Re: [sleuthkit-users] read error

[Josep M H. <jm...@me...>]

>>
>>>How big exactly is the image?  
>>
>>-rw-r--r--  1 root  wheel  12624842752 Apr  9 20:34 c0t0d0s6-usr.dd
>>
> 
> 
> ..
>  
> 
>>-/d 1471296:    lib/devfsadm/linkmod
>>/usr/local/bin/sleuthkit/bin/fls: read block read error 
>>(8192@12624838656): Unknown error: 0
> 
> 
> It is trying to read 8192 bytes at 12624838656, but there is only 4096 bytes
> left in the image.  So, there are either invalid pointers or you are missing
> part of the image.  

I tranferred again the image and the exact size remains the same.


What is the 'fsstat' output for the image.  That will give
> the total number of blocks in the file system.  As the image size is not a
> multiple of 8192 (the block size), I would guess that you do not have the full
> image.  The 'fsstat' output contains the required info.


/usr/local/bin/sleuthkit/bin/fsstat -f solaris ./c0t0d0s6-usr.dd
FILE SYSTEM INFORMATION
--------------------------------------------
File System Type: FFS
Last Written: Wed Apr  9 15:42:50 2003

META-DATA INFORMATION
--------------------------------------------
Inode Range: 0 - 1477503
Root Directory: 2

CONTENT-DATA INFORMATION
--------------------------------------------
Fragment Range: 0 - 12328947
Block Size: 8192
Fragment Size: 1024

CYLINDER GROUP INFORMATION
--------------------------------------------
Number of Cylinder Groups: 238
Inodes per group: 6208
Fragments per group: 51832

Group 0:
   Inode Range: 0 - 6207
   Fragment Range: 0 - 51831
     Boot Block: 0 - 7
     Super Block: 8 - 9
     Super Block: 16 - 17
     Group Desc: 24 - 24
     Inode Table: 32 - 807
     Data Fragments: 808 - 51831


-------[cut]-------

Group 237:
   Inode Range: 1471296 - 1477503
   Fragment Range: 12284184 - 12328947
     Super Block: 12285864 - 12285865
     Group Desc: 12285872 - 12285872
     Inode Table: 12285880 - 12286655
     Data Fragments: 12284184 - 12285863, 12286656 - 12336015




If needed i can send the full output.

> 
> 
> brian
> 
> 

Thanks ,
Josep M Homs