RE: [sleuthkit-users] RE: Sleuthkit install problem

[Chris P. <po...@na...>]

Brian,=20

I issued your dls command on a 40GB NTFS partition and received no =
errors.  I have to admit that I am on a different machine than the one I =
started with, so I will try it again at work when I can (assuming the =
install works there).

Chris.


-----Original Message-----
From:	sle...@li... on behalf of Brian =
Carrier
Sent:	Tue 5/25/2004 7:10 PM
To:	Angus Marshall
Cc:	sle...@li...
Subject:	Re: [sleuthkit-users] RE: Sleuthkit install problem
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On May 25, 2004, at 6:11 PM, Angus Marshall wrote:
> Not sure which is the case - but here's a thought (don't scream) - if
> src/makedefs is modified to change the "-DLINUX2" to read =
"-DOPENBSD3",
> sleuthkit seems to compile just fine.

What happens when you examine a >2GB disk?  The custom lseek was added=20
in TCT because the lseek with Linux did not seek beyond the 2GB limit. =20
So, I guess the test is to see if the syscall was fixed and it now=20
works for large files or that change has reverted the code back to the=20
limited version.

Test it with the following:

# dls -e -f FILESYSTEM /dev/hdaX > /dev/null

on a large partition.

thanks,
brian



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFAs+6DOK1gLsdFTIsRAmtiAJ9AO/4nNDvRD0qFlw1VNBr+p95c3gCfVa76
FOVV9Xg4AMHBkRBFI0ASINg=3D
=3DuUaL
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. =

Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3D3149&alloc_id=3D8166&op=3Dclick
_______________________________________________
sleuthkit-users mailing list
https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
http://www.sleuthkit.org