Re: [sleuthkit-developers] [sleuthkit-users] hdparm new release

[Brian C. <ca...@sl...>]

It looks like the result that TSK got from the system was 0x0FFFFFFF  
and it subtracted one to get the 268435454 number.  That is an error  
code that was not caught...

Is there anyone interested in taking a lead on the disktools?  They  
are fairly independent from the rest of the code base and I have not  
had the time to devote any attention to them. Or, if no one wants to  
look at fixing some of these problems and hdparm provides all of the  
needed data then perhaps disktools should  just be abandoned.

brian



On Nov 12, 2008, at 6:40 PM, Ade wrote:

> Just something I thought might be of interest to the group.   The  
> newest
> version of hdparm has some interesting developments.
>> From http://freshmeat.net/projects/hdparm/? 
>> branch_id=4062&release_id=288158:
>
> *"Changes:*
> Support for Device Configuration Overlay was added, with the new flags
> "--dco-freeze", "--dco-identify", and "--dco-restore"."
>
> I have compared results from disk_stat with hdparm --dco-identify
> command on my home machine.   On my main O/S drive disk_stat  
> reports one
> less sector than hdparm, I guess that disk_stat is counting from zero
> and hdparm counting from one.
>
> On my storage drive, something curious occurs:
> hdparm --dco-identify reports "Real max sectors" as 488397168
>
> Disk_stat on the same disk gives the following output:
> Maximum Disk Sector: 268435454
> Maximum User Sector: 488397167
>
> Again, there is one sector difference between the max number of  
> sectors
> reported by disk_stat and hdparm, but I don't understand how the  
> Maximum
> User Sectors can be larger than the Maximum Disk Sectors.   If I
> understood Issue #20 of the sleuthkit Informer correctly, the Maximum
> User Sector is the number of sectors visible to the user, the Maximum
> Disk Sector is the Maximum User Sector + the number of sectors in the
> HPA.   Can anyone explain the disk_stat output above?  I am using
> disk_stat version 3.0.0b3
>
> Thanks
>
> Adrian Shaw
>
>
>
>
> ---------------------------------------------------------------------- 
> ---
> This SF.Net email is sponsored by the Moblin Your Move Developer's  
> challenge
> Build the coolest Linux based applications with Moblin SDK & win  
> great prizes
> Grand prize is a trip for two to an Open Source event anywhere in  
> the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org