Jan, You could run 'ls -tl' on the directory /var/cache/apt/archives. The output is sorted by time in descending order. It would be safe to assume that a file dated 8/23/06 is probably an update, while one dated 5/14/04 was probably written to y our disk during installation. HTH. regards......