android monitor tool (6.0 监控文件系统)

       有的时候某个文件（文本文件，动态库，静态库）被修改或者破环，你需要

       监控是哪个进程对你监控的文件或者目录进行了修改或者破坏。

       当然你要是遇到某些分区被修改了，就无能为力了。

       首先看下效果图，加入我们现在要监控的是 /data/hello.txt  这个文件，当然你也可以监控一个目录：

      

 

       当我们： adb shell cat  /data/hello.txt 的时候，我们就可以监控文件系统的操作（如：open , modiefie , close）。

       目前可以监控的文件系统的时间列表：

inotify_event_array= [ ["File was accessed",1],\        ["File was modified",1],\        ["File attributes were changed",1],\        ["writtable file closed",1],\        ["Unwrittable file closed",1],\        ["File was opened",1],\        ["File was moved from X",1],        ["File was moved to Y",1],\        ["Subfile was created",1],\        ["Subfile was deleted",1],\        ["Self was deleted",1],\        ["Self was moved",1],\        "Backing fs was unmounted",\        "Event queued overflowed",\        "File was ignored"];

       你可以通过事件左边的checkBox，打开或者屏蔽相关事件。