LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 10-30-2009, 12:33 PM   #1
jsteel
Member
 
Registered: Mar 2007
Location: England
Distribution: Arch
Posts: 392

Rep: Reputation: 34
How can I find out what's changed?


What's the easiest way to find out changes made to my computer between two dates/times? For example new files, modified files and deleted files.

I want to find the difference between "my computer after a fresh boot" and "my computer after resuming from hibernation". For some reason, suspend works after a hibernate, but not from a fresh boot!

If I can find the difference, I'm hoping that I can make the change and have suspend work without having to hibernate first.

Thanks for any help or suggestions.
 
Old 10-30-2009, 01:51 PM   #2
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
For this level of detail, you might use a HIDS (e.g. aide). Build the db after a fresh boot. The hibernate, resume, and check the system against your pre-built db.

This might require some additional digging once you identify the files that are getting changed. (And you also may discover that there is nothing on your filesystem that is getting changed.)
 
Old 10-31-2009, 05:12 AM   #3
jsteel
Member
 
Registered: Mar 2007
Location: England
Distribution: Arch
Posts: 392

Original Poster
Rep: Reputation: 34
Thanks for that, this looks like what I need! I have found the following changes after a hibernate. I've had a look through files that look promising (and done the necessary work) but it doesn't help resolve this issue.

Is there something that I have missed or should look more closely at? Or something else that I can try?

---------------------------------------------------
Added files:
---------------------------------------------------

added: /var/run/pm-utils/storage/parameters
added: /var/run/pm-utils/storage/state:console
added: /var/run/pm-utils/storage/parameters.rm
added: /tmp/orbit-jsteel/linc-2416-0-3d103b153719e

---------------------------------------------------
Changed files:
---------------------------------------------------

changed: /var/log/pm-suspend.log
changed: /var/log/debug
changed: /var/log/gdm/:0.log
changed: /var/log/Xorg.0.log
changed: /var/run/avahi-autoipd.eth0.pid
changed: /var/run/pm-utils
changed: /var/run/pm-utils/locks
changed: /var/run/pm-utils/storage
changed: /var/lib/avahi-autoipd
changed: /var/lib/avahi-autoipd/*myMACaddressHERE*
changed: /root
changed: /usr/lib/hal/scripts/2.6.26
changed: /tmp/orbit-jsteel
changed: /home/jsteel/.gnome2/gnome-power-manager
changed: /home/jsteel/.gnome2/gnome-power-manager/profile-3658Q-discharging.csv
changed: /home/jsteel/.gconf/apps/gnome-screensaver
changed: /home/jsteel/.gconfd
changed: /home/jsteel/.gconfd/saved_state
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to Find who changed /etc/hosts file yuanjunliang Linux - Server 2 08-17-2009 09:10 AM
Path changed, I cant find where the problem is kramed Fedora 3 03-27-2008 01:25 PM
Installed Ubuntu but it changed my boot loader. I want this changed... mdorries Linux - Distributions 8 05-31-2007 08:13 PM
find: . changed during execution of find suse degraffenried13 Linux - General 3 12-12-2004 07:13 PM
Changed modems: eth0 cant find IP address suggardaddy4242 Linux - Newbie 2 09-09-2004 11:45 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 11:23 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration