Re: [sleuthkit-users] RE: Sleuthkit install problem

[Angus M. <an...@n-...>]

On Wednesday 26 May 2004 02:10, you wrote:
> On May 25, 2004, at 6:11 PM, Angus Marshall wrote:
> > Not sure which is the case - but here's a thought (don't scream) - if
> > src/makedefs is modified to change the "-DLINUX2" to read "-DOPENBSD3",
> > sleuthkit seems to compile just fine.
>
> What happens when you examine a >2GB disk?  The custom lseek was added
> in TCT because the lseek with Linux did not seek beyond the 2GB limit.
> So, I guess the test is to see if the syscall was fixed and it now
> works for large files or that change has reverted the code back to the
> limited version.
>
> Test it with the following:
>
> # dls -e -f FILESYSTEM /dev/hdaX > /dev/null
>
> on a large partition.
>
> thanks,
> brian

Thanks Brian - I'll try it this evening when I have created a fresh image for 
testing. Presumably the error message will be obvious if it doesn't work ?