[sleuthkit-users] istat -b 2 gives blocks 0 0
Brought to you by:
carrier
From: Ed <wh...@dm...> - 2005-06-30 22:59:17
|
Hi I'm trying to restore some files from an ext3 volume group (split into 3 image files) using http://www.sleuthkit.org/sleuthkit/docs/ref_fs.html as a guide. Using fls finds me the directory I'm after: d/d * 3637251: shared/somedir but if I perform: istat -b 2 -f linux-ext3 -i split image1.dd image2.dd image3.dd 367251 istat returns: Direct Blocks: 0 0 Which doesn't help me much. Does anyone have any pointers on how to get this working TIA Ed |