[sleuthkit-users] dcalc - Block too large
Brought to you by:
carrier
From: <dj...@mi...> - 2004-12-09 21:34:26
|
I recently received a "Block too large" error from dcalc while trying to execute dcalc -s 21187952 -f ntfs image.dd image.dd is approximately 20 GB. The 'dls -s' output from which the target fragment was determined resulted in a 15 GB slack space image.. These image sizes don't seem all that excessive, although the slack space is a pretty sizable portion of total image size. (It seems like the OS had been recently re-installed.) What are the size limitations for dcalc? Thanks Dan Jones |