Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We need to take a snapshot of your linux server. We don't want to backup the data, just a snapshot we can compare against changes.

share|improve this question
    
What kind of changes? Content of files, or just changes in the metadata, like permissions or ownership? –  Marcin May 19 '10 at 12:22
    
both, i just need to know a file has been messed around with so we can check to see what's changed –  gAMBOOKa May 19 '10 at 12:51
    
Then AIDE it is. –  Marcin May 19 '10 at 13:06
add comment

3 Answers

up vote 4 down vote accepted
find / -ls > fileinfo.txt

But take a look at tripwire and aide, since that seems to be what you are aiming for anyway. Also note that rpm can check files against checksums and for debian based distributions there is debsums.

share|improve this answer
1  
Agree. Probably tripwire and aide are what he looks for –  Pier May 19 '10 at 9:29
add comment

i would recommend checking for md5 sums of files, and not just file size. however:

find / -printf "%h/%f %s\n" > /some/path/filesize would generate a list of files and their sizes.

you could also do find / | xargs md5sum 2> /dev/null 1> /some/path/file-md5s to generate a list of filenames and their md5 sums.

share|improve this answer
add comment

use

du <filesystem mount point>

it should give you size and file in full location

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.