Re: [sleuthkit-users] Restore a damaged partition

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Apr 8, 2004, at 8:13 AM, Linux Tard wrote:

> Hi Eric
> I doubt Sleuthkit does recognize UFS2.  It is new, and
> only support in 2.6 exists.

Nope not yet.  TCT supports it though, but only block and inode level 
access.

> But isnt there a version
> of Sleuthkit for FreeBSD?  If so, that should work for
> you.

Sleuthkit runs on FreeBSD, but it won't help you.  Sleuth Kit doesn't 
use any native file system support.  It just needs to read raw sectors 
from an image or raw device and it processes itself.  So, even if your 
system supports the file system, that doesn't mean that TSK will (and 
vice versa).

brian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFAdgXcOK1gLsdFTIsRAjkiAJ0Tcy2SOzHNwI7OGZkZjZ+g+thtsACeOsd1
fJyVH4s9iZBFk9jeuJSs04Y=
=cq2T
-----END PGP SIGNATURE-----