TSK 3 no longer allows indirect blocks to be found from 'ifind' or displayed in 'istat'. It could be by adding the indirect blocks to another attribute.
Added using another attriibute type. Checked into trunk.
Sending trunk/CHANGES.txt Sending trunk/tsk3/fs/ext2fs.c Sending trunk/tsk3/fs/ffs.c Sending trunk/tsk3/fs/fs_attrlist.c Sending trunk/tsk3/fs/ifind_lib.c Sending trunk/tsk3/fs/tsk_fs.h Sending trunk/tsk3/fs/unix_misc.c Transmitting file data ....... Committed revision 103.
Log in to post a comment.
Added using another attriibute type. Checked into trunk.
Sending trunk/CHANGES.txt
Sending trunk/tsk3/fs/ext2fs.c
Sending trunk/tsk3/fs/ffs.c
Sending trunk/tsk3/fs/fs_attrlist.c
Sending trunk/tsk3/fs/ifind_lib.c
Sending trunk/tsk3/fs/tsk_fs.h
Sending trunk/tsk3/fs/unix_misc.c
Transmitting file data .......
Committed revision 103.