Re: [sleuthkit-users] using sorter to recover files from unallocated inodes, not just r emoved ones
Brought to you by:
carrier
From: Brian C. <ca...@ce...> - 2003-07-15 15:28:43
|
Interesting. That mail client removed the '+' from the email. Once again, the '+' was missing and the correct line is: unless ((defined $inode) && ($inode =~ /^[0-9\-]+$/) && brian On Tuesday, July 15, 2003, at 10:20 AM, Brian Carrier wrote: > > > To finish this thread from last week, there is a bug in 'sorter'. The > regular expression that parses the output of 'ils' was missing a ' ' > and therefore some of the entries were not being processed. > > Line 531 should be: > > unless ((defined $inode) && ($inode =~ /^[0-9\-] $/) && > > and not: > > unless ((defined $inode) && ($inode =~ /^[0-9\-]$/) && > > I'm finishing up some new tools for listing disk partitions and would > like > to wait a few days until they are done before I release a new version. > Let me know if you want me to send you a fixed copy of the file before > then. > > brian > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Parasoft > Error proof Web apps, automate testing & more. > Download & eval WebKing and get a free book. > www.parasoft.com/bulletproofapps1 > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |