saturn:~ $ ls -1 / | awk '{print "sudo inotifywatch -v -e access -e modify -t 10 -r /"$1}' | sh Establishing watches... Setting up watch(es) on /bin OK, /bin is now being watched. Total of 1 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /boot OK, /boot is now being watched. Total of 3 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /cdrom OK, /cdrom is now being watched. Total of 1 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /dev OK, /dev is now being watched. Total of 76 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. total access modify filename 3 1 2 /dev/ 1 0 1 /dev/pts/ Establishing watches... Setting up watch(es) on /etc OK, /etc is now being watched. Total of 302 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /home OK, /home is now being watched. Total of 7404 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /initrd.img OK, /initrd.img is now being watched. Total of 1 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /lib OK, /lib is now being watched. Total of 651 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. total access filename 22 22 /lib/ Establishing watches... Setting up watch(es) on /lib32 OK, /lib32 is now being watched. Total of 8 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /lib64 OK, /lib64 is now being watched. Total of 651 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. total access filename 22 22 /lib64/ Establishing watches... Setting up watch(es) on /lost+found OK, /lost+found is now being watched. Total of 1 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /media OK, /media is now being watched. Total of 1 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /mnt OK, /mnt is now being watched. Total of 1 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /opt OK, /opt is now being watched. Total of 1 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /proc OK, /proc is now being watched. Total of 3127 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. total access filename 23 23 /proc/ 1 1 /proc/1029/net/ Establishing watches... Setting up watch(es) on /root OK, /root is now being watched. Total of 12 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /sbin OK, /sbin is now being watched. Total of 1 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. total access filename 6 6 /sbin/ Establishing watches... Setting up watch(es) on /selinux OK, /selinux is now being watched. Total of 1 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /srv OK, /srv is now being watched. Total of 1 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /sys OK, /sys is now being watched. Total of 2370 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. total access filename 6 6 /sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0A:00/power_supply/BAT0/ Establishing watches... Setting up watch(es) on /tmp OK, /tmp is now being watched. Total of 13 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. total access modify filename 137 125 12 /tmp/ Establishing watches... Setting up watch(es) on /usr Failed to watch /usr; upper limit on inotify watches reached! Please increase the amount of inotify watches allowed per user via `/proc/sys/fs/inotify/max_user_watches'. Establishing watches... Setting up watch(es) on /var OK, /var is now being watched. Total of 393 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred. Establishing watches... Setting up watch(es) on /vmlinuz OK, /vmlinuz is now being watched. Total of 1 watches. Finished establishing watches, now collecting statistics. Will listen for events for 10 seconds. No events occurred.