How to take snapshot of the filesystem in linux (files, their sizes only, not their data)

Question

We need to take a snapshot of your linux server. We don't want to backup the data, just a snapshot we can compare against changes.

What kind of changes? Content of files, or just changes in the metadata, like permissions or ownership? — Marcin, May 19 '10 at 12:22
both, i just need to know a file has been messed around with so we can check to see what's changed — gAMBOOKa, May 19 '10 at 12:51

score 4 · Accepted Answer · answered May 19 '10 at 09:19

4

find / -ls > fileinfo.txt

But take a look at tripwire and aide, since that seems to be what you are aiming for anyway. Also note that rpm can check files against checksums and for debian based distributions there is debsums.

answered May 19 '10 at 09:19

ptman

28,394
2
30
45

1

Agree. Probably tripwire and aide are what he looks for – PiL May 19 '10 at 09:29

score 2 · Answer 2 · answered May 19 '10 at 08:08

i would recommend checking for md5 sums of files, and not just file size. however:

find / -printf "%h/%f %s\n" > /some/path/filesize would generate a list of files and their sizes.

you could also do find / | xargs md5sum 2> /dev/null 1> /some/path/file-md5s to generate a list of filenames and their md5 sums.

score 0 · Answer 3 · answered May 19 '10 at 08:58

0

use

du <filesystem mount point>

it should give you size and file in full location

answered May 19 '10 at 08:58

A.Rashad

293
1
5
18

How to take snapshot of the filesystem in linux (files, their sizes only, not their data)

3 Answers3