hashdeep
hashdeep copied to clipboard
Audit subset of known - "hashdeep -k -f -a"
Hello,
please could be the -f
I will try to explain my situation by example: I have an archive folder with 100 files in it. This archive folder is mirrored to two locations (location A containing 40 files, B containing 60files), each containing subset of archive files, based on various conditions.
On my source I create hashlist of entire archive - 100 files. On locations A and B I would like to audit these files, meaning I would like to see:
- What files are there, which shouldn't be there.
- What files aren't there which should be there.
- What files are on both sides but differ in size.
Conditions 1. and 2. makes me use -a
When I audit on location_a though, I get failed due to missing 60 files. This is expected. Same for location_b - missing 40 files.
What I would expect after supplying list of files in -f <list_of_files> with -a
- All files which are in the folder and not in <list_of_files> -> FAIL (without actual hashing)
- All files which are not in the folder, but listed in the <list_of_files> -> FAIL (missing file)
- File which is both in <list_of_files> and in the folder, hash is calculated and compared to -k <known_hashes>
Is there anything wrong with my understanding/expectation? How could I achieve similar behaviour?
As a workaround, I can calculate hashes on location_a, but it is already too late, since file might have corrupted during transfer. Alternatively, I could combine my files somehow and prepare <known_hashes> based on <list_of_files> and use that one to verify..