K1478: Checking BIG-IP or 3-DNS for files that have changed since installation
Non-Diagnostic
Original Publication Date: Nov 19, 2001
Update Date: Jan 8, 2016
Topic
Beginning with BIG-IP version 4.0, you can use the BIG-IP Installation Manager to check and verify the MD5 Checksums and file permissions of your BIG-IP installation.
This is useful when checking to see if any files have changed since the time BIG-IP was installed.
To verify the checksums and file permissions, type the following command: im ?V -a -l
The Installation Manager (im) verifies all files on the BIG-IP and compares them to the manifest file, /usr /local/db/im.log.gz.
By default, im does not verify configuration files. If you want to include configuration files in the output, use the -c option.
Following are the available options and how to read the output report.
File verification (-V) -p name # only verify files from this package -f name # only verify this file -c # include config files (default excludes these) -a # all files on disk are traversed -l # list expected and as-is attributes to check for differences
Verification:
Each installed file is checked against installed attributes to determine if status has changed. The following information is provided.
Value Description F File type has changed S File size M Mode 5 MD5 checksum D Device major, minor numbers L Symbolic link U User id G Group id T Time stamp If it is a configuration file (these are expected to change)
[c] missing - File not found unknown - Not in database
Example output from the im ?V -a -l command:
The following output shows that the /var/log/messages file size, MD5 checksum and time stamp have changed.
-S-5----T /var/log/messages EX-rw-r--r-- support wheel 0 /var/log/messages IS-rw-r--r-- support wheel 488 /var/log/messages
The following output shows that the /var/run/utmp file size, MD5 checksum Group ID and time stamp have changed.
-SM5---GT /var/run/utmp EX-rw-r--r-- support wheel 720 /var/run/utmp IS-rw-rw-r-- support utmp 840 /var/run/utmp
The following output shows that the /usr/local/ucs/last_boot.ucs file is unknown. This means the file was not originally listed in the /usr/local/db/im.log.gz manifest file. Unknown files are often listed in this output, as files are created after the original installation and are not listed in the manifest file. unknown /usr/local/ucs/last_boot.ucs
Applies to:
Product: Legacy Products, BIG-IP 4.x, 3-DNS 4.6.4