All, Again, thanks for the feedback. I did ask some data forensics folks for a different perspecitve, but they would typically clone a drive, then run checksums (which would interfere with 'atime' data.), or would create a map of the last change date of all of the file sectors, then diff that with a later map to just see the differences. At least that's how I understand the process as described.
Basically, all that might be well suited to consumer-grade data storage, but not so easy with large RAID filesystems. Thanks for the input, everyone. _______________________________________________ Tech mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
