Re: [sleuthkit-users] fls ext2fs_dinode_lookup error

[Brian C. <ca...@sl...>]

On Jun 6, 2005, at 5:13 PM, Ed wrote:

> Hi
>
> I'm trying to recover some deleted files from an ext3 volume group 
> spanned
> across 2 physical disks on a CentOS 4 system.  I've done a dd of the
> volgroup (/dev/mapper/VolGroup00-LogVol00), but when I try to fls this 
> image
> (fls -f linux-ext3 -d image.dd) I get the following error:
>
> /usr/local/sleuthkit/bin/fls: ext2fs_dinode_lookup: Error reading inode
> 386305 from 322233664

This error occurs when it tries to read part of the image file that 
does not exist because the file is too small.  Are you sure the image 
file is the same size as the original spanned volume? Can you send me 
the first 25 or 30 lines of running fsstat on it?  Can you mount it 
read only using loopback?

brian