[Aide] AIDE logging and "The attributes of the (uncompressed) database(s):"

Wed, 05 Mar 2025 10:46:22 -0800 

Ahoi!

I have a small question about AIDE's logging mechanisms.
When the check via systemctl status aidecheck.timer runs at 5:00 a.m., I see the following entries in the syslog: 

---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<
Mar 05 05:00:08 pml010074 systemd[1]: Started Aide Check.
Mar 05 05:05:10 pml010074 systemd-journald[1319]: [🡕] Suppressed 899215 messages from aidecheck.service Mar 05 05:05:10 pml010074 aide[52379]: Start timestamp: 2025-03-05 05:00:08 +0100 (AIDE 0.18.8) Mar 05 05:05:10 pml010074 aide[52379]: AIDE found NO differences between database and filesystem. Looks okay!! Mar 05 05:05:10 pml010074 aide[52379]: Start timestamp: 2025-03-05 05:00:08 +0100 (AIDE 0.18.8) Mar 05 05:05:10 pml010074 aide[52379]: AIDE found NO differences between database and filesystem. Looks okay!! 
Mar 05 05:05:10 pml010074 aide[52379]: Number of entries:        468334
Mar 05 05:05:10 pml010074 aide[52379]: --------------------------------------------------- Mar 05 05:05:10 pml010074 aide[52379]: The attributes of the (uncompressed) database(s): Mar 05 05:05:10 pml010074 aide[52379]: --------------------------------------------------- Mar 05 05:05:10 pml010074 aide[52379]: http://10.0.0.40/local/pml010074.aide-database 
Mar 05 05:05:10 pml010074 aide[52379]:  MD5       : xFJfV2Jo2OYW5Xq0168Y4Q==
Mar 05 05:05:10 pml010074 aide[52379]: SHA1 : ZNJ7ispZ5DNdtAq1ZTWcVCzwBeQ= Mar 05 05:05:10 pml010074 aide[52379]: SHA256 : slrY4Nm9xF8beGMdL02mYlTTkCs2gt4R 
Mar 05 05:05:10 pml010074 aide[52379]:              Rpne2M/qcts=
Mar 05 05:05:10 pml010074 aide[52379]: SHA512 : 2bNiBZFbXmAlHxqzxlgnAJsOeQIkmTbS Mar 05 05:05:10 pml010074 aide[52379]: b9j/WmbWog4FES+Yvwsm5OjGxHf4W6Qm 
Mar 05 05:05:10 pml010074 aide[52379]:              pkagyuFvM7F8HybvTFvNjg==
Mar 05 05:05:10 pml010074 aide[52379]: RMD160 : 1xlewnEEsoX00gbv+NeDwv8AMiY= Mar 05 05:05:10 pml010074 aide[52379]: TIGER : js2XdE7jewHPfRXr0rbMuLuqvV1XgSon 
Mar 05 05:05:10 pml010074 aide[52379]:  CRC32     : ehJu7g==
Mar 05 05:05:10 pml010074 aide[52379]: WHIRLPOOL : DDDnQNMaFOwDFDKve6V0nVbovGvJ4Mea Mar 05 05:05:10 pml010074 aide[52379]: Gb3aVynaeKFCXIGK47OOPqodqHBVdfRK 
Mar 05 05:05:10 pml010074 aide[52379]:              rLHRzomlXVicUDFUsU/0Bg==
Mar 05 05:05:10 pml010074 aide[52379]: GOST : 8/Gxe3dVGNAtR9Y/DnihQ2m3midbGwqP 
Mar 05 05:05:10 pml010074 aide[52379]:              QOChq5hz4fQ=
Mar 05 05:05:10 pml010074 aide[52379]: STRIBOG256: I+jdJuHZfgj8YEytbDVP7fA+cVA6eY0y 
Mar 05 05:05:10 pml010074 aide[52379]:              JMuAlQq3pRg=
Mar 05 05:05:10 pml010074 aide[52379]: STRIBOG512: 6lYBMeTsjfwhSFLM58F37jUmUZwaf34K Mar 05 05:05:10 pml010074 aide[52379]: luCtteWaRt1xEVUyzlLGcXTa6iBBvmyE 
Mar 05 05:05:10 pml010074 aide[52379]:              LjO5m2qVOwMfE7N276UvWw==
Mar 05 05:05:10 pml010074 aide[52379]: End timestamp: 2025-03-05 05:05:10 +0100 (run time: 5m 2s) 
Mar 05 05:05:10 pml010074 aide[52379]:
                                       Number of entries:        468334
Mar 05 05:05:10 pml010074 aide[52379]:
--------------------------------------------------- The attributes of the (uncompressed) database(s): --------------------------------------------------- 
Mar 05 05:05:10 pml010074 aide[52379]:
Mar 05 05:05:10 pml010074 aide[52379]: http://10.0.0.40/local/pml010074.aide-database 
Mar 05 05:05:10 pml010074 aide[52379]:  MD5       : xFJfV2Jo2OYW5Xq0168Y4Q==
Mar 05 05:05:10 pml010074 aide[52379]: SHA1 : ZNJ7ispZ5DNdtAq1ZTWcVCzwBeQ= Mar 05 05:05:10 pml010074 aide[52379]: SHA256 : slrY4Nm9xF8beGMdL02mYlTTkCs2gt4R 
Mar 05 05:05:10 pml010074 aide[52379]:              Rpne2M/qcts=
Mar 05 05:05:10 pml010074 aide[52379]: SHA512 : 2bNiBZFbXmAlHxqzxlgnAJsOeQIkmTbS Mar 05 05:05:10 pml010074 aide[52379]: b9j/WmbWog4FES+Yvwsm5OjGxHf4W6Qm 
Mar 05 05:05:10 pml010074 aide[52379]:              pkagyuFvM7F8HybvTFvNjg==
Mar 05 05:05:10 pml010074 aide[52379]: RMD160 : 1xlewnEEsoX00gbv+NeDwv8AMiY= Mar 05 05:05:10 pml010074 aide[52379]: TIGER : js2XdE7jewHPfRXr0rbMuLuqvV1XgSon 
Mar 05 05:05:10 pml010074 aide[52379]:  CRC32     : ehJu7g==
Mar 05 05:05:10 pml010074 aide[52379]: WHIRLPOOL : DDDnQNMaFOwDFDKve6V0nVbovGvJ4Mea Mar 05 05:05:10 pml010074 aide[52379]: Gb3aVynaeKFCXIGK47OOPqodqHBVdfRK 
Mar 05 05:05:10 pml010074 aide[52379]:              rLHRzomlXVicUDFUsU/0Bg==
Mar 05 05:05:10 pml010074 aide[52379]: GOST : 8/Gxe3dVGNAtR9Y/DnihQ2m3midbGwqP 
Mar 05 05:05:10 pml010074 aide[52379]:              QOChq5hz4fQ=
Mar 05 05:05:10 pml010074 aide[52379]: STRIBOG256: I+jdJuHZfgj8YEytbDVP7fA+cVA6eY0y 
Mar 05 05:05:10 pml010074 aide[52379]:              JMuAlQq3pRg=
Mar 05 05:05:10 pml010074 aide[52379]: STRIBOG512: 6lYBMeTsjfwhSFLM58F37jUmUZwaf34K Mar 05 05:05:10 pml010074 aide[52379]: luCtteWaRt1xEVUyzlLGcXTa6iBBvmyE 
Mar 05 05:05:10 pml010074 aide[52379]:              LjO5m2qVOwMfE7N276UvWw==
Mar 05 05:05:10 pml010074 aide[52379]:
End timestamp: 2025-03-05 05:05:10 +0100 (run time: 5m 2s) Mar 05 05:05:10 pml010074 systemd[1]: aidecheck.service: Deactivated successfully. Mar 05 05:05:10 pml010074 systemd[1]: aidecheck.service: Consumed 5min 20.571s CPU time, 5.4G memory peak. 
---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<

But when I start the check manually, I only see this as console output:

---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<
[root@pml010074 ~]# aide --check
Start timestamp: 2025-03-05 19:21:43 +0100 (AIDE 0.18.8)
AIDE found NO differences between database and filesystem. Looks okay!!

Number of entries:      468334

---------------------------------------------------
The attributes of the (uncompressed) database(s):
---------------------------------------------------

http://10.0.0.40/local/pml010074.aide-database
 MD5       : xFJfV2Jo2OYW5Xq0168Y4Q==
 SHA1      : ZNJ7ispZ5DNdtAq1ZTWcVCzwBeQ=
 SHA256    : slrY4Nm9xF8beGMdL02mYlTTkCs2gt4R
             Rpne2M/qcts=
 SHA512    : 2bNiBZFbXmAlHxqzxlgnAJsOeQIkmTbS
             b9j/WmbWog4FES+Yvwsm5OjGxHf4W6Qm
             pkagyuFvM7F8HybvTFvNjg==
 RMD160    : 1xlewnEEsoX00gbv+NeDwv8AMiY=
 TIGER     : js2XdE7jewHPfRXr0rbMuLuqvV1XgSon
 CRC32     : ehJu7g==
 WHIRLPOOL : DDDnQNMaFOwDFDKve6V0nVbovGvJ4Mea
             Gb3aVynaeKFCXIGK47OOPqodqHBVdfRK
             rLHRzomlXVicUDFUsU/0Bg==
 GOST      : 8/Gxe3dVGNAtR9Y/DnihQ2m3midbGwqP
             QOChq5hz4fQ=
 STRIBOG256: I+jdJuHZfgj8YEytbDVP7fA+cVA6eY0y
             JMuAlQq3pRg=
 STRIBOG512: 6lYBMeTsjfwhSFLM58F37jUmUZwaf34K
             luCtteWaRt1xEVUyzlLGcXTa6iBBvmyE
             LjO5m2qVOwMfE7N276UvWw==


End timestamp: 2025-03-05 19:26:48 +0100 (run time: 5m 5s)
---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<

In the syslog, I then find:

---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<
Mar 05 19:26:48 pml010074 aide[57076]: Start timestamp: 2025-03-05 19:21:43 +0100 (AIDE 0.18.8) Mar 05 19:26:48 pml010074 aide[57076]: AIDE found NO differences between database and filesystem. Looks okay!! 
Mar 05 19:26:48 pml010074 aide[57076]:
                                       Number of entries:        468334
Mar 05 19:26:48 pml010074 aide[57076]:
--------------------------------------------------- The attributes of the (uncompressed) database(s): --------------------------------------------------- 
Mar 05 19:26:48 pml010074 aide[57076]:
Mar 05 19:26:48 pml010074 aide[57076]: http://10.0.0.40/local/pml010074.aide-database 
Mar 05 19:26:48 pml010074 aide[57076]:  MD5       : xFJfV2Jo2OYW5Xq0168Y4Q==
Mar 05 19:26:48 pml010074 aide[57076]: SHA1 : ZNJ7ispZ5DNdtAq1ZTWcVCzwBeQ= Mar 05 19:26:48 pml010074 aide[57076]: SHA256 : slrY4Nm9xF8beGMdL02mYlTTkCs2gt4R 
Mar 05 19:26:48 pml010074 aide[57076]:              Rpne2M/qcts=
Mar 05 19:26:48 pml010074 aide[57076]: SHA512 : 2bNiBZFbXmAlHxqzxlgnAJsOeQIkmTbS Mar 05 19:26:48 pml010074 aide[57076]: b9j/WmbWog4FES+Yvwsm5OjGxHf4W6Qm 
Mar 05 19:26:48 pml010074 aide[57076]:              pkagyuFvM7F8HybvTFvNjg==
Mar 05 19:26:48 pml010074 aide[57076]: RMD160 : 1xlewnEEsoX00gbv+NeDwv8AMiY= Mar 05 19:26:48 pml010074 aide[57076]: TIGER : js2XdE7jewHPfRXr0rbMuLuqvV1XgSon 
Mar 05 19:26:48 pml010074 aide[57076]:  CRC32     : ehJu7g==
Mar 05 19:26:48 pml010074 aide[57076]: WHIRLPOOL : DDDnQNMaFOwDFDKve6V0nVbovGvJ4Mea Mar 05 19:26:48 pml010074 aide[57076]: Gb3aVynaeKFCXIGK47OOPqodqHBVdfRK 
Mar 05 19:26:48 pml010074 aide[57076]:              rLHRzomlXVicUDFUsU/0Bg==
Mar 05 19:26:48 pml010074 aide[57076]: GOST : 8/Gxe3dVGNAtR9Y/DnihQ2m3midbGwqP 
Mar 05 19:26:48 pml010074 aide[57076]:              QOChq5hz4fQ=
Mar 05 19:26:48 pml010074 aide[57076]: STRIBOG256: I+jdJuHZfgj8YEytbDVP7fA+cVA6eY0y 
Mar 05 19:26:48 pml010074 aide[57076]:              JMuAlQq3pRg=
Mar 05 19:26:48 pml010074 aide[57076]: STRIBOG512: 6lYBMeTsjfwhSFLM58F37jUmUZwaf34K Mar 05 19:26:48 pml010074 aide[57076]: luCtteWaRt1xEVUyzlLGcXTa6iBBvmyE 
Mar 05 19:26:48 pml010074 aide[57076]:              LjO5m2qVOwMfE7N276UvWw==
Mar 05 19:26:48 pml010074 aide[57076]:
End timestamp: 2025-03-05 19:26:48 +0100 (run time: 5m 5s) 

---------8<---------8<---------8<---------8<---------8<---------8<---------8<---------8<
Why is the part “The attributes of the (uncompressed) database(s):” output twice in the timer-controlled check? Am I doing something wrong in the configuration or am I misunderstanding something? 


Best regards
--
Django (Bastard Operator from Hell [BOfH])
aka Michael Nausch
Gänsbrunnenweg 6
85652 Pliening

Tel.: 08121 883176
Fax.: 08121 883179
Mail: <mailto:[email protected]>

https://wetterstation-pliening.info
https://ebersberger-liedersammlung.de
https://dokuwiki.nausch.org
_______________________________________________
Aide mailing list
[email protected]
https://www.ipi.fi/mailman/listinfo/aide

Reply via email to