On Wed, 22 Jun 2005 at 06:32:08PM -0400, Bernd Eckenfels wrote: > In article <[EMAIL PROTECTED]> you wrote: > > You could always run tripwire on the mounted file system, unmount it, > > change your block, remount it, and run a tripwire check. This should > > identify *WHICH* file changed. > > he has only one file and this was unaltered, the question is why.
Perhaps the block that was changed was a free block? -- Phillip Hofmeister -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
