What's the easiest way to find out changes made to my computer between two dates/times? For example new files, modified files and deleted files.

I want to find the difference between "my computer after a fresh boot" and "my computer after resuming from hibernation". For some reason, suspend works after a hibernate, but not from a fresh boot!

If I can find the difference, I'm hoping that I can make the change and have suspend work without having to hibernate first.

Thanks for any help or suggestions.

For this level of detail, you might use a HIDS (e.g. aide). Build the db after a fresh boot. The hibernate, resume, and check the system against your pre-built db.

This might require some additional digging once you identify the files that are getting changed. (And you also may discover that there is nothing on your filesystem that is getting changed.)

Thanks for that, this looks like what I need! I have found the following changes after a hibernate. I've had a look through files that look promising (and done the necessary work) but it doesn't help resolve this issue.

Is there something that I have missed or should look more closely at? Or something else that I can try?

---------------------------------------------------
Added files:
---------------------------------------------------

added: /var/run/pm-utils/storage/parameters
added: /var/run/pm-utils/storage/state:console
added: /var/run/pm-utils/storage/parameters.rm
added: /tmp/orbit-jsteel/linc-2416-0-3d103b153719e

---------------------------------------------------
Changed files:
---------------------------------------------------

changed: /var/log/pm-suspend.log
changed: /var/log/debug
changed: /var/log/gdm/:0.log
changed: /var/log/Xorg.0.log
changed: /var/run/avahi-autoipd.eth0.pid
changed: /var/run/pm-utils
changed: /var/run/pm-utils/locks
changed: /var/run/pm-utils/storage
changed: /var/lib/avahi-autoipd
changed: /var/lib/avahi-autoipd/*myMACaddressHERE*
changed: /root
changed: /usr/lib/hal/scripts/2.6.26
changed: /tmp/orbit-jsteel
changed: /home/jsteel/.gnome2/gnome-power-manager
changed: /home/jsteel/.gnome2/gnome-power-manager/profile-3658Q-discharging.csv
changed: /home/jsteel/.gconf/apps/gnome-screensaver
changed: /home/jsteel/.gconfd
changed: /home/jsteel/.gconfd/saved_state