[sleuthkit-users] fls simply reports usage information

[Seth A. <sa...@im...>]

On Thu, Jan 06, 2005 at 05:43:22AM -0500, SecMan wrote:
> Did you dump the image as a drive letter (partition) or as a raw device?

/dev/sda1 on Linux systems is a partition image. I haven't seen any
documentation that suggests that that TSK would handle disk images
better than just the filesystem images. Did I do the wrong thing?

Thanks