android monitor tool (7.0 监控文件系统 native层实现)

       C写的代码来监控文件系统事件，按照一定格式输入，PC机端再解析：

       android 本地代码如下：（编译成 /system/bin/inotify  ，并记得push 到android phone中），

       因为脚本是这么调用的： adb shell  "/system/bin/inotify    <file_you_wanna_monitor>"

       当然编译出来的名字不一定要是inotify ，但是你至少要保证两边一致：

      

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <stdint.h>
#include <fcntl.h>
#include <unistd.h>
#include <sys/ioctl.h>
#include <sys/inotify.h>
#include <errno.h>
#include <cutils/properties.h>

struct wd_name {
        int wd;
        char * name;
};
#define FNUM 4
#define WD_NUM 1
struct wd_name wd_array[WD_NUM];

char * event_array[] = {
        "File was accessed",
        "File was modified",
        "File attributes were changed",
        "writtable file closed",
        "Unwrittable file closed",
        "File was opened",
        "File was moved from X",
        "File was moved to Y",
        "Subfile was created",
        "Subfile was deleted",
        "Self was deleted",
        "Self was moved",
        "",
        "Backing fs was unmounted",
        "Event queued overflowed",
        "File was ignored"
};

#define EVENT_NUM 16
#define MAX_BUF_SIZE 1024
#define MAX_PATH_LEN 255

void main (int argc, char *argv[])
{
        int fd;
        int wd;
        char buffer[1024];
        char * offset = NULL;
        struct inotify_event * event;
        int len, tmp_len;
        char strbuf[16];
        int i = 0;
        int j=0;

        if (argc!=2)
        {
                printf("error parameters , please try again.\n");
                exit(-1);
        }

        fd = inotify_init();
        if (fd < 0) 
        {
                printf("Fail to initialize inotify.\n");
                exit(-1);
        }
        for (i=0; i<WD_NUM; i++) 
        { 
           wd_array[i].name = argv[i+1]; 
           wd = inotify_add_watch(fd, wd_array[i].name, IN_MOVED_TO | IN_CREATE|IN_ACCESS|IN_MODIFY|IN_ATTRIB |  \
           	                                IN_CLOSE_WRITE | IN_CLOSE_NOWRITE |IN_OPEN |IN_MOVED_FROM|IN_DELETE); 
           printf("i  wanna  add watch for %s to monitor.\n", wd_array[i].name); 
           if (wd < 0) 
           { 
           	    printf("Can't add watch for %s.\n", wd_array[i].name); 
                exit(-1); 
           } 
            wd_array[i].wd = wd; 
         }

        while(len = read(fd, buffer, MAX_BUF_SIZE))
        {
                offset = buffer;
                event = (struct inotify_event *)buffer;
                while (((char *)event - buffer) < len) 
                {

                        if (event->mask & IN_ISDIR) 
                        	{
                                memcpy(strbuf, "Direcotory", 11);
                        }
                        else 
                        {
                                memcpy(strbuf, "File", 5);
                        }
                        for (i=0; i<WD_NUM; i++)
                        {
                                if (event->wd != wd_array[i].wd) continue;
                                //printf("Object name: %s\n", wd_array[i].name);
                                break;
                        }
                        for (j=0; j<EVENT_NUM; j++) 
                        	{
                                if (event_array[j][0] == '\0') continue;
                                if (event->mask & (1<<j)) 
                                {
                                        //printf("Event: %s\n", event_array[j]);
                                        break;
                                }
                        }
                        // added by yongming.i for keyword for monitor android filesystem 
		      printf("inotifybegin:%s:%s:%s:%s\r\n",strbuf,event->name,wd_array[i].name,event_array[j]);
                        tmp_len = sizeof(struct inotify_event) + event->len;
                        event = (struct inotify_event *)(offset + tmp_len);
                        offset += tmp_len;
                }
        }
}