https://github.com/seb-m/pyinotify

在线安装pyinotify：

  1. # pip install pyinotify

它将从默认存储库安装可用版本。

离线安装或者git仓库获取最新包

pyinotify-master.zip

  1. # git clone https://github.com/seb-m/pyinotify.git
  2. # cd pyinotify/
  3. # ls
  4. # pythonXXX setup.py install

在Linux中使用pyinotify

  1. # python -m pyinotify -v /目录

监控目录更改

接下来，我们会随时关注Web目录（ /var/www/html/debian.cn ）的任何更改：

  1. # pythonXXX -m pyinotify -v /var/www/html/

Python脚本

复制以下保存为 .py文件

  2. import pyinotify
  5. class MyEventHandler(pyinotify.ProcessEvent):
  7.     def process_IN_ACCESS(self, event):
  8.         """
  9.         文件被访问
  10.         :param event:
  11.        :return:
  12.         """
  13.         print("件被访问:  ", event.pathname)
  15.     def process_IN_ATTRIB(self, event):
  16.         """
  17.         文件属性被修改，如chmod、chown、touch等
  18.         :param event:
  19.         :return:
  20.         """
  21.         print("文件属性被修改:", event.pathname)
  23.     def process_IN_CLOSE_NOWRITE(self, event):
  24.         """
  25.         不可写文件被close
  26.         :param event:
  27.         :return:
  28.         """
  29.         print("不可写文件被close event:", event.pathname)
  32.     def process_IN_CLOSE_WRITE(self, event):
  33.         """
  34.         可写文件被close
  35.         :param event:
  36.         :return: rsync -av /etc/passwd  192.168.204.168:/tmp/passwd.txt
  37.         """
  38.         print("可写文件被close:", event.pathname)
  41.     def process_IN_CREATE(self, event):
  42.         """
  43.         创建新文件
  44.         :param event:
  45.         :return:
  46.         """
  47.         print("创建新文件:", event.pathname)
  50.     def process_IN_DELETE(self, event):
  51.         """
  52.         文件被删除
  53.         :param event:
  54.         :return:
  55.         """
  56.         print("文件被删除:", event.pathname)
  59.     def process_IN_MODIFY(self, event):
  60.         """
  61.         文件被修改
  62.         :param event:
  63.         :return:
  64.         """
  65.         print("文件被修改:", event.pathname)
  68.     def process_IN_OPEN(self, event):
  69.         """
  70.          文件被打开
  71.         :param event:
  72.         :return:
  73.         """
  74.         print("OPEN event:", event.pathname)
  76. if __name__ == '__main__':
  77.     monitor_obj = pyinotify.WatchManager()
  78.     # path监控的目录
  79.     monitor_obj.add_watch(path, pyinotify.ALL_EVENTS, rec=True)
  81.     # event handler
  82.     event_handler= MyEventHandler()
  84.     # notifier
  85.     monitor_loop= pyinotify.Notifier(monitor_obj, event_handler)
  86.     monitor_loop.loop()

运行

  1. python3 脚本名称