From owner-freebsd-questions@FreeBSD.ORG Wed Oct 29 16:45:04 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0073016A4CE for ; Wed, 29 Oct 2003 16:45:04 -0800 (PST) Received: from blacklamb.mykitchentable.net (207-173-254-228.bras01.elk.ca.frontiernet.net [207.173.254.228]) by mx1.FreeBSD.org (Postfix) with ESMTP id 313F243FA3 for ; Wed, 29 Oct 2003 16:45:03 -0800 (PST) (envelope-from drew@mykitchentable.net) Received: from l035522 (unknown [165.107.42.110]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by blacklamb.mykitchentable.net (Postfix) with ESMTP id 3C7773BF38F for ; Wed, 29 Oct 2003 16:45:01 -0800 (PST) Message-ID: <035201c39e7f$0d0d8190$6e2a6ba5@l035522> From: "Drew Tomlinson" To: "FreeBSD Questions" Date: Wed, 29 Oct 2003 16:44:35 -0800 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Subject: Help With 'find' Syntax X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Oct 2003 00:45:04 -0000 On October 25, my /usr partition lost nearly 50% of it's available space. This disk hasn't had any significant size changes since I built the system as it basically serves as a gateway. I'm trying to use the find command to determine what may have been written to the disk but am not having any luck. I see primaries such as -atime, -mtime, -ctime, and -newer and have read the man pages but do not understand what the best combination to find those files. Basically how do I use 'find' to show me all file that were created or modified on October 25? I've tried commands such as "find /usr \( -newerct 4d \! -newerct 3d \) -print" but nothing is returned. Thanks, Drew