file access date

[Bryan D. Quinn]

I feel that this question has probably been asked here before, but I was unable to find anything similar while searching the forum. So, I will ask.

I have a need to find what file was accessed at 01:52 on November 23 2003, on one of my boxes. How can I go about doing that? Any ideas would be greatly appreciated.

Thanks,
-Bryan

[Pete Randall]

Bryan,

The -u option of the ls command will give you last accessed date. Just grep for your desired time:

"ls -u /dir |grep 'November 23'"


Pete

[Bryan D. Quinn]

Thanks Pete,

I was looking for something to do a recursive search through the entire system, starting at /.

I should have had a little more detail in my question.

-Bryan

[Graham Cameron_1]

Don't think find -atime has low enough granularity, so how about

ls -lut / |grep "Nov 23 01:52"

Trouble is, that will only give you the file name(s), not locations, so you'll then need to do a 2nd pass with find to locate the file(s).

-- Graham

[Jean-Louis Phelix]

Hi,

# touch -t 0311230151 /tmp/before
# touch -t 0311230153 /tmp/after
# find / \( -newer /tmp/before -a ! -newer /tmp/before)

Regards.

[john korterman]

Hi,
you can try something like this:

find -type f -exec ls -lu {} \;| grep "Nov 23 01:52"

regards,
John K.

[Jean-Louis Phelix]

Ooops ... missing \)

# touch -t 0311230151 /tmp/before
# touch -t 0311230153 /tmp/after
# find / \( -newer /tmp/before -a ! -newer /tmp/before \)

This will work even for old timeframes.

Regards.

[Jean-Louis Phelix]

dhfgblsjkdf sdvbsdfb !!!

# touch -t 0311230151 /tmp/before
# touch -t 0311230153 /tmp/after
# find / \( -newer /tmp/before -a ! -newer /tmp/after \)

please no points for these tipos ...

Regards

[Michael Schulte zur Sur]

Hi,

I assume, by access you mean update.

find / -exec ls -l "{}" ";" | grep "Nov 23 2003"

greetings,

Michael