep.html

 

In order to run a cron job with email you'll need a script like this:

#!/bin/bash
hashdeep -r -a -k known.txt myfiles | mail -s hash-audit root