Re: [sleuthkit-users] Overwritten parition and filesystem andsomeAutopsy trouble

[<spa...@gi...>]

OK. I was thinking of standard cookies (i.e. embedded into the HTTP
request body itself).
Anyway: I just receive "document contains no data" with this
modification :(

Ciao,
Christof

----- Original Message -----=20
From: "Matthew M. Shannon" <msh...@th...>
To: "Christof Baumg=E4rtner" <spa...@gi...>
Sent: Wednesday, July 07, 2004 5:13 PM
Subject: Re: [sleuthkit-users] Overwritten parition and filesystem
andsomeAutopsy trouble


Unless required by policy, don't use the cookie restrictions.

What version of Autopsy are you using?

./autopsy -C 9090 [IP Address]

The -C will force the URL to not use the "long number" cookie
restriction.


M

On Wed, 2004-07-07 at 10:48, Christof Baumg=C3=A4rtner wrote:
> I did.
> Actually the URL looks like
> http://192.168.1.150:9999/verylongnumericalstuff/autopsy
>
> Ciao,
> Christof
>
> ----- Original Message -----=20
> From: "Matthew M. Shannon" <msh...@th...>
> To: "Christof Baumg=C3=A4rtner" <spa...@gi...>
> Sent: Wednesday, July 07, 2004 2:18 PM
> Subject: Re: [sleuthkit-users] Overwritten parition and filesystem
and
> someAutopsy trouble
>
>
> Unless I'm not following you correctly, you need to add autopsy to
the
> address line.
>
>
> http://XX.XXX.XX.XXX:8080/autopsy
>
>
> M Shannon
>
>
>
> On Tue, 2004-07-06 at 19:12, Christof Baumg=C3f=C2=A4rtner wrote:
> > Actually it is not a HTTP 403, but a HTTP 200 just saying "Access
> > denied" ;)
> >
> > ----- Original Message -----=20
> > From: "Christof Baumg=C3f=C2=A4rtner" <spa...@gi...>
> > To: <sle...@li...>
> > Sent: Wednesday, July 07, 2004 1:06 AM
> > Subject: [sleuthkit-users] Overwritten parition and filesystem and
> some
> > Autopsy trouble
> >
> >
> > > Hello,
> > > I have a harddisk which has two partitions on it (one of type
0x41,
> > one
> > > of type 0x83 which is Linux ext2). By accident I started a script
> > which
> > > recreated the two partitions, recreated the two filesystems and
> > > recreated the directory structure the same way as it was before.
So
> I
> > > can still mount the ext2 partition and have access to all my
> previous
> > > directories. But now they are empty :(
> > > I tried to search for the inodes of the missing files without
> > success.
> > > How do I actually have to proceed?
> > >
> > > My second question concerns autopsy. I start autopsy with
> "./autopsy
> > > 9999 192.168.1.109" (192.168.1.109 is the IP address of another
> > > machine). I enter the long URL into a browser on the other
machine
> > but
> > > get HTTP 403 denied. Am I missing something?
> > >
> > > Ciao,
> > > Christof
> > >
> > >
> > >
> > > -------------------------------------------------------
> > > This SF.Net email sponsored by Black Hat Briefings & Training.
> > > Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> > > digital self defense, top technical experts, no vendor pitches,
> > > unmatched networking opportunities. Visit www.blackhat.com
> > > _______________________________________________
> > > sleuthkit-users mailing list
> > > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> > > http://www.sleuthkit.org
> > >
> >
> >
> >
> > -------------------------------------------------------
> > This SF.Net email sponsored by Black Hat Briefings & Training.
> > Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> > digital self defense, top technical experts, no vendor pitches,
> > unmatched networking opportunities. Visit www.blackhat.com
> > _______________________________________________
> > sleuthkit-users mailing list
> > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> > http://www.sleuthkit.org
>
>
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by Black Hat Briefings & Training.
> Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> digital self defense, top technical experts, no vendor pitches,
> unmatched networking opportunities. Visit www.blackhat.com
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org