1. 監(jiān)控路徑并打印所有發(fā)生在該路徑的事件.
代碼如下:
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <sys/inotify.h>
#include <unistd.h>
#define EVENT_NUM 12
char *event_str[EVENT_NUM] =
{
"IN_ACCESS",
"IN_MODIFY",
"IN_ATTRIB",
"IN_CLOSE_WRITE",
"IN_CLOSE_NOWRITE",
"IN_OPEN",
"IN_MOVED_FROM",
"IN_MOVED_TO",
"IN_CREATE",
"IN_DELETE",
"IN_DELETE_SELF",
"IN_MOVE_SELF"
};
int main(int argc, char *argv[])
{
int fd;
int wd;
int len;
int nread;
char buf[BUFSIZ];
struct inotify_event *event;
int i;
if(argc < 2)
{
fprintf(stderr, "%s path/n", argv[0]);
return -1;
}
fd = inotify_init();
if( fd < 0 )
{
fprintf(stderr, "inotify_init failed/n");
return -1;
}
wd = inotify_add_watch(fd, argv[1], IN_ALL_EVENTS);
if(wd < 0)
{
fprintf(stderr, "inotify_add_watch %s failed/n", argv[1]);
return -1;
}
buf[sizeof(buf) - 1] = 0;
while( (len = read(fd, buf, sizeof(buf) - 1)) > 0 )
{
nread = 0;
while( len > 0 )
{
event = (struct inotify_event *)&buf[nread];
for(i=0; i<EVENT_NUM; i++)
{
if((event->mask >> i) & 1)
{
if(event->len > 0)
fprintf(stdout, "%s --- %s/n", event->name, event_str[i]);
else
fprintf(stdout, "%s --- %s/n", " ", event_str[i]);
}
}
nread = nread + sizeof(struct inotify_event) + event->len;
len = len - sizeof(struct inotify_event) - event->len;
}
}
return 0;
}
運(yùn)行 inotify_watch 監(jiān)控一個(gè)目錄:
$ ./inotify_watch test/
...
--- IN_OPEN
--- IN_CLOSE_NOWRITE
.tmp.swp --- IN_CREATE
.tmp.swp --- IN_OPEN
.tmp.swpx --- IN_CREATE
.tmp.swpx --- IN_OPEN
.tmp.swpx --- IN_CLOSE_WRITE
.tmp.swpx --- IN_DELETE
.tmp.swp --- IN_CLOSE_WRITE
.tmp.swp --- IN_DELETE
.tmp.swp --- IN_CREATE
.tmp.swp --- IN_OPEN
.tmp.swp --- IN_MODIFY
--- IN_OPEN
--- IN_CLOSE_NOWRITE
.tmp.swp --- IN_MODIFY
...
從上面的結(jié)果可以看到在 test 目錄中使用 vim 創(chuàng)建一個(gè) tmp 文件, 產(chǎn)生很多的冗雜事件. 因此需要對(duì)監(jiān)控的事件做出小范圍的選擇而不是 IN_ALL_EVENTS .
2. IN_MOVE_SELF 和 IN_DELETE_SELF 事件
由于個(gè)人水平, 曾經(jīng)對(duì)這兩個(gè)事件的含義并沒(méi)有理解正確. 當(dāng)監(jiān)控 path 時(shí)( path可以是文件或目錄),
$ ./inotify_watch path
執(zhí)行
$ rm -f path
則發(fā)生 IN_DELETE_SELF 事件;
執(zhí)行
mv path path2
則發(fā)生 IN_MOVE_SELF 事件.
3. 監(jiān)控目錄和文件
監(jiān)控目錄中內(nèi)容改變應(yīng)監(jiān)控的事件:
IN_CREATE | IN_DELETE | IN_DELETE_SELF | IN_MODIFY | IN_MOVE_SELF | IN_MOVED_FROM | IN_MOVDED_TO
監(jiān)控文件內(nèi)容的改變應(yīng)監(jiān)控的事件:
IN_DELETE_SELF | IN_MODIFY | IN_MOVE_SELF
