[sleuthkit-developers] [ sleuthkit-Feature Requests-3519662 ] Native Extent Printing

[SourceForge.net <no...@so...>]

Feature Requests item #3519662, was opened at 2012-04-19 15:06
Message generated for change (Tracker Item Submitted) made by kfairbanks
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477892&aid=3519662&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: API
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: kfairbanks (kfairbanks)
Assigned to: Nobody/Anonymous (nobody)
Summary: Native Extent Printing

Initial Comment:
TSK currently prints data addresses under the notion of fixed sized blocks.  This works for systems with extents, but is not efficient.  It may be better to have a library function that prints extents for file systems that use support them.  This raises the question of how extents should be represented. 

[starting block] - [ending block],
vs
[starting block] : [run length],

This could be probably be handled in the code for each file system, but maybe a tsk_print_extents function would be bettter.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477892&aid=3519662&group_id=55685