The "online to offline" comparison has value, just the "offline to
online" comparison does not. More precisely: You never know if any
checksums taken on a running system are reported correctly. But: If you
take an online system (powered up), take checksums of important files or
partitions, and they are the same after the system later becomes offline
(powered down), then they were reported correctly to begin with. Whereas
if they were correct before running it and are then are reported correct
while the system is running, it does not tell you anything.
Would you care to share your solution, Clive?
Currently I take checksums of the partition regularly during operation
and while the system is turned off. The "online to offline" comparison
works fine, whereas the "offline to online" does not always work, hence
this thread.