https://github.com/osquery/osquery logo
Title
t

terracatta

03/28/2018, 2:50 PM
Anyway, osqueryd and osqueryi are actually the same binary. If you rename the file to osqueryi, it will behave like you want
m

marpaia

03/28/2018, 6:06 PM
you can just run
osqueryd -S
to launch
osqueryi
given an
osqueryd
binary
d

defensivedepth

03/29/2018, 1:50 PM
What is the thought process behind having two differently named binaries if they are actually the same?
m

marpaia

03/29/2018, 4:18 PM
@defensivedepth
osqueryd
and
osqueryi
were originally different, statically linked binaries. each was/is like 30-40MB. let’s say you work somewhere that is actively deploying both of these binaries to all of your production servers. let’s say you have 1,000,000 servers. by combining the two (mostly the same) binaries into one, you just saved 40 terabytes worth of storage!
so minimal actual user experience change, but a lot of disks saved
d

defensivedepth

03/29/2018, 5:31 PM
Ok, I understand now