Re: [sleuthkit-users] RE: Sleuthkit install problem

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On May 25, 2004, at 6:11 PM, Angus Marshall wrote:
> Not sure which is the case - but here's a thought (don't scream) - if
> src/makedefs is modified to change the "-DLINUX2" to read "-DOPENBSD3",
> sleuthkit seems to compile just fine.

What happens when you examine a >2GB disk?  The custom lseek was added 
in TCT because the lseek with Linux did not seek beyond the 2GB limit.  
So, I guess the test is to see if the syscall was fixed and it now 
works for large files or that change has reverted the code back to the 
limited version.

Test it with the following:

# dls -e -f FILESYSTEM /dev/hdaX > /dev/null

on a large partition.

thanks,
brian



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFAs+6DOK1gLsdFTIsRAmtiAJ9AO/4nNDvRD0qFlw1VNBr+p95c3gCfVa76
FOVV9Xg4AMHBkRBFI0ASINg=
=uUaL
-----END PGP SIGNATURE-----