Re: [sleuthkit-users] EXT2 superblock
Brought to you by:
carrier
From: Linux T. <lin...@ya...> - 2004-10-05 04:35:35
|
--- Lisa Muir <34....@gm...> wrote: > Here is the output of gpart: > > > Begin scan... > Possible partition(DOS FAT), size(10mb), > offset(338mb) > End scan. > > Checking partitions... > Partition(Primary DOS with 12 bit FAT): primary > Ok. > > Guessed primary partition table: > Primary partition(1) > type: 001(0x01)(Primary DOS with 12 bit FAT) > size: 10mb #s(20739) s(693126-713864) > chs: (43/37/1)-(44/111/12)d > (43/37/1)-(44/111/12)r > > Primary partition(2) > type: 000(0x00)(unused) > size: 0mb #s(0) s(0-0) > chs: (0/0/0)-(0/0/0)d (0/0/0)-(0/0/0)r > > Primary partition(3) > type: 000(0x00)(unused) > size: 0mb #s(0) s(0-0) > chs: (0/0/0)-(0/0/0)d (0/0/0)-(0/0/0)r > > Primary partition(4) > type: 000(0x00)(unused) > size: 0mb #s(0) s(0-0) > chs: (0/0/0)-(0/0/0)d (0/0/0)-(0/0/0)r > > Which is incorrect, since I know it was definitely > an ext2 partition. > > I didn't have too much time to play with it > today..... > > Lisa- > yes Lisa, but because you dd from another device with different partition. gpart reads that info. -lt __________________________________ Do you Yahoo!? Yahoo! Mail is new and improved - Check it out! http://promotions.yahoo.com/new_mail |