[sleuthkit-users] Using dls

[Thanh T. <ttr...@ya...>]

Hi Brian,
According to dls man page:
"By default, dls copies unallocated data blocks only"

Does this mean that dls copy all unallocated data
blocks whether or not the block was once allocated
(i.e deleted)?  Is there a way for dls to copy only
unallocated blocks that associate with deleted stuff
(I don't mean for a particular deleted file but any
deleted file)?  The reason I ask because for large
drive with not much data, most of the unallocated
blocks really are empty. 
Thanks.


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/