TazWake I see you responding to a lot of these posts and just want to say thank you first.
Always pleased to assist where I can.
The question is:
“What is the name of the config file that has been created after 2020-03-03 and is smaller than 28k but larger than 25k?”
I feel like this might be another command other than find but I am not aware of any that can do an option for created date or “birth date” like its listed in the man.
Find seems like the right answer but there are a few complexities to consider.
- I’d try
-newermt first and see if it returned anything useful. The
mtime on Linux is often treated as the creation date.
Linux filesystem time rules are different to Windows which can be confusing. If the FS doesn’t support file creation times (EXT3 for example), then it simply doesn’t exist anyway. No amount of searching or other tools can return the creation date. Even filesystems that do support
crtime (EXT4) this isn’t easy to recover.
You can experiment with this -
stat filename is a good way to see what’s available. You can retrieve the
crtime with a more complex approach - using
debugfs -R stat filename for example. This isn’t something that works well with a broad search across a system, and it still only works if the fs captures creation timestamps.
- The question is asking for config files. I’d double-check that means it has a name with
.confi* as you are excluding files like
httpd.conf with that string. I’d be tempted to use `".conf" as the string to broaden the possible hits.
That said - YMMV. I haven’t done the lab so I don’t know what actually works here. There might be a lot of trial and error.