Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Apologies in advance for the basic question.

I need to identify the log of mounted/unmounted devices in Unix (including the timestamps when these actions where performed).

I noticed that using the mount command is not very helpful for this purpose, since there is no indication of the timestamps when the mount/unmount operations where performed. Can anyone indicate me a possible alternative?

Thank you in advance! :-)

share|improve this question

There is no such log.

You can sometimes identify when a filesystem was mounted by observing kernel logs, because some filesystem types will reliably log something in there each time a filesystem is mounted. But then again, some filesystem types won't. As for unmounting, I don't think you will find any logs at all.

The last modified time of /etc/mtab (or /etc/mnttab on some systems) will usually give a clue about the last time any mount or mount was performed, but that's about it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.