Re: [sleuthkit-users] Restore a damaged partition
Brought to you by:
carrier
From: Eric Y. <er...@mi...> - 2004-04-07 22:21:33
|
I just realized an important fact which I did not note. The OS is FBSD 5.2 using UFS2 and not UFS1. Does the Sluethkit recognize UFS2? It did not recognize the partition as being a freebsd partition... That is why I could only view the raw data. ----- Original Message ----- From: "Brian Carrier" <ca...@sl...> To: "Eric Yellin" <er...@mi...> Cc: <sle...@li...> Sent: Sunday, April 04, 2004 11:37 AM Subject: Re: [sleuthkit-users] Restore a damaged partition > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > I have a feeling that the problem is not finding the partition, though > > I my > > be wrong. I can see the partition. It seems to be in place and of the > > correct size. > > What devices did you give to Autopsy to examine during the 'Import > Image' process? > > brian > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.4 (Darwin) > > iD8DBQFAcFXSOK1gLsdFTIsRAu/4AJ9iWd8SOlWo9hmGc/JCMrCax1dqugCfQsm5 > nyxm6zppf0rZPkUau3YB9T8= > =0v+2 > -----END PGP SIGNATURE----- > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: IBM Linux Tutorials > Free Linux tutorial presented by Daniel Robbins, President and CEO of > GenToo technologies. Learn everything from fundamentals to system > administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > |