##################################################################### Tripwire is a application for monitoring access to systems. Any changes to files or inclusion of new files is logged in a database and mail is sent to root denoting the changes. <<<< The E-mail looks like and start out like this...........>>>>>> This is an automated report of possible file integrity changes, generated by the Tripwire integrity checker. To tell Tripwire that a file or entire directory tree is valid, as root run: /usr/sbin/tripwire -update [pathname|entry] If you wish to enter an interactive integrity checking and verification session, as root run: /usr/sbin/tripwire -interactive <<<<<<<<<<<<<>>>>>>>>>> You will continuely get E-mail about the same files unless you update the database. The first two commands instruct you in how to do this. Before you run the commands you will want to be in the /var/spool/tripwire directory. This is where tripwire looks for the database. In this dircetory is where you will find the original database. DO NOT MOVE IT OR DELETE IT. ##########################################################################