Re: [sleuthkit-users] Time Zone

[Hideaki I. <hi...@po...>]

Brian,

On Thu, 14 Aug 2003 07:46:16 PDT
Brian Carrier <ca...@sl...> wrote:

>> [The Sleuth Kit ver 1.64]
>> $ ./fls -8 -l -f ntfs /home/hideaki/evidence/6gtest/RedHat9/images/thinkpad.dd
>> 
>> r/r 4-128-4:    $AttrDef        2003.08.02 08:33:30 (JST)       2003.08.02 08:33
>> :30 (JST)       2003.08.02 08:33:30 (JST)       2560    0       48
>
>Interesting.  I'm going to need some more information.  What 
>happens if you run 'fls' with '-z JST'?

This is a result experimentally.

$ ./fls -z JST -l -f ntfs /home/hideaki/evidence/6gtest/RedHat9/images/thinkpad.dd
r/r 4-128-4:    $AttrDef        2003.08.01 23:33:30 (JST)       2003.08.01 23:33
:30 (JST)       2003.08.01 23:33:30 (JST)       2560    0       48

When I set -z JST, the time becomes incorrect.

>What did you enter into the Host configuration for the timezone?  

I set JST as of installation.
Do I have to install a system in GMT?

-- 
Hideaki Ihara <hi...@po...>
Port139 URL: http://www.port139.co.jp/
Microsoft MVP (Security)
PGP PUBLIC KEY: http://www.port139.co.jp/pgp/