1 rizwank 1.2 #!/bin/sh
2
3 #Audit Script - grabs useful info and packs it away
4 #(c) Rizwan Kassim 2005
5
6 mkdir /tmp/audit_ait
7 cd /tmp/audit_ait
8 touch $HOSTNAME.overall.log
9 echo "########## HOSTNAME, uname, w, whoami, id" >> $HOSTNAME.overall.log
10 echo $HOSTNAME >> $HOSTNAME.overall.log
11 uname -a >> $HOSTNAME.overall.log
12 w >> $HOSTNAME.overall.log
13 id >> $HOSTNAME.overall.log
14 echo "######### df mounts"
15 df >> $HOSTNAME.overall.log
16 touch $HOSTNAME.network.log
|
17 rizwank 1.3 echo "######### Network settings - netstat,services,chkconfig,ifconfig" >> $HOSTNAME.network.log
18 netstat -a >> $HOSTNAME.network.log
19 services --status-all >> $HOSTNAME.network.log
20 chkconfig --list >> $HOSTNAME.network.log
21 ps -aux >> $HOSTNAME.tasklist.log
22 ifconfig >> $HOSTNAME.network.log
23 echo "######## cronlist + cron jobs" >> $HOSTNAME.overall.log
24 crontab -l >> $HOSTNAME.overall.log
25 echo "## crontabs in var" >> $HOSTNAME.overall.log
26 cat /var/spool/cron/* >> $HOSTNAME.overall.log
27 ls /etc/cron* >> $HOSTNAME.overall.log
28 cp -r /etc/cron* .
29 du -ab > $HOSTNAME.dufile.log
30 du -b > $HOSTNAME.dudir.log
31 /etc/cron.daily/rpm
32 cp /var/logs/rpm* .
|