{"id":13531010,"url":"https://github.com/nowsecure/fsmon","last_synced_at":"2025-05-14T23:04:42.670Z","repository":{"id":43259464,"uuid":"49590440","full_name":"nowsecure/fsmon","owner":"nowsecure","description":"monitor filesystem on iOS / OS X / Android / FirefoxOS / Linux","archived":false,"fork":false,"pushed_at":"2025-05-05T15:07:12.000Z","size":2520,"stargazers_count":944,"open_issues_count":23,"forks_count":157,"subscribers_count":50,"default_branch":"master","last_synced_at":"2025-05-05T15:58:40.262Z","etag":null,"topics":["android","dynamic-analysis","filesystem","linux","nowsecure","osx","tracing"],"latest_commit_sha":null,"homepage":"https://www.nowsecure.com","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nowsecure.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-01-13T17:38:34.000Z","updated_at":"2025-05-05T15:07:15.000Z","dependencies_parsed_at":"2024-06-13T15:19:14.085Z","dependency_job_id":"a91581c3-4c06-461d-930c-251e12ed1272","html_url":"https://github.com/nowsecure/fsmon","commit_stats":null,"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nowsecure%2Ffsmon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nowsecure%2Ffsmon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nowsecure%2Ffsmon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nowsecure%2Ffsmon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nowsecure","download_url":"https://codeload.github.com/nowsecure/fsmon/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254243358,"owners_count":22038046,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["android","dynamic-analysis","filesystem","linux","nowsecure","osx","tracing"],"created_at":"2024-08-01T07:00:58.992Z","updated_at":"2025-05-14T23:04:37.638Z","avatar_url":"https://github.com/nowsecure.png","language":"C","readme":"# fsmon\n\n![ci](https://github.com/nowsecure/fsmon/actions/workflows/ci.yml/badge.svg?branch=master)\n\nFileSystem Monitor utility that runs on Linux, Android, iOS and OSX.\n\nBrought to you by Sergi Àlvarez at Nowsecure and distributed under the MIT license.\n\nContact: pancake@nowsecure.com\n\n## Usage\n\nThe tool retrieves file system events from a specific directory and shows them in colorful format or in JSON.\n\nIt is possible to filter the events happening from a specific program name or process id (PID).\n\n```\n$ ./fsmon -h\nUsage: ./fsmon-macos [-Jjc] [-a sec] [-b dir] [-B name] [-p pid] [-P proc] [path]\n -a [sec]  stop monitoring after N seconds (alarm)\n -b [dir]  backup files to DIR folder (EXPERIMENTAL)\n -B [name] specify an alternative backend\n -c        follow children of -p PID\n -f        show only filename (no path)\n -h        show this help\n -j        output in JSON format\n -J        output in JSON stream format\n -n        do not use colors\n -L        list all filemonitor backends\n -p [pid]  only show events from this pid\n -P [proc] events only from process name\n -v        show version\n [path]    only get events from this path\nExamples:\n fsmon /data\n fsmon -J / | jq -r .filename\n fsmon -B fanotify /home\n$\n```\n\nBackends\n--------\n\nfsmon filesystem information is taken from different backends depending on the operating system and apis available.\n\nThis is the list of backends that can be listed with `fsmon -L`:\n\n* inotify (linux / android)\n* fanotify (linux \u003e 2.6.36 / android with custom kernel)\n* devfsev (osx /dev/fsevents - requires root)\n* kqueue (xnu - requires root)\n* kdebug (bsd?, xnu - requires root)\n* fsevapi (osx filesystem monitor api)\n\nCompilation\n-----------\n\nfsmon is a portable tool. It works on iOS, OSX, Linux and Android (x86, arm, arm64, mips)\n\n*Linux*\n\n\t$ make\n\n*OSX + iOS fatbin*\n\n\t$ make\n\n*iOS*\n\n\t$ make ios\n\n*Android*\n\n\t$ make android NDK_ARCH=\u003cARCH\u003e ANDROID_API=\u003cAPI\u003e\n\nTo get fsmon installed system wide just type:\n\n\t$ make install\n\nChanging installation path...\n\n\t$ make install PREFIX=/usr DESTDIR=/\n","funding_links":[],"categories":["Dynamic Analysis","C"],"sub_categories":["nowsecure"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnowsecure%2Ffsmon","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnowsecure%2Ffsmon","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnowsecure%2Ffsmon/lists"}