Home / server / Questions / 544300
Accepted
fadedbee
Asked: 2013-10-08 05:08:11 +0800 CST

How to list every file that is written to, on Linux?

  • 772

What is the best way of getting a list of all files which have been written to, since power on?

Is a simple find (with mtime) best for this, or are there other ways?

(find won't list files which are written to, then deleted.)

I'm using Ubuntu Linux 12.04, if that makes a difference.

linux

1 Answers

  1. Best Answer

    I could answer this with special auditd rules tailored to the specific situation, following some metering of a test system/workload, but I don't think that's the most scalable approach... Plus, there's the write load of actually auditing the system :)

    I would instead rely on higher-quality SLC USB flash (versus MLC) for this application. A purpose-built drive like the sTec SLC USB drive would be my first choice, as it's rated for industrial and embedded applications. The characteristics of SLC flash should counter any concerns about workload or device lifespan.

    • 3