Re: [sleuthkit-users] Autopsy 2.0

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> When I specify an image location as :
>
> /dev/hdd/hdd1/17g.dd
>
> It says it can't find the image file, although the image file
> is defintely there.
>
> My only option that actually worked was to point it to:
>
> /dev/hdd

What operating system are you using?  If this is Linux, then /dev/hdd 
is typically a block device file and it makes sense that you can read 
it.  You shouldn't be able to make files inside of /dev/hdd, so I'm not 
sure how you could have created the files (unless the OS has changed 
the device layout and /dev/hdd/ is actually a directory).

What do you get if you do an 'ls -l' on /dev/hdd/hdd1/17g.dd ?  
Typically you would mount /dev/hdd1 to some directory (/mnt/ say) and 
specify /mnt/17g.dd.  Unless the OS does some type of automounting.

brian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFAaC89OK1gLsdFTIsRAt8kAJ9cjp+dDbuZJzSoc7+lzuUaZfJgMQCfel46
VycU8LliD4EqhS1tzxbqPv0=
=ECt+
-----END PGP SIGNATURE-----