[sleuthkit-users] Error Parsing File (invalid characters?)

[Stefan K. <sk...@bf...>]

All,

When analyzing an image with Autopsy (v2.2.4, TSK v3.2.0) I'm getting
lots of warnings upon viewing "all deleted files":


Error Parsing File (invalid characters?)
: +++++ r/r 1242-128-1: xxxxxxx.xx1 2009-05-07 14:31:33 (CEST) 
2009-05-07 14:35:34 (CEST) 2009-10-27 10:37:05 (CET) 2009-05-07 14:35:34 
(CEST) 439 0 0
Error Parsing File (invalid characters?)
: +++++ r/r 1245-128-3: xxxxxxx.xx2 2009-05-07 14:31:33 (CEST) 
2009-05-07 14:35:34 (CEST) 2009-10-27 10:37:05 (CET) 2009-05-07 14:35:34 
(CEST) 6617 0 0
Error Parsing File (invalid characters?)
: +++++ r/r 1246-128-3: xxxxxxx.xx3 2010-07-19 09:31:04 (CEST) 
2010-07-19 09:31:04 (CEST) 2010-07-19 09:31:04 (CEST) 2009-05-07 
14:58:12 (CEST) 2128 0 0

Following those warning is the output I'd expect.

I've tried multiple images; same behaviour.

I think (but am not sure) that this has been introduced
with upgrading to TSK 3.2.0.

Hints anyone?

Thanks,

	Stefan.

-- 
Stefan Kelm                   <sk...@bf...>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstrasse 100             Tel: +49-721-96201-1
D-76133 Karlsruhe             Fax: +49-721-96201-99