[sleuthkit-users] Time Zone

[Hideaki I. <hi...@po...>]

Hi All,

I am troubled in a thyme zone.
TSK and Autopsy display a different value in the same thyme zone.
A fls command displays the correct time.
Autopsy generates a gap for nine hours.
Do I have a solution method?


[The Sleuth Kit ver 1.64]
$ ./fls -8 -l -f ntfs /home/hideaki/evidence/6gtest/RedHat9/images/thinkpad.dd

r/r 4-128-4:    $AttrDef        2003.08.02 08:33:30 (JST)       2003.08.02 08:33
:30 (JST)       2003.08.02 08:33:30 (JST)       2560    0       48

[autopsy-1.73]
r / r    $AttrDef    2003.08.01 23:33:30 (JST)    2003.08.01 23:33:30 (JST)    2003.08.01 23:33:30 (JST)    2560    48    0    4-128-4  


Best regards,

-- 
Hideaki Ihara <hi...@po...>
Port139 URL: http://www.port139.co.jp/
Microsoft MVP (Security)
PGP PUBLIC KEY: http://www.port139.co.jp/pgp/