Re: [gentoo-user] kernel notification of file system changes

[Helmut Jarausch <jarausch@igpm.rwth-aachen.de>]

On  5 May, Iain Buchanan wrote:
> Hi,
> 
> I'm looking for some kernel-based notification of changes to my file
> system.  I've been looking at inotify, but it's not exactly what I want.
> 
> Basically I want to know if _any_ write occurs anywhere.  I don't want
> to register a whole bunch of files to watch, I just want to watch an
> entire mount.  When a file is changed (ie. a write operation occurs), I
> then want to add that file or fd to a list in RAM.  That's all.
> 
> I know this may be a lot of data, considering streams and devices, but I
> can filter out /dev, /proc, etc. and just focus on "real" files.
> 
> Is there anything that can do this?
> 

Might be I've just asked a similar question on the ZSH mailing list.
Please have a look at inotifywatch from the sys-fs/inotify-tools
package. It can watch a directory tree recursively.

I hope this helps,
Helmut.