[sleuthkit-developers] [ sleuthkit-Feature Requests-2972620 ] Remove some 0 time entries
Brought to you by:
carrier
From: SourceForge.net <no...@so...> - 2010-03-18 14:37:13
|
Feature Requests item #2972620, was opened at 2010-03-18 09:37 Message generated for change (Tracker Item Submitted) made by carrier You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=477892&aid=2972620&group_id=55685 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Timeline Group: None Status: Open Priority: 5 Private: No Submitted By: Brian Carrier (carrier) Assigned to: Nobody/Anonymous (nobody) Summary: Remove some 0 time entries Initial Comment: Look into methods for suppressing some of the 0 date entries in the timeline output of mactime. Specifically, this came up because not all file systems have a created date, so they have lots of Jan, 1970 entries for 'b' times. Perhaps, some flags or file system-specific settings should exist to suppress some of the times... ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=477892&aid=2972620&group_id=55685 |