Re: [sleuthkit-users] invalid arguement : fsstat, img_stat

[Brian C. <ca...@sl...>]

On Jan 11, 2006, at 8:00 PM, J B wrote:
>
> Thank you.. at your suggestion, I tried that.  I tried offsets 61,  
> 62, 63, 64 and didn't get anywhere.
>
> I changed the filename to just "old".
>
> #mmls old  //still reports a primary table, unallocated, dos fat16  
> (starting at 63)
>
> interestingly enough,
>
> #fls -r -o 63 -f fat /evidence/old   //works fine, I can even grep  
> JPG as long as I remember unix is case sensitive ;)
>
> There's probably something obvious I'm overlooking with fsstat

That is very strange. Do all of the other tools work?  Have you tried  
to recompile?  I can't say that I have tried Fedora on a PPC, but I  
don't see why some tools would work and others wouldn't.  .   They  
all share the same image opening routines.  Nothing at all is printed  
to stderr with '-v'?

brian