Re: [sleuthkit-users] fls core

[Josep M H. <jm...@me...>]

Brian Carrier wrote:
> Hmm.  Can you send me the contents of the 'host.aut' file in the host
> directory?
> 

desc Server
timezone  CET
timeskew  1
image  images/c0t0d0s0-root.dd    solaris    /mnt/host/
body  output/body
timeline  output/mactime-test
timeline  output/mactime-test
body  output/body
body  output/body
body  output/body
body  output/body
body  output/body


> Also, can you run:
> 
> 	# fls -f solaris -la -z CET -s 1 path/c0t0d0s0-root.dd
> 
> Does it core?
> 

Yes , it does.

> 
> brian
> 
> 

Thanks ,
Josep M Homs