<p dir="ltr">I don't perform a specific check, but rsync gives both the total size of files backed up, and how much it actually moves. It only moves changed blocks. So if it reports a total size of 900 MB, but says it only moved 2 MB, I can be pretty sure the files aren't encrypted. There would be lots of changed blocks if the files were being encrypted. Plus it gives me a statement of how many files were changed.</p>
<div class="gmail_extra"><br><div class="gmail_quote">On Sep 23, 2016 9:33 AM, <<a href="mailto:pat@linuxcolumbus.com">pat@linuxcolumbus.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 2016-09-23 08:56, Brian Miller wrote:<br>
> This won't really help with the disk issue, but to automate the backup<br>
> of my wife's system, I run an "at" job on my backup server. It checks<br>
> if her system in up (I've assigned a static address through DHCP). If<br>
> it's up, I run rsync through an SSH tunnel to back it up. If it's not,<br>
> I reset the script to re-run in 5 hours. I sometimes go a day without<br>
> a<br>
> backup, but not often.<br>
><br>
> And since the connection comes from my backup server, there is no<br>
> constant drive mapping, so ransomware programs shouldn't get to it.<br>
> Even better, I get an email when the backup runs. I can check the<br>
> amount of data being backed up. rsync is pretty effecient, so the<br>
> amount of actual data is pretty low. If I saw a huge jump in the<br>
> amount<br>
> of data backed up, that would be in indication of an infection . . .<br>
><br>
<br>
Do you do any verification before you backup to say, check if the files<br>
were encrypted by a ransomware program?<br>
<br>
Pat<br>
______________________________<wbr>_________________<br>
colug-432 mailing list<br>
<a href="mailto:colug-432@colug.net">colug-432@colug.net</a><br>
<a href="http://lists.colug.net/mailman/listinfo/colug-432" rel="noreferrer" target="_blank">http://lists.colug.net/<wbr>mailman/listinfo/colug-432</a><br>
</blockquote></div></div>