Re: [sleuthkit-users] dcat feature request

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Mar 29, 2004, at 9:29 AM, nighty wrote:

> I just found something, but I'm not sure, whether it's a bug.

bug / oversight ... same thing.  This functionality for raw types is 
documented in the man pages etc, but I forgot about it when I added 
support to Autopsy for raw / swap images.  It is now SF bug 925382.

> Therefor I suggest, that it would be fine, to give dcat the capability 
> to
> show a range of units, similar to what dls does, and of course adjust 
> Autopsy
> to this.

I agree with your suggested fix.  I may even make a flag to specify the 
data unit size.

> PS.: It would also be a useful feature, when the user could remove 
> images,
> hosts and cases from Autopsy

Yea, I know.  I'm just paranoid about having 'rm -rf' commands in my 
code.  Hosts and cases are easy to delete by hand because it is just 
the directory that needs to be removed.  There are no config files that 
you have to clean up.

brian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFAaEnGOK1gLsdFTIsRAiQSAJ9RHOJ1IwQFseEmyE8q1ZkPEtdnSACdH4Dg
NUy76AmmIBnTcExLrXR+1EM=
=meXz
-----END PGP SIGNATURE-----