[sleuthkit-users] Help: invalid MFT magic error message
Brought to you by:
carrier
From: Paul <es...@ya...> - 2004-07-30 18:39:08
|
Hi, I am getting an error message using Autopsy when I press the link to 'Find Meta Data Address' in the the 'keyword search' results window. I press the link: 'Find Meta Data Address' (in Autopsy) and ..... Result reported in Autopsy is: 'Error getting meta address' Command in Paul.exec.log log file is: Fri Jul 30 17:17:08 2004: '/home/Paul/dl/sleuthkit/sleuthkit-1.71//bin/ifind' -f ntfs -d 1882138 '/mnt/evidence/evlocker/ST/ABCserver/images/imagehdb5.img' The result in the console window is: ifind: entry 16 has an invalid MFT magic: 1 The versions I am using are: Sleuthkit version 1.71 , Autopsy version 2.02 I Got the same error in the previous versions. Any suggestions gratefully received. Cheers Paul. |