realtime filesystem monitoring program using inotify


inotify (inode notify) is a Linux kernel subsystem that monitors events in filesystems and reports those events to applications in real time.

inotify can be used to monitor individual files or directories. When a directory is monitored, inotify will return events for the directory itself and for files inside the directory.

iWatch is a Perl wrap to inotify to monitor changes in specific directories or files, sending alarms to the system administrator (or other destination) in real time. It can:

  - Send notifications via email about changes.
  - Take programmable actions immediately, as emitting alerts via
    XMPP (jabber) messengers, Telegram or executing a local program
    or script.
  - Act as HIDS (Host-based Intrusion Detection System) or an
    integrity checker, complementing the firewall system in
    networks and improving the security.

iWatch can run as a simple command, as well a daemon.

A good example of iWatch usage is to monitor the pages directory in webservers to warn, in real time, about defacements or file insertions. Other example is to synchronize configuration files between machines, when they are changed, as in DHCP servers acting in failover mode. You also use to synchronize files, via rsync, when these files are changed.

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V



Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install iwatch