Help With 'find' Syntax

[Drew Tomlinson]

----- Original Message ----- 
From: "David Carter-Hitchin" <david at carter-hitchin.clara.co.uk>
To: "Drew Tomlinson" <drew at mykitchentable.net>
Cc: "FreeBSD Questions" <freebsd-questions at freebsd.org>
Sent: Thursday, October 30, 2003 5:55 PM
Subject: Re: Help With 'find' Syntax


> Hi Drew,
>
> This should find all files created or modified on 25th October:
>
> find / -mtime 6 -ls -o -ctime 6 -ls
>
> (As today is 31st October which is 6 days after 25th.  You may need to
> widen your search a little with a seperate search with 7 as the paramter
> as 6 may not catch files that were created over 6 * 24 hours ago (but were
> still on the 25th); not sure about that).

Thank you for your reply.  I tried your suggestion and it seems to get what
I want.  However there are so many little files that I thought I'd modify
the command to:

find /usr \( -mtime 6 -ls -size 100 \) -o \( -ctime 6 -ls -size 100
\) -print

If I understand the '-size' primary correctly, this means I would find files
that are '100 512-byte blocks' in size or '50k'.  Yet I still get output
like this:

762155    2 -r--r--r--    1 root             wheel                 928 Oct
25 15:12 /usr/local/man/man3/pcre_compile.3.gz

762155    2 -r--r--r--    1 root             wheel                 928 Oct
25 15:12 /usr/local/man/man3/pcre_compile.3.gz

(And why is this file listed twice, anyway?)  So I guess my question is "how
can I find files created or modified on Oct. 25 and are larger than <size>?"

Thanks for any help.  This is really confusing to me.

Drew

>
> HTH,
> David
>
> On Wed, 29 Oct 2003, Drew Tomlinson wrote:
>
> > On October 25, my /usr partition lost nearly 50% of it's available
space.
> > This disk hasn't had any significant size changes since I built the
system
> > as it basically serves as a gateway.
> >
> > I'm trying to use the find command to determine what may have been
written
> > to the disk but am not having any luck.  I see primaries such
> > as -atime, -mtime, -ctime, and -newer and have read the man pages but do
not
> > understand what the best combination to find those files.  Basically how
do
> > I use 'find' to show me all file that were created or modified on
October
> > 25?  I've tried commands such as "find /usr \( -newerct 4d \! -newerct
3d
> > \) -print" but nothing is returned.
> >
> > Thanks,
> >
> > Drew
> >
> > _______________________________________________
> > freebsd-questions at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at freebsd.org"
> >
> >
> >
>
>