General
cancel
Showing results for 
Search instead for 
Did you mean: 

procedure to know the files accessed in a time window

federico_3
Honored Contributor

procedure to know the files accessed in a time window

How can i do a procedure that let me know the files accessed by a user in a time windiw ( 1 minute for example ) ?


Thanks
Federico
3 REPLIES
Bill McNAMARA_1
Honored Contributor

Re: procedure to know the files accessed in a time window

You can find find with more options here:
http://hpux.cs.utah.edu/hppd/hpux/Gnu/findutils-4.1.5/

I haven't tried it, but may provide something.
Other than that I can only suggest finding on two times individually and then diff'ing the output...

Later,
Bill
It works for me (tm)
Bill McNAMARA_1
Honored Contributor

Re: procedure to know the files accessed in a time window

here's a gui based find
http://hpux.cs.utah.edu/hppd/hpux/Gtk/gtkfind-1.1/

and another general find tool
http://hpux.cs.utah.edu/hppd/hpux/Misc/findgrep-1.0/

Later,
Bill
It works for me (tm)
Bill Thorsteinson
Honored Contributor

Re: procedure to know the files accessed in a time window

You could get an idea using lsof in a loop. Something like

(for i in 1 2 3 4 5 6 7 8 9 10 11 12; do
lsof | head +2
sleep 5
done) | cut -b 55- | sort -u

would give you a list of most files a user had open.