just try # ls -i /usr/sbin/tcpdump # ls -i /usr/sbin/tcpdump.4.5.1 if you get same inode number, it is indeed a hard link, otherwise this file is a duplicate