There are two distinct methods of interacting with the NetDiff application. It can be invoked from the command line as with any standard Unix command. Alternatively for those running EnGarde Secure Linux, it can be administered via a web browser using the NetDiff WebTool module.
Normally NetDiff is set up as a cron job to be run nightly, scanning the network and sending a report to the email addresses specified in the configuration file. It can be run manually from the command line, accepting one of four options.