Re: [sleuthkit-users] EXT2 superblock

[Lisa M. <34....@gm...>]

Here is the output of gpart: 


Begin scan...
Possible partition(DOS FAT), size(10mb), offset(338mb)
End scan.

Checking partitions...
Partition(Primary DOS with 12 bit FAT): primary 
Ok.

Guessed primary partition table:
Primary partition(1)
   type: 001(0x01)(Primary DOS with 12 bit FAT)
   size: 10mb #s(20739) s(693126-713864)
   chs:  (43/37/1)-(44/111/12)d (43/37/1)-(44/111/12)r

Primary partition(2)
   type: 000(0x00)(unused)
   size: 0mb #s(0) s(0-0)
   chs:  (0/0/0)-(0/0/0)d (0/0/0)-(0/0/0)r

Primary partition(3)
   type: 000(0x00)(unused)
   size: 0mb #s(0) s(0-0)
   chs:  (0/0/0)-(0/0/0)d (0/0/0)-(0/0/0)r

Primary partition(4)
   type: 000(0x00)(unused)
   size: 0mb #s(0) s(0-0)
   chs:  (0/0/0)-(0/0/0)d (0/0/0)-(0/0/0)r

Which is incorrect, since I know it was definitely an ext2 partition.

I didn't have too much time to play with it today.....

Lisa-