[sleuthkit-developers] [ sleuthkit-Bugs-3143117 ] fls -rd doesn't recurse into deleted directories

[SourceForge.net <no...@so...>]

Bugs item #3143117, was opened at 2010-12-23 11:56
Message generated for change (Tracker Item Submitted) made by jlehr
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3143117&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: File System Tools
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: John Lehr (jlehr)
Assigned to: Nobody/Anonymous (nobody)
Summary: fls -rd doesn't recurse into deleted directories

Initial Comment:
Platform: Sleuthkit 3.2.0, Debian Testing.  
Caveat:This report is written with the assumption that the inverse behavior of fls -u and fls -d in TSK 3.2.0 is corrected.

Bug: "fls -rd" does not recurse into deleted FAT32 directory, where inverting the flags to "-dr" does.

# fls -r image.dd
d/d 3:	DCIM
+ d/d 1029:	100DSCIM
++ r/r * 2053:	_ICT0001.AVI
++ r/r * 2054:	_ICT0002.AVI
r/r * 6:	New Text Document.txt
r/r * 7:	_ime.txt
...

# fls -rd
r/r * 6:	New Text Document.txt
r/r * 7:	_ime.txt
...

# fls -dr image.dd
r/r * 2053:	DCIM/100DSCIM/_ICT0001.AVI
r/r * 2054:	DCIM/100DSCIM/_ICT0002.AVI
r/r * 6:	New Text Document.txt
r/r * 7:	_ime.txt
...





----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3143117&group_id=55685