RE: [sleuthkit-users] Unusual behavior

[Eagle I. S. I. <in...@ea...>]

Brian, 

Actually, the File Analysis window shows no files at all.  

I switched to a 2.4.27 kernel to make sure it wasn't any with the 2.6
kernel, and even tried a fresh install of TSK, but the same results
occurred. 

Before I opened this email, I started a search for an ascii string that I
know exists, to see how it would fare. I'll report back when it completes. 

If there's anything else you'd like me to check, I'm happy to. 

Niall. 



-----Original Message-----
From: Brian Carrier [mailto:ca...@sl...] 
Sent: Sunday, October 24, 2004 9:28 AM
To: Eagle Investigative Services, Inc. 
Cc: sle...@li...
Subject: Re: [sleuthkit-users] Unusual behavior


On Oct 23, 2004, at 9:44 PM, Eagle Investigative Services, Inc. wrote:

> I'm using the latest Sluthkit and Autopsy.
>
> I separated out the partition from a raw image file and symlinked it 
> into Autopsy. It's an NTFS partition.
>
> ...
>
> Any idea what's going on here. I've viewed hundreds of images on this 
> partition with another tool...I was looking for a one step way to 
> thumnail them.......

Are there more files and directories that are shown in the normal file
analysis view?  Or does that have only a few files as well?

brian