Hashdeep: diferència entre les revisions

De WikiMar
Salta a la navegació Salta a la cerca
Línia 16: Línia 16:
===List new files or changed (not missing files)===
===List new files or changed (not missing files)===
  cd folder2
  cd folder2
  hashdeep -r -l -X -v -k hashdeep_$(date +%y%m%d).txt .
  hashdeep -r -l -X -k hashdeep_$(date +%y%m%d).txt .


* -r Recursive mode
* -r Recursive mode
* -l relative file paths
* -l relative file paths
* -X Negative matching (only list differences): Only those files NOT in the list of known hashes are displayed. Display each failed hash that does not match the list of known hashes
* -X Negative matching (only list differences): Only those files NOT in the list of known hashes are displayed. Display each failed hash that does not match the list of known hashes
* -v Verbose mode
* (-v Verbose mode, it does nothing?)
* -k Load list of known hashes
* -k Load list of known hashes
* hashdeep.txt File containing hashes
* hashdeep.txt File containing hashes

Revisió del 15:20, 24 gen 2016


Create hash file

cd folder1
hashdeep -r -l . > hashdeep_$(date +%y%m%d).txt
  • -r Recursive mode
  • -l relative file paths
  • -e Estimate time (optional)

To get a deterministic order, use -j0 which disables multithreading (see the man page)

Verify hash on the same or another folder

List new files or changed (not missing files)

cd folder2
hashdeep -r -l -X -k hashdeep_$(date +%y%m%d).txt .
  • -r Recursive mode
  • -l relative file paths
  • -X Negative matching (only list differences): Only those files NOT in the list of known hashes are displayed. Display each failed hash that does not match the list of known hashes
  • (-v Verbose mode, it does nothing?)
  • -k Load list of known hashes
  • hashdeep.txt File containing hashes
  • dir Name of the directory in question

List how the files have been moved, new files and changed (slower)

cd folder2
hashdeep -r -l -avv -k hashdeep_$(date +%y%m%d).txt .
  • -a audit mode: Each input file is compared against the set of knowns. An audit is said to pass if each input file is matched against exactly one file in set of knowns. Any collisions, new files, or missing files will make the audit fail
  • -vv More verbose mode (display list of files missing, new files and changed files)
    • -vvv More verbose mode (also list files that are OK)


MAN: http://md5deep.sourceforge.net/hashdeep.html More info: https://linhost.info/2010/05/using-hashdeep-to-ensure-data-integrity/