Python 的 pyinotify 模块 监控文件夹和文件的变动

官方参考：

https://github.com/seb-m/pyinotify/wiki/Events-types

https://github.com/seb-m/pyinotify/wiki/Install

 

最近在网上看到python有个pyinotify模块，其中他们可以监控文件夹内的文件的创建，修改，读取，删除等系列操作，我修改了下，添加了可以吧操作记录写到日志里的一点方法，下面就贴出代码了给大家分享下：#!/usr/bin/env python

import os
import datetime
import pyinotify
import logging
class MyEventHandler(pyinotify.ProcessEvent):
    logging.basicConfig(level=logging.INFO,filename='/var/log/monitor.log')
	#自定义写入那个文件，可以自己修改
    logging.info("Starting monitor...")
	
    def process_IN_ACCESS(self, event):
        print "ACCESS event:", event.pathname
	logging.info("ACCESS event : %s  %s" % (os.path.join(event.path,event.name),datetime.datetime.now()))
    
    def process_IN_ATTRIB(self, event):
        print "ATTRIB event:", event.pathname
	logging.info("IN_ATTRIB event : %s  %s" % (os.path.join(event.path,event.name),datetime.datetime.now()))
    
   def process_IN_CLOSE_NOWRITE(self, event):
        print "CLOSE_NOWRITE event:", event.pathname
        logging.info("CLOSE_NOWRITE event : %s  %s" % (os.path.join(event.path,event.name),datetime.datetime.now()))
    
   def process_IN_CLOSE_WRITE(self, event):
        print "CLOSE_WRITE event:", event.pathname
	logging.info("CLOSE_WRITE event : %s  %s" % (os.path.join(event.path,event.name),datetime.datetime.now()))
    
   def process_IN_CREATE(self, event):
        print "CREATE event:", event.pathname
	logging.info("CREATE event : %s  %s" % (os.path.join(event.path,event.name),datetime.datetime.now()))
    
   def process_IN_DELETE(self, event):
        print "DELETE event:", event.pathname
	logging.info("DELETE event : %s  %s" % (os.path.join(event.path,event.name),datetime.datetime.now()))
    
   def process_IN_MODIFY(self, event):
        print "MODIFY event:", event.pathname
	logging.info("MODIFY event : %s  %s" % (os.path.join(event.path,event.name),datetime.datetime.now()))
    
   def process_IN_OPEN(self, event):
        print "OPEN event:", event.pathname
	logging.info("OPEN event : %s  %s" % (os.path.join(event.path,event.name),datetime.datetime.now()))
	
	
def main():
    # watch manager
    wm = pyinotify.WatchManager()
    wm.add_watch('/tmp', pyinotify.ALL_EVENTS, rec=True)
	#/tmp是可以自己修改的监控的目录
    # event handler
    eh = MyEventHandler()

    # notifier
    notifier = pyinotify.Notifier(wm, eh)
    notifier.loop()

if __name__ == '__main__':
    main()
	

下面来看看效果如何呢：我在代码定义的是监控tmp目录下的变化：

[root@centos6 monitor-folder]# python total-monitor.py
OPEN event: /tmp/.ICE-unix
CLOSE_NOWRITE event: /tmp/.ICE-unix
OPEN event: /tmp
CLOSE_NOWRITE event: /tmp
OPEN event: /tmp
CLOSE_NOWRITE event: /tmp
DELETE event: /tmp/aa
DELETE event: /tmp/adduser.conf
DELETE event: /tmp/adjtime
DELETE event: /tmp/aliases
DELETE event: /tmp/bash.bashrc
DELETE event: /tmp/bindresvport.blacklist
DELETE event: /tmp/environment
DELETE event: /tmp/fstab
DELETE event: /tmp/ipt.err
DELETE event: /tmp/ipt.out
DELETE event: /tmp/krb5.conf
DELETE event: /tmp/odbc.ini
DELETE event: /tmp/odbcinst.ini
DELETE event: /tmp/timezone
DELETE event: /tmp/ucf.conf
DELETE event: /tmp/warnquota.conf
DELETE event: /tmp/wgetrc
DELETE event: /tmp/xinetd.conf
CREATE event: /tmp/aa
OPEN event: /tmp/aa
ATTRIB event: /tmp/aa
CLOSE_WRITE event: /tmp/aa
CREATE event: /tmp/bb
OPEN event: /tmp/bb
ATTRIB event: /tmp/bb
CLOSE_WRITE event: /tmp/bb
CREATE event: /tmp/cc
OPEN event: /tmp/cc
ATTRIB event: /tmp/cc
CLOSE_WRITE event: /tmp/cc

上面是打印出来的监控状态，下面是我的操作代码：

[root@centos6 tmp]# ls
aa            bash.bashrc             ipt.err    odbcinst.ini    wgetrc
adduser.conf  bindresvport.blacklist  ipt.out    timezone        xinetd.conf
adjtime       environment             krb5.conf  ucf.conf
aliases       fstab                   odbc.ini   warnquota.conf
[root@centos6 tmp]# rm -rf *
[root@centos6 tmp]# touch aa
[root@centos6 tmp]# touch bb
[root@centos6 tmp]# touch cc
[root@centos6 tmp]#

 上面是直接打印出来的，下面在看看我吧操作记录在日志文件里面，也可以看下日志文件的记录：

INFO:root:Starting monitor...
INFO:root:OPEN event : /tmp/.ICE-unix  2011-10-27 13:31:57.219168
INFO:root:CLOSE_NOWRITE event : /tmp/.ICE-unix  2011-10-27 13:31:57.219609
INFO:root:OPEN event : /tmp/  2011-10-27 13:32:21.395228
INFO:root:CLOSE_NOWRITE event : /tmp/  2011-10-27 13:32:21.398105
INFO:root:OPEN event : /tmp/  2011-10-27 13:32:25.108997
INFO:root:CLOSE_NOWRITE event : /tmp/  2011-10-27 13:32:25.110239
INFO:root:CREATE event : /tmp/aa  2011-10-27 13:32:28.004863
INFO:root:OPEN event : /tmp/aa  2011-10-27 13:32:28.005860
INFO:root:IN_ATTRIB event : /tmp/aa  2011-10-27 13:32:28.006723
INFO:root:CLOSE_WRITE event : /tmp/aa  2011-10-27 13:32:28.014617
INFO:root:CREATE event : /tmp/bb  2011-10-27 13:32:30.149758
INFO:root:OPEN event : /tmp/bb  2011-10-27 13:32:30.164415
INFO:root:IN_ATTRIB event : /tmp/bb  2011-10-27 13:32:30.164877
INFO:root:CLOSE_WRITE event : /tmp/bb  2011-10-27 13:32:30.165303
INFO:root:CREATE event : /tmp/cc  2011-10-27 13:32:32.725418
INFO:root:OPEN event : /tmp/cc  2011-10-27 13:32:32.726367
INFO:root:IN_ATTRIB event : /tmp/cc  2011-10-27 13:32:32.727229
INFO:root:CLOSE_WRITE event : /tmp/cc  2011-10-27 13:32:32.735052
INFO:root:CREATE event : /tmp/dd  2011-10-27 13:32:39.771041
INFO:root:OPEN event : /tmp/dd  2011-10-27 13:32:39.780881
INFO:root:IN_ATTRIB event : /tmp/dd  2011-10-27 13:32:39.781455
INFO:root:CLOSE_WRITE event : /tmp/dd  2011-10-27 13:32:39.781893
INFO:root:Starting monitor...
INFO:root:OPEN event : /tmp/.ICE-unix  2011-10-27 14:01:43.742477
INFO:root:CLOSE_NOWRITE event : /tmp/.ICE-unix  2011-10-27 14:01:43.742915
INFO:root:OPEN event : /tmp/  2011-10-27 14:01:50.579778
INFO:root:CLOSE_NOWRITE event : /tmp/  2011-10-27 14:01:50.581317
INFO:root:DELETE event : /tmp/aa  2011-10-27 14:01:54.999528
INFO:root:DELETE event : /tmp/bb  2011-10-27 14:01:58.995966
INFO:root:DELETE event : /tmp/cc  2011-10-27 14:02:02.795950
INFO:root:DELETE event : /tmp/dd  2011-10-27 14:02:06.284208
INFO:root:OPEN event : /tmp/  2011-10-27 14:02:07.738560
INFO:root:CLOSE_NOWRITE event : /tmp/  2011-10-27 14:02:07.741922
INFO:root:CREATE event : /tmp/aa  2011-10-27 14:02:11.110322
INFO:root:OPEN event : /tmp/aa  2011-10-27 14:02:11.113150
INFO:root:IN_ATTRIB event : /tmp/aa  2011-10-27 14:02:11.116381
INFO:root:CLOSE_WRITE event : /tmp/aa  2011-10-27 14:02:11.118382
INFO:root:Starting monitor...
INFO:root:OPEN event : /tmp/.ICE-unix  2011-10-27 21:39:12.520432
INFO:root:CLOSE_NOWRITE event : /tmp/.ICE-unix  2011-10-27 21:39:12.520879
INFO:root:OPEN event : /tmp/  2011-10-27 21:39:23.784759
INFO:root:CLOSE_NOWRITE event : /tmp/  2011-10-27 21:39:23.793211
INFO:root:OPEN event : /tmp/  2011-10-27 21:39:33.916232
INFO:root:CLOSE_NOWRITE event : /tmp/  2011-10-27 21:39:33.916823
INFO:root:DELETE event : /tmp/aa  2011-10-27 21:39:33.939008
INFO:root:DELETE event : /tmp/adduser.conf  2011-10-27 21:39:33.958143
INFO:root:DELETE event : /tmp/adjtime  2011-10-27 21:39:33.962497
INFO:root:DELETE event : /tmp/aliases  2011-10-27 21:39:33.978506
INFO:root:DELETE event : /tmp/bash.bashrc  2011-10-27 21:39:33.980834
INFO:root:DELETE event : /tmp/bindresvport.blacklist  2011-10-27 21:39:33.997176
INFO:root:DELETE event : /tmp/environment  2011-10-27 21:39:33.997683
INFO:root:DELETE event : /tmp/fstab  2011-10-27 21:39:33.998110
INFO:root:DELETE event : /tmp/ipt.err  2011-10-27 21:39:33.998532
INFO:root:DELETE event : /tmp/ipt.out  2011-10-27 21:39:34.000360
INFO:root:DELETE event : /tmp/krb5.conf  2011-10-27 21:39:34.000816
INFO:root:DELETE event : /tmp/odbc.ini  2011-10-27 21:39:34.002217
INFO:root:DELETE event : /tmp/odbcinst.ini  2011-10-27 21:39:34.002675
INFO:root:DELETE event : /tmp/timezone  2011-10-27 21:39:34.003110
INFO:root:DELETE event : /tmp/ucf.conf  2011-10-27 21:39:34.003538
INFO:root:DELETE event : /tmp/warnquota.conf  2011-10-27 21:39:34.018152
INFO:root:DELETE event : /tmp/wgetrc  2011-10-27 21:39:34.018641
INFO:root:DELETE event : /tmp/xinetd.conf  2011-10-27 21:39:34.041880
INFO:root:CREATE event : /tmp/aa  2011-10-27 21:39:40.639965
INFO:root:OPEN event : /tmp/aa  2011-10-27 21:39:40.640914
INFO:root:IN_ATTRIB event : /tmp/aa  2011-10-27 21:39:40.647835
INFO:root:CLOSE_WRITE event : /tmp/aa  2011-10-27 21:39:40.652158
INFO:root:CREATE event : /tmp/bb  2011-10-27 21:39:43.064526
INFO:root:OPEN event : /tmp/bb  2011-10-27 21:39:43.070849
INFO:root:IN_ATTRIB event : /tmp/bb  2011-10-27 21:39:43.071329
INFO:root:CLOSE_WRITE event : /tmp/bb  2011-10-27 21:39:43.071762
INFO:root:CREATE event : /tmp/cc  2011-10-27 21:39:47.046752
INFO:root:OPEN event : /tmp/cc  2011-10-27 21:39:47.051537
INFO:root:IN_ATTRIB event : /tmp/cc  2011-10-27 21:39:47.056211
INFO:root:CLOSE_WRITE event : /tmp/cc  2011-10-27 21:39:47.057490
[root@centos6 tmp]#


http://www.pyshell.com/index.php/archives/477