Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We need to take a snapshot of your linux server. We don't want to backup the data, just a snapshot we can compare against changes.

share|improve this question
What kind of changes? Content of files, or just changes in the metadata, like permissions or ownership? – Marcin May 19 '10 at 12:22
both, i just need to know a file has been messed around with so we can check to see what's changed – gAMBOOKa May 19 '10 at 12:51
Then AIDE it is. – Marcin May 19 '10 at 13:06
up vote 4 down vote accepted
find / -ls > fileinfo.txt

But take a look at tripwire and aide, since that seems to be what you are aiming for anyway. Also note that rpm can check files against checksums and for debian based distributions there is debsums.

share|improve this answer
Agree. Probably tripwire and aide are what he looks for – Pier May 19 '10 at 9:29

i would recommend checking for md5 sums of files, and not just file size. however:

find / -printf "%h/%f %s\n" > /some/path/filesize would generate a list of files and their sizes.

you could also do find / | xargs md5sum 2> /dev/null 1> /some/path/file-md5s to generate a list of filenames and their md5 sums.

share|improve this answer


du <filesystem mount point>

it should give you size and file in full location

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.