| CPC G06F 16/1734 (2019.01) [G06F 16/14 (2019.01); G06F 16/164 (2019.01); G06F 16/1815 (2019.01)] | 21 Claims |
|
1. A system, comprising:
a processor programmed with a file stream scanning module to:
invoke a file scanner to conduct a file scan and detect one or more file events based on the file scan;
identify a highest Update Sequence Number (USN) based on the detected one or more file events, and set a checkpoint USN based on the highest USN;
parse, during a current filesystem check, a sparse file stream comprising a plurality of Update Sequence Numbers (USNs), each USN having a respective byte offset from a beginning of the sparse file stream and identifying a file in the filesystem associated with a file event, wherein each time the file is added or modified, the USN for the file is incremented to indicate that a change has occurred;
access the checkpoint USN, wherein the checkpoint USN is locally stored apart from the sparse file stream and serves as a checkpoint of a prior USN that was identified during a prior filesystem check or during the file scan;
identify a next byte offset for a next USN of a file in the sparse file stream after the checkpoint USN based on the byte offset of the checkpoint USN;
update the checkpoint USN with the next USN;
identify a file event from the sparse file stream based on the next USN without polling files or directories on the filesystem; and
pass the file event to a downstream system.
|