[sleuthkit-users] autopsy command line

[Brian C. <ca...@sl...>]

I think I'm going to change the command line arguments for autopsy v2 
and wanted to get some feedback.  Actually, I'm looking for any 
suggestions of changes (even minor ones) that people would like to see 
in v2.

The current method is to give no arguments and it defaults to localhost 
and port 9999:

     # ./autopsy

Or, you can specify just the port:

     # ./autopsy 8000

Or, you can specify the port and remote host:

     # ./autopsy 8000 10.0.0.1

I propose to keep the default method that defaults to 9999 and 
localhost.  The port seems to change the least, so I propose that it is 
easier to specify the remote host (which will be needed for incident 
response) without specifying the port.  Therefore, the following would 
be valid:

     # ./autopsy 10.0.0.1

To change the port, the '-p 8000' flag would be needed.

     # ./autopsy -p 8000 10.0.0.1

Anyone have major issues with that?  This is similar to how ssh and 
telnet work.

While I'm at it, has anyone had issues or conflicts with port 9999?  
Does anyone have a good reason to change it?

brian