Re: [sleuthkit-users] Split Image Question

[Brian C. <ca...@sl...>]

Ok, globbing it is.  I was under the impression that globbing did not 
necessarily return in sorted order, but the documentation says that it 
does.  There seem to be two "issues" at this point:

1.  I feel that there should be a maximum command line size, but cannot 
seem to find one.  I just ran some tests that had over 60KB of data in 
arguments (390 file names each over 160 bytes long) and there were no 
problems.  This was on OS X, so I'm not sure if other OSes are 
different.  Anyone know?

2.  There is a maximum number of files that a process may have open.  
On OS X, it seems to be 253.  I am not opening the file until it is 
needed, but if you run 'dls' on the file system then all images will be 
needed. I would rather not develop some form of caching system with 
book keeping and a FIFO scheme.  Do people have over 250 split images?  
That is 160 GB for CD images and over 500GB  for 2 GB images.  (I can't 
imagine anyone burning 250 CDs).  In the future, this limitation will 
probably have to be removed, but I'm assuming that it will be fine for 
the first version.

brian