Re: [sleuthkit-users] fls & short names
Brought to you by:
carrier
From: <da...@tp...> - 2005-08-12 11:12:48
|
On Thu, Aug 11, 2005 at 12:23:09PM -0500, Brian Carrier wrote: > I'm in the process of upgrading the unicode and short name handling of > TSK for FAT and NTFS. Currently, fls prints the short (i.e. 8.3) name > of a FAT file in parentheses, but skips the short name for NTFS files. > I'm inclined to change the behavior so that the short FAT name is also > skipped. It can be found from the istat output, but would not be in > the fls output. Anyone have major issues with that and find the short > names useful? Hi Brian, no issues here, I'd love to see this happen. In particular, all entries in the path should show the long name when listing files and directories. I have attached a patch which does just this for fat32, I use this in pyflag. Its a very minimal patch and could potentially truncate the path. Dave > > thanks, > brian > > PS - For those who have asked, yes I realize that I missed the July > 15th issue of the Informer... too many things going on. > > PPS - For those who will be at DFRWS or HTCIA in the next few weeks, I > got some small TSK stickers made up so come track me down if you want > some. > > > > ------------------------------------------------------- > SF.Net email is Sponsored by the Better Software Conference & EXPO > September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices > Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA > Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > |