diff --git a/scripts/base/utils/dir.bro b/scripts/base/utils/dir.bro index e64af43b15..30d6fed832 100644 --- a/scripts/base/utils/dir.bro +++ b/scripts/base/utils/dir.bro @@ -28,7 +28,8 @@ event Dir::monitor_ev(dir: string, last_files: set[string], callback: function(fname: string), poll_interval: interval) { - when ( local result = Exec::run([$cmd=fmt("ls -i -1 \"%s/\"", str_shell_escape(dir))]) ) + # the command lists all file in the directory in the form [inode]-[ctime] [filename] + when ( local result = Exec::run([$cmd=fmt("find \"%s\" -depth 1 -exec stat -f \"%%i-%%c %%N\" {} \\;", str_shell_escape(dir))]) ) { if ( result$exit_code != 0 ) {