Re: [sleuthkit-users] Minimizing output of blkls

[Theodore P. <te...@gm...>]

On Wed, Apr 8, 2009 at 9:30 AM, Mark Stam <dig...@gm...> wrote:
> I use blkls to find strings in unallocated clusters (sleuthkit for win32)
> As I try to redirect the output of blkls to a database, I have some errors
> because of the output of blkls is too long.
> Is it possible to let blkls make strings with maximum lengths (let's say:
> 255 characters) or is this ridiculous.
>
> Mark

Can you elaborate on what you are doing? The output of blkls is raw
blocks.  Are you processing blkls's output with strings or
srch_strings?

And if you limit the max length, aren't you afraid you'll end up
missing potential matches when you do keyword searches?

Ted