Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 Dec 1999 02:23:46 -0500 (EST)
From:      Mike Nowlin <mike@argos.org>
To:        Jim Durham <durham@w2xo.pgh.pa.us>
Cc:        Mike Smith <msmith@FreeBSD.ORG>, freebsd hackers <freebsd-hackers@FreeBSD.ORG>
Subject:   Re: Resolv.conf question
Message-ID:  <Pine.LNX.4.05.9912170219590.2534-100000@jason.argos.org>
In-Reply-To: <3859C580.A4B9FAD8@w2xo.pgh.pa.us>

next in thread | previous in thread | raw e-mail | index | archive | help

> > > Just for the sake of my curiosity, what was modifiying
> > > resolv.conf? Is this a security feature?

Ran into a similar "what's changing this file?" problem a while ago --
fstat(1) is your friend...

#!/bin/sh

while true
do
   fstat /etc/resolv.conf >> /fstatlogfile
done


Throw that into your crontab to start at 1:58 AM (right before the
modification takes place), and be there to kill it at 2:00 (after the
modification).  It's ugly, it's far from perfect, and it might not catch
really fast transitions, but it's been known to work...

mike




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.05.9912170219590.2534-100000>