K1478: Checking BIG-IP or 3-DNS for files that have changed since installation

Non-Diagnostic

Original Publication Date: Nov 19, 2001

Update Date: Jan 8, 2016

Topic

Beginning with BIG-IP version 4.0, you can use the BIG-IP Installation Manager to check and verify the MD5 Checksums and file permissions of your BIG-IP installation.

This is useful when checking to see if any files have changed since the time BIG-IP was installed.

To verify the checksums and file permissions, type the following command: im ?V -a -l

The Installation Manager (im) verifies all files on the BIG-IP and compares them to the manifest file, /usr /local/db/im.log.gz.

By default, im does not verify configuration files. If you want to include configuration files in the output, use the -c option.

Following are the available options and how to the output report.

File verification (-V) -p name # only verify files from this package -f name # only verify this file -c # include config files (default excludes these) -a # all files on disk are traversed -l # list expected and as-is attributes to check for differences

Verification:

Each installed file is checked against installed attributes to determine if status has changed. The following information is provided.

Value Description F File type has changed S M Mode 5 MD5 checksum D Device major, minor numbers L U User id G Group id T Time stamp If it is a configuration file (these are expected to change)

[c] missing - File not found unknown - Not in database

Example output from the im ?V -a -l command:

The following output shows that the /var/log/messages file size, MD5 checksum and time stamp have changed.

-S-5----T /var/log/messages EX-rw-r--r-- support wheel 0 /var/log/messages IS-rw-r--r-- support wheel 488 /var/log/messages

The following output shows that the /var/run/utmp file size, MD5 checksum Group ID and time stamp have changed.

-SM5---GT /var/run/utmp EX-rw-r--r-- support wheel 720 /var/run/utmp IS-rw-rw-r-- support utmp 840 /var/run/utmp

The following output shows that the /usr/local/ucs/last_boot.ucs file is unknown. This means the file was not originally listed in the /usr/local/db/im.log.gz manifest file. Unknown files are often listed in this output, as files are created after the original installation and are not listed in the manifest file. unknown /usr/local/ucs/last_boot.ucs

Applies to:

Product: Legacy Products, BIG-IP 4.x, 3-DNS 4.6.4