LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 01-17-2010, 11:15 PM   #1
yoachan
Member
 
Registered: Nov 2009
Posts: 109

Rep: Reputation: 16
Finding "WHO DID THIS?"


Dear all,
Today I have a serious problem, a folder's content is gone. All of them.
But luckily it was somehow moved by someone to another place.

My question is, I wanted to find out who the person is.
I know the file was moved at - let's say - 10.00
Is there any log file that store what things did, and who did that?

Thanks in advanced.

YoChan
 
Old 01-17-2010, 11:39 PM   #2
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Arch/XFCE
Posts: 17,802

Rep: Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738
What kind of a system are you on?

In Linux/BASH, I found /var/log/auth* showing who logged in and when.
 
Old 01-17-2010, 11:41 PM   #3
cantab
Member
 
Registered: Oct 2009
Location: England
Distribution: *buntu, Vector
Posts: 499

Rep: Reputation: 102Reputation: 102
Filesystem actions are not ordinarily logged.

I think the best you can do is use the logs of who has logged into the system, which will probably be in /var/log/auth.log
Exactly what is logged will I think depend on what login manager you use (KDM, GDM, XDM, SLiM, etc)
 
Old 01-18-2010, 12:20 AM   #4
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 23,066
Blog Entries: 11

Rep: Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910
Or you could just run "last" which saves you some typing
 
Old 01-18-2010, 11:04 PM   #5
yoachan
Member
 
Registered: Nov 2009
Posts: 109

Original Poster
Rep: Reputation: 16
@All:
Thank you for the replies
I'll give it a shot.

BUT if my user move the file using SAMBA, is there any log file on what user samba's doing??? (_ __)!

Last edited by yoachan; 01-18-2010 at 11:07 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Finding the latest file - "broken pipe" error RasmusThomsen Linux - Server 3 11-30-2009 05:04 PM
Standard commands give "-bash: open: command not found" even in "su -" and "su root" mibo12 Linux - General 4 11-11-2007 11:18 PM
LXer: Displaying "MyComputer", "Trash", "Network Servers" Icons On A GNOME Desktop LXer Syndicated Linux News 0 04-02-2007 09:31 AM
Booting up hanging on "Finding Module dependcies" Red Hat 9 no_names_left Linux - Newbie 4 02-16-2005 01:39 AM
Installation hangs at "Finding Module Dependencies" on several distros patpawlowski Linux - Newbie 1 01-25-2004 11:25 AM


All times are GMT -5. The time now is 01:07 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration