[sleuthkit-developers] [ sleuthkit-Bugs-3006733 ] FAT Performance Problems

[SourceForge.net <no...@so...>]

Bugs item #3006733, was opened at 2010-05-24 21:55
Message generated for change (Settings changed) made by carrier
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3006733&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: File System Tools
Group: None
>Status: Closed
>Resolution: Fixed
Priority: 5
Private: No
Submitted By: Brian Carrier (carrier)
Assigned to: Brian Carrier (carrier)
Summary: FAT Performance Problems

Initial Comment:
To the Users List:
Hi!

This version still has performance problems with fls on FAT.

When listing the contents of a root directory (D:\) everything is ok.

When listing the contents of a first subdirectory (D:\sub1) everything is ok.

When listing the contents of a second subdirectory (D:\sub1\sub2) it
scans the whole disk.

---
Suhanov Maxim

An image was provided:
http://anti-forensics.ru/tsk3/fat_big.dd.rar

Simson helped to confirm this.

----------------------------------------------------------------------

>Comment By: Brian Carrier (carrier)
Date: 2010-05-24 21:58

Message:
Thanks for the image! Issue was caused because tsk_fs_dir_walk_lcl was not
stopping even when the callback asked it to.  This caused problems when TSK
needed to hunt for the parent directory in a FAT file system and it got
stuck looking for orphan files each time.

Sending        branches/sleuthkit-3.1/NEWS.txt
Sending        branches/sleuthkit-3.1/tsk3/fs/fs_dir.c
Sending        trunk/NEWS.txt
Sending        trunk/tsk3/fs/fs_dir.c
Transmitting file data ....
Committed revision 206.



----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3006733&group_id=55685