Visit Jeremy's Blog.
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 01-17-2010, 11:15 PM   #1
Registered: Nov 2009
Posts: 109

Rep: Reputation: 16
Finding "WHO DID THIS?"

Dear all,
Today I have a serious problem, a folder's content is gone. All of them.
But luckily it was somehow moved by someone to another place.

My question is, I wanted to find out who the person is.
I know the file was moved at - let's say - 10.00
Is there any log file that store what things did, and who did that?

Thanks in advanced.

Old 01-17-2010, 11:39 PM   #2
LQ Veteran
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Mint
Posts: 17,809

Rep: Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743
What kind of a system are you on?

In Linux/BASH, I found /var/log/auth* showing who logged in and when.
Old 01-17-2010, 11:41 PM   #3
Registered: Oct 2009
Location: England
Distribution: Kubuntu, Ubuntu, Debian, Proxmox.
Posts: 553

Rep: Reputation: 115Reputation: 115
Filesystem actions are not ordinarily logged.

I think the best you can do is use the logs of who has logged into the system, which will probably be in /var/log/auth.log
Exactly what is logged will I think depend on what login manager you use (KDM, GDM, XDM, SLiM, etc)
Old 01-18-2010, 12:20 AM   #4
Registered: Apr 2002
Location: earth
Distribution: slackware by choice, others too :} ... android.
Posts: 23,067
Blog Entries: 11

Rep: Reputation: 927Reputation: 927Reputation: 927Reputation: 927Reputation: 927Reputation: 927Reputation: 927Reputation: 927
Or you could just run "last" which saves you some typing
Old 01-18-2010, 11:04 PM   #5
Registered: Nov 2009
Posts: 109

Original Poster
Rep: Reputation: 16
Thank you for the replies
I'll give it a shot.

BUT if my user move the file using SAMBA, is there any log file on what user samba's doing??? (_ __)!

Last edited by yoachan; 01-18-2010 at 11:07 PM.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Finding the latest file - "broken pipe" error RasmusThomsen Linux - Server 3 11-30-2009 05:04 PM
Standard commands give "-bash: open: command not found" even in "su -" and "su root" mibo12 Linux - General 4 11-11-2007 11:18 PM
LXer: Displaying "MyComputer", "Trash", "Network Servers" Icons On A GNOME Desktop LXer Syndicated Linux News 0 04-02-2007 09:31 AM
Booting up hanging on "Finding Module dependcies" Red Hat 9 no_names_left Linux - Newbie 4 02-16-2005 01:39 AM
Installation hangs at "Finding Module Dependencies" on several distros patpawlowski Linux - Newbie 1 01-25-2004 11:25 AM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 11:46 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration