MAC times - Revision history

Joachim Metz at 05:33, 21 July 2012

2012-07-21T05:33:52Z

.FUF at 21:17, 28 October 2008

2008-10-28T21:17:41Z

.FUF at 19:55, 25 October 2008

2008-10-25T19:55:15Z

.FUF at 20:23, 5 October 2008

2008-10-05T20:23:38Z

.FUF at 16:43, 19 April 2008

2008-04-19T16:43:39Z

Alex at 16:15, 24 November 2007

2007-11-24T16:15:12Z

Uwe Hermann at 22:32, 24 March 2006

2006-03-24T22:32:51Z

Uwe Hermann at 07:25, 24 March 2006

2006-03-24T07:25:41Z

New page

...

== External Links ==

* [http://en.wikipedia.org/wiki/MAC_times Wikipedia: MAC times]

@@ Line 1: / Line 1: @@
-'''MAC times''' are timestamps of the latest ''modification'' (mtime), ''access'' (atime) or ''change'' (ctime) of a certain file.
+The term '''MAC times''' refers to the timestamps of the latest ''modification'' (mtime) or last written time, ''access'' (atime) or ''change'' (ctime) of a certain file.
-[[Unix]] systems maintain the historical interpretation of ''ctime'' as being the time when certain file metadata, not its contents, were last changed, such as the file's permissions or owner (e.g. 'This files metadata was changed on 05/05/02 12:15pm').
+[[Unix]] systems maintain the historical interpretation of ''ctime'' as the time when certain file metadata, not its contents, were last changed, such as the file's permissions or owner (e.g. 'This files metadata was changed on 05/05/02 12:15pm').
-[[Windows]] systems are the only systems that use ''ctime'' to mean ''creation time'' (e.g. 'This file was created on 05/05/02 12:15pm'). On NT FAT, create time has a resolution of 10 milliseconds, write time has a resolution of 2 seconds, and access time has a resolution of 1 day. On NTFS, access time has a resolution of 1 hour [http://msdn.microsoft.com/en-us/library/ms724284.aspx].
+[[Windows]] systems are the only systems that use ''birth'' (btime) or creation time (e.g. 'This file was created on 05/05/02 12:15pm').
-== [[NTFS]] ==
+In [[NTFS]] each file has a time stamp for 'Create', 'Modify', 'Access', and 'Entry Modified'. The latter refers to the time when the MFT entry itself was modified. These four values are commonly abbreviated as the 'MACE' values.
-Each file has a time stamp for 'Create', 'Modify', 'Access', and 'Entry Modified'. The latter refers to the time when the MFT entry itself was modified. These four values are commonly abbreviated as the 'MACE' values.
+Other file systems like [[HFS+|HFS]] include different timestamps like e.g. a backup time.
-== Disabling Last Access Time Stamp ==
+== Time resolution ==
 === [[Windows]] ===
-Set the registry key ''HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate'' to ''1''.
+In Windows the access time behavior is controlled by the registry key:
-This setting is default under [[Windows]] Vista.
+Where a value of ''1'' indicates the access time update being disabled.
 === [[Linux]] ===
-Mount [[file system]] with ''noatime'' option.
+In Linux the ''noatime'' mount option indicates the access time update should be disabled.
-−
-== Example ==
 == See Also ==
@@ Line 30: / Line 44: @@
 * [http://en.wikipedia.org/wiki/MAC_times Wikipedia: MAC times]
 * [http://www.winguides.com/registry/display.php/50/ Disable the NTFS Last Access Time Stamp]
 * [http://support.microsoft.com/kb/299648 Microsoft KB 299648: Description of NTFS date and time stamps for files and folders]

@@ Line 3: / Line 3: @@
 [[Unix]] systems maintain the historical interpretation of ''ctime'' as being the time when certain file metadata, not its contents, were last changed, such as the file's permissions or owner (e.g. 'This files metadata was changed on 05/05/02 12:15pm').
-[[Windows]] systems are the only systems that use ''ctime'' to mean ''creation time'' (e.g. 'This file was created on 05/05/02 12:15pm').
+[[Windows]] systems are the only systems that use ''ctime'' to mean ''creation time'' (e.g. 'This file was created on 05/05/02 12:15pm'). On NT FAT, create time has a resolution of 10 milliseconds, write time has a resolution of 2 seconds, and access time has a resolution of 1 day. On NTFS, access time has a resolution of 1 hour [http://msdn.microsoft.com/en-us/library/ms724284.aspx].
 == [[NTFS]] ==

← Older revision		Revision as of 19:55, 25 October 2008
Line 1:		Line 1:
−	'''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.	+	'''MAC times''' are timestamps of the latest ''modification'' (mtime), ''access'' (atime) or ''change'' (ctime) of a certain file.
		+
		+	[[Unix]] systems maintain the historical interpretation of ''ctime'' as being the time when certain file metadata, not its contents, were last changed, such as the file's permissions or owner (e.g. 'This files metadata was changed on 05/05/02 12:15pm').
		+
		+	[[Windows]] systems are the only systems that use ''ctime'' to mean ''creation time'' (e.g. 'This file was created on 05/05/02 12:15pm').
		+
		+	== [[NTFS]] ==
		+
		+	Each file has a time stamp for 'Create', 'Modify', 'Access', and 'Entry Modified'. The latter refers to the time when the MFT entry itself was modified. These four values are commonly abbreviated as the 'MACE' values.

	== Disabling Last Access Time Stamp ==		== Disabling Last Access Time Stamp ==

@@ Line 1: / Line 1: @@
 '''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.
-With Windows Vista, the registry key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate' is set to '1' by default, which means that no last access timestamp will be written at all.
+== Disabling Last Access Time Stamp ==
 == Example ==
 == External Links ==
@@ Line 9: / Line 23: @@
 * [http://en.wikipedia.org/wiki/MAC_times Wikipedia: MAC times]
 * [http://www.winguides.com/registry/display.php/50/ Disable the NTFS Last Access Time Stamp]

← Older revision		Revision as of 16:43, 19 April 2008
Line 1:		Line 1:
	'''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.		'''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.
		+
	With Windows Vista, the registry key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate' is set to '1' by default, which means that no last access timestamp will be written at all.		With Windows Vista, the registry key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate' is set to '1' by default, which means that no last access timestamp will be written at all.

← Older revision		Revision as of 16:15, 24 November 2007
Line 1:		Line 1:
	'''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.		'''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.
		+	With Windows Vista, the registry key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate' is set to '1' by default, which means that no last access timestamp will be written at all.

	== Example ==		== Example ==