Red Hat LINUX 7.2 Reference Manual page 176

176
11.9.1 Using twprint to View the Tripwire Database
You can also use twprint to view the entire database or information about selected files in the
Tripwire database. This is useful for seeing just how much information Tripwire is tracking on your
system.
To view the entire Tripwire database, type this command:
/usr/sbin/twprint -m d --print-dbfile | less
This command will generate a large amount of output, with the first few lines appearing similar to this:
Tripwire(R) 2.3.0 Database
Database generated by:
Database generated on:
Database last updated on:
=================================================================
Database Summary:
=================================================================
Host name:
Host IP address:
Host ID:
Policy file used:
Configuration file used:
Database file used:
Command line used:
=================================================================
Object Summary:
=================================================================
-----------------------------------------------------------------
# Section: Unix File System
-----------------------------------------------------------------
Mode
------
/
drwxr-xr-x
/bin
drwxr-xr-x
/bin/arch
-rwxr-xr-x
/bin/ash
-rwxr-xr-x
/bin/ash.static
Chapter 11:Installing and Configuring Tripwire
root
Tue Jan
Tue Jan
some.host.com
10.0.0.1
None
/etc/tripwire/tw.pol
/etc/tripwire/tw.cfg
/var/lib/tripwire/some.host.com.twd
/usr/sbin/tripwire --init
UID Size
---------- ---------- ----------
root (0) XXX
root (0) 4096
root (0) 2844
root (0) 64860
9 13:56:42 2001
9 16:19:34 2001
Modify Time
XXXXXXXXXXXXXXXXX
Mon Jan 8 08:20:45 2001
Tue Dec 12 05:51:35 2000
Thu Dec 7 22:35:05 2000