topic Re: file access date in Operating System - HP-UX

file access date

Bryan D. Quinn — Mon, 24 Nov 2003 10:46:27 GMT

I feel that this question has probably been asked here before, but I was unable to find anything similar while searching the forum. So, I will ask.

I have a need to find what file was accessed at 01:52 on November 23 2003, on one of my boxes. How can I go about doing that? Any ideas would be greatly appreciated.

Thanks,
-Bryan

Re: file access date

Pete Randall — Mon, 24 Nov 2003 10:51:28 GMT

Bryan,

The -u option of the ls command will give you last accessed date. Just grep for your desired time:

"ls -u /dir |grep 'November 23'"

Pete

Re: file access date

Bryan D. Quinn — Mon, 24 Nov 2003 10:56:26 GMT

Thanks Pete,

I was looking for something to do a recursive search through the entire system, starting at /.

I should have had a little more detail in my question.

-Bryan

Re: file access date

Graham Cameron_1 — Mon, 24 Nov 2003 10:57:07 GMT

Don't think find -atime has low enough granularity, so how about

ls -lut / |grep "Nov 23 01:52"

Trouble is, that will only give you the file name(s), not locations, so you'll then need to do a 2nd pass with find to locate the file(s).

-- Graham

Re: file access date

Jean-Louis Phelix — Mon, 24 Nov 2003 10:57:23 GMT

Hi,

# touch -t 0311230151 /tmp/before
# touch -t 0311230153 /tmp/after
# find / \( -newer /tmp/before -a ! -newer /tmp/before)

Regards.

Re: file access date

john korterman — Mon, 24 Nov 2003 10:57:24 GMT

Hi,
you can try something like this:

find -type f -exec ls -lu {} \;| grep "Nov 23 01:52"

regards,
John K.

Re: file access date

Jean-Louis Phelix — Mon, 24 Nov 2003 10:59:51 GMT

Ooops ... missing \)

# touch -t 0311230151 /tmp/before
# touch -t 0311230153 /tmp/after
# find / \( -newer /tmp/before -a ! -newer /tmp/before \)

This will work even for old timeframes.

Regards.

Re: file access date

Jean-Louis Phelix — Mon, 24 Nov 2003 11:01:28 GMT

dhfgblsjkdf sdvbsdfb !!!

# touch -t 0311230151 /tmp/before
# touch -t 0311230153 /tmp/after
# find / \( -newer /tmp/before -a ! -newer /tmp/after \)

please no points for these tipos ...

Regards

Re: file access date

Michael Schulte zur Sur — Mon, 24 Nov 2003 13:04:35 GMT

Hi,

I assume, by access you mean update.

find / -exec ls -l "{}" ";" | grep "Nov 23 2003"

greetings,

Michael