Skip to content

Instantly share code, notes, and snippets.

@williballenthin
Created October 29, 2013 13:48
Show Gist options
  • Save williballenthin/7214987 to your computer and use it in GitHub Desktop.
Save williballenthin/7214987 to your computer and use it in GitHub Desktop.
List active files on a file system in the [Bodyfile v3 format](http://wiki.sleuthkit.org/index.php?title=Body_file) using the common shell utility `find`.
find . -printf "0|%p|%i|%m|%U|%G|%s|%A@|%T@|%C@|0\n"
@williballenthin
Copy link
Author

Sample output:

libzip-0.11.1/src  » find . -printf "0|%p|%i|%m|%U|%G|%s|%A@|%T@|%C@|0\n" | mactime -b -                
Xxx Xxx 00 0000 00:00:00     4096 ...b 755 1000     1000     11935468 .
                              633 ...b 644 1000     1000     11935479 ./CMakeLists.txt
                             1918 ...b 644 1000     1000     11935480 ./compat.h
                             4797 ...b 644 1000     1000     11935481 ./getopt.c
                             1892 ...b 644 1000     1000     11935482 ./getopt.h
                              372 ...b 644 1000     1000     11935483 ./Makefile.am
                            23334 ...b 644 1000     1000     11935488 ./Makefile.in
                            13211 ...b 644 1000     1000     11935489 ./zipcmp.c
                             7655 ...b 644 1000     1000     11935490 ./zipmerge.c
                             4296 ...b 644 1000     1000     11935491 ./ziptorrent.c
                            22116 ...b 664 1000     1000     11935672 ./Makefile
                             4096 ...b 775 1000     1000     11935773 ./.deps
                             4096 ...b 775 1000     1000     11935774 ./.libs
                            27418 ...b 775 1000     1000     11935775 ./.libs/zipmerge
                            21373 ...b 775 1000     1000     11935776 ./.libs/ziptorrent
                             5106 ...b 664 1000     1000     11935863 ./.deps/zipcmp-zipcmp.Po
                            72768 ...b 664 1000     1000     11935864 ./zipcmp-zipcmp.o
                            44431 ...b 775 1000     1000     11935865 ./.libs/zipcmp
                             5458 ...b 775 1000     1000     11935866 ./zipcmp
                             4923 ...b 664 1000     1000     11935867 ./.deps/zipmerge-zipmerge.Po
                            38880 ...b 664 1000     1000     11935868 ./zipmerge-zipmerge.o
                             5470 ...b 775 1000     1000     11935869 ./zipmerge
                             4988 ...b 664 1000     1000     11935870 ./.deps/ziptorrent-ziptorrent.Po
                            20928 ...b 664 1000     1000     11935871 ./ziptorrent-ziptorrent.o
                             5482 ...b 775 1000     1000     11935872 ./ziptorrent
Tue Mar 19 2013 06:09:51      633 m... 644 1000     1000     11935479 ./CMakeLists.txt
                             1918 m... 644 1000     1000     11935480 ./compat.h
                             4797 m... 644 1000     1000     11935481 ./getopt.c
                             1892 m... 644 1000     1000     11935482 ./getopt.h
                              372 m... 644 1000     1000     11935483 ./Makefile.am
Mon Mar 25 2013 11:41:07    13211 m... 644 1000     1000     11935489 ./zipcmp.c
                             7655 m... 644 1000     1000     11935490 ./zipmerge.c
                             4296 m... 644 1000     1000     11935491 ./ziptorrent.c
Sat Apr 27 2013 16:35:38    23334 m... 644 1000     1000     11935488 ./Makefile.in
Tue Jul 30 2013 09:51:20      633 ..c. 644 1000     1000     11935479 ./CMakeLists.txt
                             1918 ..c. 644 1000     1000     11935480 ./compat.h
                             4797 ..c. 644 1000     1000     11935481 ./getopt.c
                             1892 ..c. 644 1000     1000     11935482 ./getopt.h
                              372 ..c. 644 1000     1000     11935483 ./Makefile.am
                            23334 ..c. 644 1000     1000     11935488 ./Makefile.in
                            13211 ..c. 644 1000     1000     11935489 ./zipcmp.c
                             7655 ..c. 644 1000     1000     11935490 ./zipmerge.c
                             4296 ..c. 644 1000     1000     11935491 ./ziptorrent.c
Tue Jul 30 2013 09:51:30    22116 m.c. 664 1000     1000     11935672 ./Makefile
Tue Jul 30 2013 09:51:45    27418 m.c. 775 1000     1000     11935775 ./.libs/zipmerge
                             5106 m.c. 664 1000     1000     11935863 ./.deps/zipcmp-zipcmp.Po
                            72768 m.c. 664 1000     1000     11935864 ./zipcmp-zipcmp.o
                            44431 m.c. 775 1000     1000     11935865 ./.libs/zipcmp
                             5458 m.c. 775 1000     1000     11935866 ./zipcmp
                             4923 m.c. 664 1000     1000     11935867 ./.deps/zipmerge-zipmerge.Po
                            38880 m.c. 664 1000     1000     11935868 ./zipmerge-zipmerge.o
                             5470 m.c. 775 1000     1000     11935869 ./zipmerge
Tue Jul 30 2013 09:51:46     4096 m.c. 755 1000     1000     11935468 .
                             4096 m.c. 775 1000     1000     11935773 ./.deps
                             4096 m.c. 775 1000     1000     11935774 ./.libs
                            21373 m.c. 775 1000     1000     11935776 ./.libs/ziptorrent
                             4988 m.c. 664 1000     1000     11935870 ./.deps/ziptorrent-ziptorrent.Po
                            20928 m.c. 664 1000     1000     11935871 ./ziptorrent-ziptorrent.o
                             5482 m.c. 775 1000     1000     11935872 ./ziptorrent
Tue Jul 30 2013 09:51:56    27418 .a.. 775 1000     1000     11935775 ./.libs/zipmerge
                            21373 .a.. 775 1000     1000     11935776 ./.libs/ziptorrent
                             5106 .a.. 664 1000     1000     11935863 ./.deps/zipcmp-zipcmp.Po
                            44431 .a.. 775 1000     1000     11935865 ./.libs/zipcmp
                             4923 .a.. 664 1000     1000     11935867 ./.deps/zipmerge-zipmerge.Po
                             4988 .a.. 664 1000     1000     11935870 ./.deps/ziptorrent-ziptorrent.Po
Mon Oct 28 2013 15:54:11     4096 .a.. 755 1000     1000     11935468 .
Mon Oct 28 2013 16:46:00      633 .a.. 644 1000     1000     11935479 ./CMakeLists.txt
                             1918 .a.. 644 1000     1000     11935480 ./compat.h
                             4797 .a.. 644 1000     1000     11935481 ./getopt.c
                             1892 .a.. 644 1000     1000     11935482 ./getopt.h
                              372 .a.. 644 1000     1000     11935483 ./Makefile.am
                            23334 .a.. 644 1000     1000     11935488 ./Makefile.in
                            13211 .a.. 644 1000     1000     11935489 ./zipcmp.c
                             7655 .a.. 644 1000     1000     11935490 ./zipmerge.c
                             4296 .a.. 644 1000     1000     11935491 ./ziptorrent.c
                            22116 .a.. 664 1000     1000     11935672 ./Makefile
                            72768 .a.. 664 1000     1000     11935864 ./zipcmp-zipcmp.o
                             5458 .a.. 775 1000     1000     11935866 ./zipcmp
                            38880 .a.. 664 1000     1000     11935868 ./zipmerge-zipmerge.o
                             5470 .a.. 775 1000     1000     11935869 ./zipmerge
                            20928 .a.. 664 1000     1000     11935871 ./ziptorrent-ziptorrent.o
                             5482 .a.. 775 1000     1000     11935872 ./ziptorrent
Tue Oct 29 2013 09:50:26     4096 .a.. 775 1000     1000     11935773 ./.deps
                             4096 .a.. 775 1000     1000     11935774 ./.libs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment