[sleuthkit-users] Autopsy - FAT32 images problem ?
Brought to you by:
carrier
From: Angus M. <an...@n-...> - 2004-09-12 15:48:03
|
I have a 160Gb partition formatted as FAT32 which has been imaged using dd. I can mount it ro on a loop device on Linux and confirm that is it FAT32, but when I try to symlink the image into the case on Autopsy 2.03 it's reporting that the images is not FAT32. The autopsy shell window reports : "bin/fsstat: FAT Volume too large for analysis" so I guess there's a hard limit set somewhere in sleuthkit. Can this be overcome ? Angus Marshall |